# changelog

author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-43
changelog:
  - kvm-configure-add-test-for-libudev.patch [bz#1636185]
  - kvm-qga-linux-report-disk-serial-number.patch [bz#1636185]
  - kvm-qga-linux-return-disk-device-in-guest-get-fsinfo.patch [bz#1636185]
  - kvm-qemu-error-introduce-error-warn-_report_once.patch [bz#1625173]
  - kvm-intel-iommu-start-to-use-error_report_once.patch [bz#1625173]
  - kvm-intel-iommu-replace-more-vtd_err_-traces.patch [bz#1625173]
  - kvm-intel_iommu-introduce-vtd_reset_caches.patch [bz#1625173]
  - kvm-intel_iommu-better-handling-of-dmar-state-switch.patch [bz#1625173]
  - kvm-intel_iommu-move-ce-fetching-out-when-sync-shadow.patch [bz#1625173 bz#1629616]
  - kvm-intel_iommu-handle-invalid-ce-for-shadow-sync.patch [bz#1625173 bz#1629616]
  - kvm-block-remove-bdrv_dirty_bitmap_make_anon.patch [bz#1518989]
  - kvm-block-simplify-code-around-releasing-bitmaps.patch [bz#1518989]
  - kvm-hbitmap-Add-advance-param-to-hbitmap_iter_next.patch [bz#1518989]
  - kvm-test-hbitmap-Add-non-advancing-iter_next-tests.patch [bz#1518989]
  - kvm-block-dirty-bitmap-Add-bdrv_dirty_iter_next_area.patch [bz#1518989]
  - kvm-blockdev-backup-add-bitmap-argument.patch [bz#1518989]
  - kvm-dirty-bitmap-switch-assert-fails-to-errors-in-bdrv_m.patch [bz#1518989]
  - kvm-dirty-bitmap-rename-bdrv_undo_clear_dirty_bitmap.patch [bz#1518989]
  - kvm-dirty-bitmap-make-it-possible-to-restore-bitmap-afte.patch [bz#1518989]
  - kvm-blockdev-rename-block-dirty-bitmap-clear-transaction.patch [bz#1518989]
  - kvm-qapi-add-transaction-support-for-x-block-dirty-bitma.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-add-user_locked-status-checker.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-fix-merge-permissions.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-allow-clear-on-disabled-bitmaps.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-prohibit-enable-disable-on-locke.patch [bz#1518989]
  - kvm-block-backup-prohibit-backup-from-using-in-use-bitma.patch [bz#1518989]
  - kvm-nbd-forbid-use-of-frozen-bitmaps.patch [bz#1518989]
  - kvm-bitmap-Update-count-after-a-merge.patch [bz#1518989]
  - kvm-iotests-169-drop-deprecated-autoload-parameter.patch [bz#1518989]
  - kvm-block-qcow2-improve-error-message-in-qcow2_inactivat.patch [bz#1518989]
  - kvm-bloc-qcow2-drop-dirty_bitmaps_loaded-state-variable.patch [bz#1518989]
  - kvm-dirty-bitmaps-clean-up-bitmaps-loading-and-migration.patch [bz#1518989]
  - kvm-iotests-improve-169.patch [bz#1518989]
  - kvm-iotests-169-add-cases-for-source-vm-resuming.patch [bz#1518989]
  - kvm-pc-dimm-turn-alignment-assert-into-check.patch [bz#1630116]
  - Resolves: bz#1518989
    (RFE: QEMU Incremental live backup)
  - Resolves: bz#1625173
    ([NVMe Device Assignment] Guest could not boot up with q35+iommu)
  - Resolves: bz#1629616
    (boot guest with q35+vIOMMU+ device assignment, qemu terminal shows "qemu-kvm: VFIO_UNMAP_DMA: -22" when return assigned network devices from vfio driver to ixgbe in guest)
  - Resolves: bz#1630116
    (pc_dimm_get_free_addr: assertion failed: (QEMU_ALIGN_UP(address_space_start, align) == address_space_start))
  - Resolves: bz#1636185
    ([RFE] Report disk device name and serial number (qemu-guest-agent on Linux))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-43
changelog:
  - kvm-block-Make-more-block-drivers-compile-time-configura.patch [bz#1598842 bz#1598842]
  - kvm-RHEL8-Add-disable-configure-options-to-qemu-spec-fil.patch [bz#1598842]
  - Resolves: bz#1598842
    (Compile out unused block drivers)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-45
changelog:
  - kvm-target-ppc-add-basic-support-for-PTCR-on-POWER9.patch [bz#1639069]
  - kvm-linux-headers-Update-for-nested-KVM-HV-downstream-on.patch [bz#1639069]
  - kvm-target-ppc-Add-one-reg-id-for-ptcr.patch [bz#1639069]
  - kvm-ppc-spapr_caps-Add-SPAPR_CAP_NESTED_KVM_HV.patch [bz#1639069]
  - kvm-Re-enable-CONFIG_HYPERV_TESTDEV.patch [bz#1651195]
  - kvm-qxl-use-guest_monitor_config-for-local-renderer.patch [bz#1610163]
  - kvm-Declare-cirrus-vga-as-deprecated.patch [bz#1651994]
  - kvm-Do-not-build-bluetooth-support.patch [bz#1654651]
  - kvm-vfio-helpers-Fix-qemu_vfio_open_pci-crash.patch [bz#1645840]
  - kvm-balloon-Allow-multiple-inhibit-users.patch [bz#1650272]
  - kvm-Use-inhibit-to-prevent-ballooning-without-synchr.patch [bz#1650272]
  - kvm-vfio-Inhibit-ballooning-based-on-group-attachment-to.patch [bz#1650272]
  - kvm-vfio-ccw-pci-Allow-devices-to-opt-in-for-ballooning.patch [bz#1650272]
  - kvm-vfio-pci-Handle-subsystem-realpath-returning-NULL.patch [bz#1650272]
  - kvm-vfio-pci-Fix-failure-to-close-file-descriptor-on-err.patch [bz#1650272]
  - kvm-postcopy-Synchronize-usage-of-the-balloon-inhibitor.patch [bz#1650272]
  - Resolves: bz#1610163
    (guest shows border blurred screen with some resolutions when qemu boot with -device qxl-vga ,and guest on rhel7.6 has no  such question)
  - Resolves: bz#1639069
    ([IBM 8.0 FEAT] POWER9 - Nested virtualization in RHEL8.0 KVM for ppc64le - qemu-kvm side)
  - Resolves: bz#1645840
    (Qemu core dump when hotplug nvme:// drive via -blockdev)
  - Resolves: bz#1650272
    (Ballooning is incompatible with vfio assigned devices, but not prevented)
  - Resolves: bz#1651195
    (Re-enable hyperv-testdev device)
  - Resolves: bz#1651994
    (Declare the "Cirrus VGA" device emulation of QEMU as deprecated in RHEL8)
  - Resolves: bz#1654651
    (Qemu: hw: bt: keep bt/* objects from building [rhel-8.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-46
changelog:
  - kvm-qcow2-Give-the-refcount-cache-the-minimum-possible-s.patch [bz#1656507]
  - kvm-docs-Document-the-new-default-sizes-of-the-qcow2-cac.patch [bz#1656507]
  - kvm-qcow2-Fix-Coverity-warning-when-calculating-the-refc.patch [bz#1656507]
  - kvm-include-Add-IEC-binary-prefixes-in-qemu-units.h.patch [bz#1656507]
  - kvm-qcow2-Options-documentation-fixes.patch [bz#1656507]
  - kvm-include-Add-a-lookup-table-of-sizes.patch [bz#1656507]
  - kvm-qcow2-Make-sizes-more-humanly-readable.patch [bz#1656507]
  - kvm-qcow2-Avoid-duplication-in-setting-the-refcount-cach.patch [bz#1656507]
  - kvm-qcow2-Assign-the-L2-cache-relatively-to-the-image-si.patch [bz#1656507]
  - kvm-qcow2-Increase-the-default-upper-limit-on-the-L2-cac.patch [bz#1656507]
  - kvm-qcow2-Resize-the-cache-upon-image-resizing.patch [bz#1656507]
  - kvm-qcow2-Set-the-default-cache-clean-interval-to-10-min.patch [bz#1656507]
  - kvm-qcow2-Explicit-number-replaced-by-a-constant.patch [bz#1656507]
  - kvm-block-backend-Set-werror-rerror-defaults-in-blk_new.patch [bz#1657637]
  - kvm-qcow2-Fix-cache-clean-interval-documentation.patch [bz#1656507]
  - Resolves: bz#1656507
    ([RHEL.8] qcow2 cache is too small)
  - Resolves: bz#1657637
    (Wrong werror default for -device drive=<node-name>)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-47
changelog:
  - kvm-Disable-CONFIG_IPMI-and-CONFIG_I2C-for-ppc64.patch [bz#1640044]
  - kvm-Disable-CONFIG_CAN_BUS-and-CONFIG_CAN_SJA1000.patch [bz#1640042]
  - Resolves: bz#1640042
    (Disable CONFIG_CAN_BUS and CONFIG_CAN_SJA1000 config switches)
  - Resolves: bz#1640044
    (Disable CONFIG_I2C and CONFIG_IPMI in default-configs/ppc64-softmmu.mak)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-2.el8
changelog:
  - kvm-pc-7.5-compat-entries.patch [bz#1655820]
  - kvm-compat-Generic-HW_COMPAT_RHEL7_6.patch [bz#1655820]
  - kvm-pc-PC_RHEL7_6_COMPAT.patch [bz#1655820]
  - kvm-pc-Add-compat-for-pc-i440fx-rhel7.6.0-machine-type.patch [bz#1655820]
  - kvm-pc-Add-pc-q35-8.0.0-machine-type.patch [bz#1655820]
  - kvm-pc-Add-x-migrate-smi-count-off-to-PC_RHEL7_6_COMPAT.patch [bz#1655820]
  - kvm-clear-out-KVM_ASYNC_PF_DELIVERY_AS_PF_VMEXIT-for.patch [bz#1659604]
  - kvm-Add-edk2-Requires-to-qemu-kvm.patch [bz#1660208]
  - Resolves: bz#1655820
    (Can't migarate between rhel8 and rhel7 when guest has device "video")
  - Resolves: bz#1659604
    (8->7 migration failed: qemu-kvm: error: failed to set MSR 0x4b564d02 to 0x27fc13285)
  - Resolves: bz#1660208
    (qemu-kvm: Should depend on the architecture-appropriate guest firmware)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-3.el8
changelog:
  - kvm-redhat-define-pseries-rhel8.0.0-machine-type.patch [bz#1656508]
  - Resolves: bz#1656508
    (Machine types for qemu-kvm based on rebase to qemu-3.1 (ppc64le))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-4.el8
changelog:
  - kvm-hw-s390x-s390-virtio-ccw-Add-machine-types-for-RHEL8.patch [bz#1656510]
  - kvm-spapr-Add-H-Call-H_HOME_NODE_ASSOCIATIVITY.patch [bz#1661967]
  - kvm-redhat-Fixing-.gitpublish-to-include-AV-information.patch []
  - Resolves: bz#1656510
    (Machine types for qemu-kvm based on rebase to qemu-3.1 (s390x))
  - Resolves: bz#1661967
    (Kernel prints the message "VPHN is not supported. Disabling polling...")


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-5.el8
changelog:
  - kvm-virtio-Helper-for-registering-virtio-device-types.patch [bz#1648023]
  - kvm-virtio-Provide-version-specific-variants-of-virtio-P.patch [bz#1648023]
  - kvm-globals-Allow-global-properties-to-be-optional.patch [bz#1648023]
  - kvm-virtio-Make-disable-legacy-disable-modern-compat-pro.patch [bz#1648023]
  - kvm-aarch64-Add-virt-rhel8.0.0-machine-type-for-ARM.patch [bz#1656504]
  - kvm-aarch64-Set-virt-rhel8.0.0-max_cpus-to-512.patch [bz#1656504]
  - kvm-aarch64-Use-256MB-ECAM-region-by-default.patch [bz#1656504]
  - Resolves: bz#1648023
    (Provide separate device types for transitional virtio PCI devices - Fast Train)
  - Resolves: bz#1656504
    (Machine types for qemu-kvm based on rebase to qemu-3.1 (aarch64))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-6.el8
changelog:
  - kvm-spapr-Fix-ibm-max-associativity-domains-property-num.patch [bz#1653114]
  - kvm-cpus-ignore-ESRCH-in-qemu_cpu_kick_thread.patch [bz#1668205]
  - Resolves: bz#1653114
    (Incorrect NUMA nodes passed to qemu-kvm guest in ibm,max-associativity-domains property)
  - Resolves: bz#1668205
    (Guest quit with error when hotunplug cpu)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-7.el8
changelog:
  - kvm-i386-kvm-expose-HV_CPUID_ENLIGHTMENT_INFO.EAX-and-HV.patch [bz#1653511]
  - kvm-i386-kvm-add-a-comment-explaining-why-.feat_names-ar.patch [bz#1653511]
  - Resolves: bz#1653511
    (qemu doesn't report all support cpu features which cause libvirt cannot get the support status of hv_tlbflush)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-9.el8
changelog:
  - kvm-migration-rdma-unregister-fd-handler.patch [bz#1666601]
  - kvm-s390x-tod-Properly-stop-the-KVM-TOD-while-the-guest-.patch [bz#1659127]
  - kvm-hw-s390x-Fix-bad-mask-in-time2tod.patch [bz#1659127]
  - Resolves: bz#1659127
    (Stress guest and stop it, then do live migration, guest hit call trace on destination end)
  - Resolves: bz#1666601
    ([q35] dst qemu core dumped when do rdma migration with Mellanox IB QDR card)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-10.el8
changelog:
  - kvm-throttle-groups-fix-restart-coroutine-iothread-race.patch [bz#1655947]
  - kvm-iotests-add-238-for-throttling-tgm-unregister-iothre.patch [bz#1655947]
  - Resolves: bz#1655947
    (qemu-kvm core dumped after unplug the device which was set io throttling parameters)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-11.el8
changelog:
  - kvm-Fix-fsfreeze-hook-path-in-the-man-page.patch [bz#1644985]
  - kvm-json-Fix-handling-when-not-interpolating.patch [bz#1668244]
  - Resolves: bz#1644985
    (The "fsfreeze-hook" script path shown by command "qemu-ga --help" or "man qemu-ga" is wrong - Fast Train)
  - Resolves: bz#1668244
    (qemu-img: /var/tmp/v2vovl9951f8.qcow2: CURL: Error opening file: The requested URL returned error: 404 Not Found)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-12.el8
changelog:
  - kvm-io-ensure-UNIX-client-doesn-t-unlink-server-socket.patch [bz#1665896]
  - kvm-scsi-disk-Don-t-use-empty-string-as-device-id.patch [bz#1668248]
  - kvm-scsi-disk-Add-device_id-property.patch [bz#1668248]
  - Resolves: bz#1665896
    (VNC unix listener socket is deleted after first client quits)
  - Resolves: bz#1668248
    ("An unknown error has occurred" when using cdrom to install the system with two blockdev disks.(when choose installation destination))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-13.el8
changelog:
  - kvm-Acceptance-tests-add-Linux-initrd-checking-test.patch [bz#1669922]
  - kvm-mmap-alloc-unfold-qemu_ram_mmap.patch [bz#1671519]
  - kvm-mmap-alloc-fix-hugetlbfs-misaligned-length-in-ppc64.patch [bz#1671519]
  - kvm-BZ1653590-Require-at-least-64kiB-pages-for-downstrea.patch [bz#1653590]
  - kvm-block-Fix-invalidate_cache-error-path-for-parent-act.patch [bz#1673014]
  - kvm-virtio-scsi-Move-BlockBackend-back-to-the-main-AioCo.patch [bz#1656276 bz#1662508]
  - kvm-scsi-disk-Acquire-the-AioContext-in-scsi_-_realize.patch [bz#1656276 bz#1662508]
  - kvm-virtio-scsi-Forbid-devices-with-different-iothreads-.patch [bz#1656276 bz#1662508]
  - Resolves: bz#1653590
    ([Fast train]had better stop qemu immediately while guest was making use of an improper page size)
  - Resolves: bz#1656276
    (qemu-kvm core dumped after hotplug the deleted disk with iothread parameter)
  - Resolves: bz#1662508
    (Qemu core dump when start guest with two disks using same drive)
  - Resolves: bz#1669922
    (Backport avocado-qemu tests for QEMU 3.1)
  - Resolves: bz#1671519
    (RHEL8.0 Snapshot3 - qemu doesn't free up hugepage memory when hotplug/hotunplug using memory-backend-file (qemu-kvm))
  - Resolves: bz#1673014
    (Local VM and migrated VM on the same host can run with same RAW file as visual disk source while without shareable configured or lock manager enabled)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-14.el8
changelog:
  - kvm-doc-fix-the-configuration-path.patch [bz#1644985]
  - Resolves: bz#1644985
    (The "fsfreeze-hook" script path shown by command "qemu-ga --help" or "man qemu-ga" is wrong - Fast Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-15.el8
changelog:
  - kvm-Add-raw-qcow2-nbd-and-luks-iotests-to-run-during-the.patch [bz#1664855]
  - kvm-Introduce-the-qemu-kvm-tests-rpm.patch [bz#1669924]
  - Resolves: bz#1664855
    (Run iotests in qemu-kvm build %check phase)
  - Resolves: bz#1669924
    (qemu-kvm packaging: Package the avocado_qemu tests and qemu-iotests in a new rpm)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-16.el8
changelog:
  - kvm-fdc-Revert-downstream-disablement-of-device-floppy.patch [bz#1664997]
  - kvm-fdc-Restrict-floppy-controllers-to-RHEL-7-machine-ty.patch [bz#1664997]
  - Resolves: bz#1664997
    (Restrict floppy device to RHEL-7 machine types)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-17.el8
changelog:
  - kvm-block-Apply-auto-read-only-for-ro-whitelist-drivers.patch [bz#1678968]
  - Resolves: bz#1678968
    (-blockdev: auto-read-only is ineffective for drivers on read-only whitelist)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-18.el8
changelog:
  - kvm-target-i386-Disable-MPX-support-on-named-CPU-models.patch [bz#1661030]
  - kvm-i386-remove-the-new-CPUID-PCONFIG-from-Icelake-Serve.patch [bz#1661515]
  - kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-named-CPU-mo.patch [bz#1661515]
  - kvm-Revert-i386-Add-CPUID-bit-for-PCONFIG.patch [bz#1661515]
  - Resolves: bz#1661030
    (Remove MPX support from 8.0 machine types)
  - Resolves: bz#1661515
    (Remove PCONFIG and INTEL_PT from Icelake-* CPU models)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-19.el8
changelog:
  - kvm-migration-Fix-cancel-state.patch [bz#1608649]
  - kvm-migration-rdma-Fix-qemu_rdma_cleanup-null-check.patch [bz#1608649]
  - Resolves: bz#1608649
    (Query-migrate get "failed" status after migrate-cancel)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-20.el8
changelog:
  - kvm-i386-Add-stibp-flag-name.patch [bz#1686260]
  - Resolves: bz#1686260
    (stibp is missing on qemu 3.0 and qemu 3.1)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-21.el8
changelog:
  - kvm-Remove-7-qcow2-and-luks-iotests-that-are-taking-25-s.patch [bz#1683473]
  - kvm-spapr-fix-out-of-bounds-write-in-spapr_populate_drme.patch [bz#1674438]
  - kvm-qcow2-include-LUKS-payload-overhead-in-qemu-img-meas.patch [bz#1655065]
  - kvm-iotests-add-LUKS-payload-overhead-to-178-qemu-img-me.patch [bz#1655065]
  - kvm-vnc-detect-and-optimize-pageflips.patch [bz#1666206]
  - kvm-Load-kvm-module-during-boot.patch [bz#1676907 bz#1685995]
  - kvm-hostmem-file-reject-invalid-pmem-file-sizes.patch [bz#1669053]
  - kvm-iotests-Fix-test-200-on-s390x-without-virtio-pci.patch [bz#1687582]
  - kvm-block-file-posix-do-not-fail-on-unlock-bytes.patch [bz#1652572]
  - Resolves: bz#1652572
    (QEMU core dumped if stop nfs service during migration)
  - Resolves: bz#1655065
    ([rhel.8.0][fast train]'qemu-img measure' size does not match the real allocated size for luks-inside-qcow2 image)
  - Resolves: bz#1666206
    (vnc server should detect page-flips and avoid sending fullscreen updates then.)
  - Resolves: bz#1669053
    (Guest call trace when boot with nvdimm device backed by /dev/dax)
  - Resolves: bz#1674438
    (RHEL8.0 - Guest reboot fails after memory hotplug multiple times (kvm))
  - Resolves: bz#1676907
    (/dev/kvm device exists but kernel module is not loaded on boot up causing VM start to fail in libvirt)
  - Resolves: bz#1683473
    (Remove 7 qcow2 & luks iotests from rhel8 fast train build %check phase)
  - Resolves: bz#1685995
    (/dev/kvm device exists but kernel module is not loaded on boot up causing VM start to fail in libvirt)
  - Resolves: bz#1687582
    (QEMU IOTEST 200 fails with 'virtio-scsi-pci is not a valid device model name')


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-22.el8
changelog:
  - kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1687578]
  - kvm-i386-Make-arch_capabilities-migratable.patch [bz#1687578]
  - Resolves: bz#1687578
    (Incorrect CVE vulnerabilities reported on Cascade Lake cpus)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-23.el8
changelog:
  - kvm-device_tree-Fix-integer-overflowing-in-load_device_t.patch [bz#1693173]
  - Resolves: bz#1693173
    (CVE-2018-20815 qemu-kvm: QEMU: device_tree: heap buffer overflow while loading device tree blob [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-24.el8
changelog:
  - kvm-x86-host-phys-bits-limit-option.patch [bz#1688915]
  - kvm-rhel-Set-host-phys-bits-limit-48-on-rhel-machine-typ.patch [bz#1688915]
  - Resolves: bz#1688915
    ([Intel 8.0 Alpha] physical bits should  <= 48  when host with 5level paging &EPT5 and qemu command with "-cpu qemu64" parameters.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-25.el8
changelog:
  - kvm-redhat-enable-tpmdev-passthrough.patch [bz#1688312]
  - kvm-exec-Only-count-mapped-memory-backends-for-qemu_getr.patch [bz#1680492]
  - kvm-Enable-libpmem-to-support-nvdimm.patch [bz#1705149]
  - Resolves: bz#1680492
    (Qemu quits suddenly while system_reset after hot-plugging unsupported memory by compatible guest on P9 with 1G huge page set)
  - Resolves: bz#1688312
    ([RFE] enable TPM passthrough at compile time (qemu-kvm))
  - Resolves: bz#1705149
    (libpmem support is not enabled in qemu-kvm)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-26.el8
changelog:
  - kvm-target-ppc-spapr-Add-SPAPR_CAP_LARGE_DECREMENTER.patch [bz#1698711]
  - kvm-target-ppc-spapr-Add-workaround-option-to-SPAPR_CAP_.patch [bz#1698711]
  - kvm-target-ppc-spapr-Add-SPAPR_CAP_CCF_ASSIST.patch [bz#1698711]
  - kvm-target-ppc-tcg-make-spapr_caps-apply-cap-cfpc-sbbc-i.patch [bz#1698711]
  - kvm-target-ppc-spapr-Enable-mitigations-by-default-for-p.patch [bz#1698711]
  - kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1693076]
  - kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1693076]
  - Resolves: bz#1693076
    (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-av-8])
  - Resolves: bz#1698711
    (Enable Spectre / Meltdown mitigations by default in pseries-rhel8.0.0 machine type)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.0.0-2.el8
changelog:
  - kvm-target-i386-define-md-clear-bit.patch [bz#1703297 bz#1703304 bz#1703310 bz#1707274]
  - Resolves: bz#1703297
    (CVE-2018-12126 virt:8.0.0/qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling (MSBDS) [rhel-av-8])
  - Resolves: bz#1703304
    (CVE-2018-12130 virt:8.0.0/qemu-kvm: hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS) [rhel-av-8])
  - Resolves: bz#1703310
    (CVE-2018-12127 virt:8.0.0/qemu-kvm: hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS) [rhel-av-8])
  - Resolves: bz#1707274
    (CVE-2019-11091 virt:8.0.0/qemu-kvm: hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM) [rhel-av-8.1.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.0.0-3.el8
changelog:
  - kvm-redhat-fix-cut-n-paste-garbage-in-hw_compat-comments.patch [bz#1709726]
  - kvm-compat-Generic-hw_compat_rhel_8_0.patch [bz#1709726]
  - kvm-redhat-sync-pseries-rhel7.6.0-with-rhel-av-8.0.1.patch [bz#1709726]
  - kvm-redhat-define-pseries-rhel8.1.0-machine-type.patch [bz#1709726]
  - Resolves: bz#1709726
    (Forward and backward migration failed with "qemu-kvm: error while loading state for instance 0x0 of device 'spapr'")


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.0.0-4.el8
changelog:
  - kvm-Disable-VXHS-support.patch [bz#1714937]
  - kvm-aarch64-Add-virt-rhel8.1.0-machine-type-for-ARM.patch [bz#1713735]
  - kvm-aarch64-Allow-ARM-VIRT-iommu-option-in-RHEL8.1-machi.patch [bz#1713735]
  - kvm-usb-call-reset-handler-before-updating-state.patch [bz#1713679]
  - kvm-usb-host-skip-reset-for-untouched-devices.patch [bz#1713679]
  - kvm-usb-host-avoid-libusb_set_configuration-calls.patch [bz#1713679]
  - kvm-aarch64-Compile-out-IOH3420.patch [bz#1627283]
  - kvm-vl-Fix-drive-blockdev-persistent-reservation-managem.patch [bz#1714891]
  - kvm-vl-Document-why-objects-are-delayed.patch [bz#1714891]
  - Resolves: bz#1627283
    (Compile out IOH3420 on aarch64)
  - Resolves: bz#1713679
    (Detached device when trying to upgrade USB device firmware when in doing USB Passthrough via QEMU)
  - Resolves: bz#1713735
    (Allow ARM VIRT iommu option in RHEL8.1 machine)
  - Resolves: bz#1714891
    (Guest with persistent reservation manager for a disk fails to start)
  - Resolves: bz#1714937
    (Disable VXHS support)


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.0.0-5.el8
changelog:
  - kvm-qemu-kvm.spec-bump-libseccomp-2.4.0.patch [bz#1720306]
  - kvm-qxl-check-release-info-object.patch [bz#1712717]
  - kvm-target-i386-add-MDS-NO-feature.patch [bz#1722839]
  - kvm-block-file-posix-Unaligned-O_DIRECT-block-status.patch [bz#1588356]
  - kvm-iotests-Test-unaligned-raw-images-with-O_DIRECT.patch [bz#1588356]
  - kvm-rh-set-CONFIG_BOCHS_DISPLAY-y-for-x86.patch [bz#1707118]
  - Resolves: bz#1588356
    (qemu crashed on the source host when do storage migration with source qcow2 disk created by 'qemu-img')
  - Resolves: bz#1707118
    (enable device: bochs-display (QEMU))
  - Resolves: bz#1712717
    (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-av-8])
  - Resolves: bz#1720306
    (VM failed to start with error "failed to install seccomp syscall filter in the kernel")
  - Resolves: bz#1722839
    ([Intel 8.1 FEAT] MDS_NO exposure to guest - Fast Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.0.0-6.el8
changelog:
  - kvm-x86_64-rh-devices-add-missing-TPM-passthrough.patch [bz#1519013]
  - kvm-x86_64-rh-devices-enable-TPM-emulation.patch [bz#1519013]
  - kvm-vfio-increase-the-cap-on-number-of-assigned-devices-.patch [bz#1719823]
  - Resolves: bz#1519013
    ([RFE] QEMU Software TPM support (vTPM, or TPM emulation))
  - Resolves: bz#1719823
    ([RHEL 8.1] [RFE] increase the maximum of vfio devices to more than 32 in qemu-kvm)


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.1.0-1.el8
changelog:
  - Rebase to qemu 4.1.0 rc4 [bz#1705235]
  - Resolves: bz#1705235
    (Rebase qemu-kvm for RHEL-AV 8.1.0)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-2.el8
changelog:
  - kvm-spec-Update-seavgabios-dependency.patch [bz#1725664]
  - kvm-pc-Don-t-make-die-id-mandatory-unless-necessary.patch [bz#1741451]
  - kvm-display-bochs-fix-pcie-support.patch [bz#1733977 bz#1740692]
  - kvm-spapr-Reset-CAS-IRQ-subsystem-after-devices.patch [bz#1733977]
  - kvm-spapr-xive-Fix-migration-of-hot-plugged-CPUs.patch [bz#1733977]
  - kvm-riscv-roms-Fix-make-rules-for-building-sifive_u-bios.patch [bz#1733977 bz#1740692]
  - kvm-Update-version-for-v4.1.0-release.patch [bz#1733977 bz#1740692]
  - Resolves: bz#1725664
    (Update seabios dependency)
  - Resolves: bz#1733977
    (Qemu core dumped: /home/ngu/qemu/hw/intc/xics_kvm.c:321: ics_kvm_set_irq: Assertion `kernel_xics_fd != -1' failed)
  - Resolves: bz#1740692
    (Backport QEMU 4.1.0 rc5 & ga patches)
  - Resolves: bz#1741451
    (Failed to hot-plug vcpus)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-3.el8
changelog:
  - kvm-x86-machine-types-pc_rhel_8_0_compat.patch [bz#1719649]
  - kvm-x86-machine-types-q35-Fixup-units_per_default_bus.patch [bz#1719649]
  - kvm-x86-machine-types-Fixup-dynamic-sysbus-entries.patch [bz#1719649]
  - kvm-x86-machine-types-add-pc-q35-rhel8.1.0.patch [bz#1719649]
  - kvm-machine-types-Update-hw_compat_rhel_8_0-from-hw_comp.patch [bz#1719649]
  - kvm-virtio-Make-disable-legacy-disable-modern-compat-pro.patch [bz#1719649]
  - Resolves: bz#1719649
    (8.1 machine type for x86)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-4.el8
changelog:
  - kvm-RHEL-disable-hostmem-memfd.patch [bz#1738626 bz#1740797]
  - Resolves: bz#1738626
    (Disable memfd in QEMU)
  - Resolves: bz#1740797
    (Disable memfd in QEMU)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-5.el8
changelog:
  - kvm-redhat-s390x-Rename-s390-ccw-virtio-rhel8.0.0-to-s39.patch [bz#1693772]
  - kvm-redhat-s390x-Add-proper-compatibility-options-for-th.patch [bz#1693772]
  - kvm-enable-virgl.patch [bz#1559740]
  - kvm-redhat-update-pseries-rhel8.1.0-machine-type.patch [bz#1744170]
  - kvm-Do-not-run-iotests-on-brew-build.patch [bz#1742197 bz#1742819]
  - Resolves: bz#1559740
    ([RFE] Enable virgl as TechPreview (qemu))
  - Resolves: bz#1693772
    ([IBM zKVM] RHEL AV 8.1.0 machine type update for s390x)
  - Resolves: bz#1742197
    (Remove iotests from qemu-kvm builds [RHEL AV 8.1.0])
  - Resolves: bz#1742819
    (Remove iotests from qemu-kvm builds [RHEL 8.1.0])
  - Resolves: bz#1744170
    ([IBM Power] New 8.1.0 machine type for pseries)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-6.el8
changelog:
  - kvm-memory-Refactor-memory_region_clear_coalescing.patch [bz#1743142]
  - kvm-memory-Split-zones-when-do-coalesced_io_del.patch [bz#1743142]
  - kvm-memory-Remove-has_coalesced_range-counter.patch [bz#1743142]
  - kvm-memory-Fix-up-memory_region_-add-del-_coalescing.patch [bz#1743142]
  - kvm-enable-virgl-for-real-this-time.patch [bz#1559740]
  - Resolves: bz#1559740
    ([RFE] Enable virgl as TechPreview (qemu))
  - Resolves: bz#1743142
    (Boot guest with multiple e1000 devices, qemu will crash after several guest reboots: kvm_mem_ioeventfd_add: error adding ioeventfd: No space left on device (28))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-7.el8
changelog:
  - kvm-trace-Clarify-DTrace-SystemTap-help-message.patch [bz#1516220]
  - kvm-socket-Add-backlog-parameter-to-socket_listen.patch [bz#1726898]
  - kvm-socket-Add-num-connections-to-qio_channel_socket_syn.patch [bz#1726898]
  - kvm-socket-Add-num-connections-to-qio_channel_socket_asy.patch [bz#1726898]
  - kvm-socket-Add-num-connections-to-qio_net_listener_open_.patch [bz#1726898]
  - kvm-multifd-Use-number-of-channels-as-listen-backlog.patch [bz#1726898]
  - kvm-pseries-Fix-compat_pvr-on-reset.patch [bz#1744107]
  - kvm-spapr-Set-compat-mode-in-spapr_core_plug.patch [bz#1744107]
  - Resolves: bz#1516220
    (-trace help prints an incomplete list of trace events)
  - Resolves: bz#1726898
    (Parallel migration fails with error "Unable to write to socket: Connection reset by peer" now and then)
  - Resolves: bz#1744107
    (Migration from P8(qemu4.1) to P9(qemu4.1), after migration, qemu crash on destination with error message "qemu-kvm: error while loading state for instance 0x1 of device 'cpu'")


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-8.el8
changelog:
  - kvm-migration-Do-not-re-read-the-clock-on-pre_save-in-ca.patch [bz#1747836]
  - kvm-ehci-fix-queue-dev-null-ptr-dereference.patch [bz#1746790]
  - kvm-spapr-Use-SHUTDOWN_CAUSE_SUBSYSTEM_RESET-for-CAS-reb.patch [bz#1743477]
  - kvm-file-posix-Handle-undetectable-alignment.patch [bz#1749134]
  - kvm-block-posix-Always-allocate-the-first-block.patch [bz#1749134]
  - kvm-iotests-Test-allocate_first_block-with-O_DIRECT.patch [bz#1749134]
  - Resolves: bz#1743477
    (Since bd94bc06479a "spapr: change default interrupt mode to 'dual'", QEMU resets the machine to select the appropriate interrupt controller. And -no-reboot prevents that.)
  - Resolves: bz#1746790
    (qemu core dump while migrate from RHEL7.6 to RHEL8.1)
  - Resolves: bz#1747836
    (Call traces after guest migration due to incorrect handling of the timebase)
  - Resolves: bz#1749134
    (I/O error when virtio-blk disk is backed by a raw image on 4k disk)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-9.el8
changelog:
  - kvm-migration-always-initialise-ram_counters-for-a-new-m.patch [bz#1734316]
  - kvm-migration-add-qemu_file_update_transfer-interface.patch [bz#1734316]
  - kvm-migration-add-speed-limit-for-multifd-migration.patch [bz#1734316]
  - kvm-migration-update-ram_counters-for-multifd-sync-packe.patch [bz#1734316]
  - kvm-spapr-pci-Consolidate-de-allocation-of-MSIs.patch [bz#1750200]
  - kvm-spapr-pci-Free-MSIs-during-reset.patch [bz#1750200]
  - Resolves: bz#1734316
    (multifd migration does not honour speed limits, consumes entire bandwidth of NIC)
  - Resolves: bz#1750200
    ([RHEL8.1][QEMU4.1]boot up guest with vf device,then system_reset guest,error prompt(qemu-kvm: Can't allocate MSIs for device 2800: IRQ 4904 is not free))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-10.el8
changelog:
  - kvm-spapr-xive-Mask-the-EAS-when-allocating-an-IRQ.patch [bz#1748725]
  - kvm-block-create-Do-not-abort-if-a-block-driver-is-not-a.patch [bz#1746267]
  - kvm-virtio-blk-Cancel-the-pending-BH-when-the-dataplane-.patch [bz#1717321]
  - kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749737]
  - Resolves: bz#1717321
    (qemu-kvm core dumped when repeat "system_reset" multiple times during guest boot)
  - Resolves: bz#1746267
    (qemu coredump: qemu-kvm: block/create.c:68: qmp_blockdev_create: Assertion `drv' failed)
  - Resolves: bz#1748725
    ([ppc][migration][v6.3-rc1-p1ce8930]basic migration failed with "qemu-kvm: KVM_SET_DEVICE_ATTR failed: Group 3 attr 0x0000000000001309: Device or resource busy")
  - Resolves: bz#1749737
    (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-11.el8
changelog:
  - kvm-blockjob-update-nodes-head-while-removing-all-bdrv.patch [bz#1746631]
  - kvm-hostmem-file-fix-pmem-file-size-check.patch [bz#1724008 bz#1736788]
  - kvm-memory-fetch-pmem-size-in-get_file_size.patch [bz#1724008 bz#1736788]
  - kvm-pr-manager-Fix-invalid-g_free-crash-bug.patch [bz#1753992]
  - Resolves: bz#1724008
    (QEMU core dumped "memory_region_get_ram_ptr: Assertion `mr->ram_block' failed")
  - Resolves: bz#1736788
    (QEMU core dumped if boot guest with nvdimm backed by /dev/dax0.0 and option pmem=off)
  - Resolves: bz#1746631
    (Qemu core dump when do block commit under stress)
  - Resolves: bz#1753992
    (core dump when testing persistent reservation in guest)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-12.el8
changelog:
  - kvm-block-Use-QEMU_IS_ALIGNED.patch [bz#1745922]
  - kvm-block-qcow2-Fix-corruption-introduced-by-commit-8ac0.patch [bz#1745922]
  - kvm-block-qcow2-refactor-encryption-code.patch [bz#1745922]
  - kvm-qemu-iotests-Add-test-for-bz-1745922.patch [bz#1745922]
  - Resolves: bz#1745922
    (Luks-inside-qcow2 snapshot cannot boot after 'qemu-img rebase')


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-13.el8
changelog:
  - kvm-nbd-server-attach-client-channel-to-the-export-s-Aio.patch [bz#1748253]
  - kvm-virtio-blk-schedule-virtio_notify_config-to-run-on-m.patch [bz#1744955]
  - Resolves: bz#1744955
    (Qemu hang when block resize a qcow2 image)
  - Resolves: bz#1748253
    (QEMU crashes (core dump) when using the integrated NDB server with data-plane)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-14.el8
changelog:
  - kvm-Revert-qcow2-skip-writing-zero-buffers-to-empty-COW-.patch [bz#1751934]
  - kvm-coroutine-Add-qemu_co_mutex_assert_locked.patch [bz#1764721]
  - kvm-qcow2-Fix-corruption-bug-in-qcow2_detect_metadata_pr.patch [bz#1764721]
  - Resolves: bz#1751934
    (Fail to install guest when xfs is the host filesystem)
  - Resolves: bz#1764721
    (qcow2 image corruption due to incorrect locking in preallocation detection)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-15.el8
changelog:
  - kvm-virtio-blk-Add-blk_drain-to-virtio_blk_device_unreal.patch [bz#1706759]
  - kvm-Revert-qcow2-skip-writing-zero-buffers-to-empty-COW-.patch [bz#1772473]
  - kvm-coroutine-Add-qemu_co_mutex_assert_locked.patch [bz#1772473]
  - kvm-qcow2-Fix-corruption-bug-in-qcow2_detect_metadata_pr.patch [bz#1772473]
  - Resolves: bz#1706759
    (qemu core dump when unplug a 16T GPT type disk from win2019 guest)
  - Resolves: bz#1772473
    (Import fixes from 8.1.0 into 8.1.1 branch)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-16.el8
changelog:
  - kvm-curl-Keep-pointer-to-the-CURLState-in-CURLSocket.patch [bz#1745209]
  - kvm-curl-Keep-socket-until-the-end-of-curl_sock_cb.patch [bz#1745209]
  - kvm-curl-Check-completion-in-curl_multi_do.patch [bz#1745209]
  - kvm-curl-Pass-CURLSocket-to-curl_multi_do.patch [bz#1745209]
  - kvm-curl-Report-only-ready-sockets.patch [bz#1745209]
  - kvm-curl-Handle-success-in-multi_check_completion.patch [bz#1745209]
  - kvm-curl-Check-curl_multi_add_handle-s-return-code.patch [bz#1745209]
  - kvm-vhost-user-save-features-if-the-char-dev-is-closed.patch [bz#1738768]
  - kvm-block-snapshot-Restrict-set-of-snapshot-nodes.patch [bz#1658981]
  - kvm-iotests-Test-internal-snapshots-with-blockdev.patch [bz#1658981]
  - kvm-qapi-Add-feature-flags-to-commands-in-qapi-introspec.patch [bz#1658981]
  - kvm-qapi-Allow-introspecting-fix-for-savevm-s-cooperatio.patch [bz#1658981]
  - kvm-block-Remove-backing-null-from-bs-explicit_-options.patch [bz#1773925]
  - kvm-iotests-Test-multiple-blockdev-snapshot-calls.patch [bz#1773925]
  - Resolves: bz#1658981
    (qemu failed to create internal snapshot via 'savevm' when using blockdev)
  - Resolves: bz#1738768
    (Guest fails to recover receiving packets after vhost-user reconnect)
  - Resolves: bz#1745209
    (qemu-img gets stuck when stream-converting from http)
  - Resolves: bz#1773925
    (Fail to do blockcommit with more than one snapshots)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-17.el8
changelog:
  - kvm-qemu-pr-helper-fix-crash-in-mpath_reconstruct_sense.patch [bz#1772322]
  - Resolves: bz#1772322
    (qemu-pr-helper: fix crash in mpath_reconstruct_sense)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-18.el8
changelog:
  - kvm-LUKS-support-preallocation.patch [bz#1534951]
  - kvm-nbd-add-empty-.bdrv_reopen_prepare.patch [bz#1718727]
  - kvm-qdev-qbus-add-hidden-device-support.patch [bz#1757796]
  - kvm-pci-add-option-for-net-failover.patch [bz#1757796]
  - kvm-pci-mark-devices-partially-unplugged.patch [bz#1757796]
  - kvm-pci-mark-device-having-guest-unplug-request-pending.patch [bz#1757796]
  - kvm-qapi-add-unplug-primary-event.patch [bz#1757796]
  - kvm-qapi-add-failover-negotiated-event.patch [bz#1757796]
  - kvm-migration-allow-unplug-during-migration-for-failover.patch [bz#1757796]
  - kvm-migration-add-new-migration-state-wait-unplug.patch [bz#1757796]
  - kvm-libqos-tolerate-wait-unplug-migration-state.patch [bz#1757796]
  - kvm-net-virtio-add-failover-support.patch [bz#1757796]
  - kvm-vfio-unplug-failover-primary-device-before-migration.patch [bz#1757796]
  - kvm-net-virtio-fix-dev_unplug_pending.patch [bz#1757796]
  - kvm-net-virtio-return-early-when-failover-primary-alread.patch [bz#1757796]
  - kvm-net-virtio-fix-re-plugging-of-primary-device.patch [bz#1757796]
  - kvm-net-virtio-return-error-when-device_opts-arg-is-NULL.patch [bz#1757796]
  - kvm-vfio-don-t-ignore-return-value-of-migrate_add_blocke.patch [bz#1757796]
  - kvm-hw-vfio-pci-Fix-double-free-of-migration_blocker.patch [bz#1757796]
  - Resolves: bz#1534951
    (RFE: Support preallocation mode for luks format)
  - Resolves: bz#1718727
    (Committing changes to the backing file over NBD fails with reopening files not supported)
  - Resolves: bz#1757796
    (RFE: support for net failover devices in qemu)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-5.el8
changelog:
  - kvm-i386-Remove-cpu64-rhel6-CPU-model.patch [bz#1741345]
  - kvm-Reallocate-dirty_bmap-when-we-change-a-slot.patch [bz#1772774]
  - Resolves: bz#1741345
    (Remove the "cpu64-rhel6" CPU from qemu-kvm)
  - Resolves: bz#1772774
    (qemu-kvm core dump during migration+reboot ( Assertion `mem->dirty_bmap' failed ))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-6.el8
changelog:
  - kvm-spapr-Don-t-trigger-a-CAS-reboot-for-XICS-XIVE-mode-.patch [bz#1733893]
  - kvm-vfio-pci-Don-t-remove-irqchip-notifier-if-not-regist.patch [bz#1782678]
  - kvm-virtio-don-t-enable-notifications-during-polling.patch [bz#1789301]
  - kvm-usbredir-Prevent-recursion-in-usbredir_write.patch [bz#1790844]
  - kvm-xhci-recheck-slot-status.patch [bz#1790844]
  - Resolves: bz#1733893
    (Boot a guest with "-prom-env 'auto-boot?=false'", SLOF failed to enter the boot entry after input "boot" followed by "0 > " on VNC)
  - Resolves: bz#1782678
    (qemu core dump after hot-unplugging the   XXV710/XL710 PF)
  - Resolves: bz#1789301
    (virtio-blk/scsi: fix notification suppression during AioContext polling)
  - Resolves: bz#1790844
    (USB related fixes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.2.0-7.el8
changelog:
  - kvm-tcp_emu-Fix-oob-access.patch [bz#1791568]
  - kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791568]
  - kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791568]
  - kvm-RHEL-hw-i386-disable-nested-PERF_GLOBAL_CTRL-MSR-sup.patch [bz#1559846]
  - Resolves: bz#1559846
    (Nested KVM: limit VMX features according to CPU models - Fast Train)
  - Resolves: bz#1791568
    (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-av-8.2.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.2.0-8.el8
changelog:
  - kvm-target-arm-arch_dump-Add-SVE-notes.patch [bz#1725084]
  - kvm-vhost-Add-names-to-section-rounded-warning.patch [bz#1779041]
  - kvm-vhost-Only-align-sections-for-vhost-user.patch [bz#1779041]
  - kvm-vhost-coding-style-fix.patch [bz#1779041]
  - kvm-virtio-fs-fix-MSI-X-nvectors-calculation.patch [bz#1694164]
  - kvm-vhost-user-fs-remove-vhostfd-property.patch [bz#1694164]
  - kvm-build-rename-CONFIG_LIBCAP-to-CONFIG_LIBCAP_NG.patch [bz#1694164]
  - kvm-virtiofsd-Pull-in-upstream-headers.patch [bz#1694164]
  - kvm-virtiofsd-Pull-in-kernel-s-fuse.h.patch [bz#1694164]
  - kvm-virtiofsd-Add-auxiliary-.c-s.patch [bz#1694164]
  - kvm-virtiofsd-Add-fuse_lowlevel.c.patch [bz#1694164]
  - kvm-virtiofsd-Add-passthrough_ll.patch [bz#1694164]
  - kvm-virtiofsd-Trim-down-imported-files.patch [bz#1694164]
  - kvm-virtiofsd-Format-imported-files-to-qemu-style.patch [bz#1694164]
  - kvm-virtiofsd-remove-mountpoint-dummy-argument.patch [bz#1694164]
  - kvm-virtiofsd-remove-unused-notify-reply-support.patch [bz#1694164]
  - kvm-virtiofsd-Remove-unused-enum-fuse_buf_copy_flags.patch [bz#1694164]
  - kvm-virtiofsd-Fix-fuse_daemonize-ignored-return-values.patch [bz#1694164]
  - kvm-virtiofsd-Fix-common-header-and-define-for-QEMU-buil.patch [bz#1694164]
  - kvm-virtiofsd-Trim-out-compatibility-code.patch [bz#1694164]
  - kvm-vitriofsd-passthrough_ll-fix-fallocate-ifdefs.patch [bz#1694164]
  - kvm-virtiofsd-Make-fsync-work-even-if-only-inode-is-pass.patch [bz#1694164]
  - kvm-virtiofsd-Add-options-for-virtio.patch [bz#1694164]
  - kvm-virtiofsd-add-o-source-PATH-to-help-output.patch [bz#1694164]
  - kvm-virtiofsd-Open-vhost-connection-instead-of-mounting.patch [bz#1694164]
  - kvm-virtiofsd-Start-wiring-up-vhost-user.patch [bz#1694164]
  - kvm-virtiofsd-Add-main-virtio-loop.patch [bz#1694164]
  - kvm-virtiofsd-get-set-features-callbacks.patch [bz#1694164]
  - kvm-virtiofsd-Start-queue-threads.patch [bz#1694164]
  - kvm-virtiofsd-Poll-kick_fd-for-queue.patch [bz#1694164]
  - kvm-virtiofsd-Start-reading-commands-from-queue.patch [bz#1694164]
  - kvm-virtiofsd-Send-replies-to-messages.patch [bz#1694164]
  - kvm-virtiofsd-Keep-track-of-replies.patch [bz#1694164]
  - kvm-virtiofsd-Add-Makefile-wiring-for-virtiofsd-contrib.patch [bz#1694164]
  - kvm-virtiofsd-Fast-path-for-virtio-read.patch [bz#1694164]
  - kvm-virtiofsd-add-fd-FDNUM-fd-passing-option.patch [bz#1694164]
  - kvm-virtiofsd-make-f-foreground-the-default.patch [bz#1694164]
  - kvm-virtiofsd-add-vhost-user.json-file.patch [bz#1694164]
  - kvm-virtiofsd-add-print-capabilities-option.patch [bz#1694164]
  - kvm-virtiofs-Add-maintainers-entry.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-create-new-files-in-caller-.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-lo_map-for-ino-fh-indir.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-ino_map-to-hide-lo_inod.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-dirp_map-to-hide-lo_dir.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-fd_map-to-hide-file-des.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-fallback-for-racy-ops.patch [bz#1694164]
  - kvm-virtiofsd-validate-path-components.patch [bz#1694164]
  - kvm-virtiofsd-Plumb-fuse_bufvec-through-to-do_write_buf.patch [bz#1694164]
  - kvm-virtiofsd-Pass-write-iov-s-all-the-way-through.patch [bz#1694164]
  - kvm-virtiofsd-add-fuse_mbuf_iter-API.patch [bz#1694164]
  - kvm-virtiofsd-validate-input-buffer-sizes-in-do_write_bu.patch [bz#1694164]
  - kvm-virtiofsd-check-input-buffer-size-in-fuse_lowlevel.c.patch [bz#1694164]
  - kvm-virtiofsd-prevent-.-escape-in-lo_do_lookup.patch [bz#1694164]
  - kvm-virtiofsd-prevent-.-escape-in-lo_do_readdir.patch [bz#1694164]
  - kvm-virtiofsd-use-proc-self-fd-O_PATH-file-descriptor.patch [bz#1694164]
  - kvm-virtiofsd-sandbox-mount-namespace.patch [bz#1694164]
  - kvm-virtiofsd-move-to-an-empty-network-namespace.patch [bz#1694164]
  - kvm-virtiofsd-move-to-a-new-pid-namespace.patch [bz#1694164]
  - kvm-virtiofsd-add-seccomp-whitelist.patch [bz#1694164]
  - kvm-virtiofsd-Parse-flag-FUSE_WRITE_KILL_PRIV.patch [bz#1694164]
  - kvm-virtiofsd-cap-ng-helpers.patch [bz#1694164]
  - kvm-virtiofsd-Drop-CAP_FSETID-if-client-asked-for-it.patch [bz#1694164]
  - kvm-virtiofsd-set-maximum-RLIMIT_NOFILE-limit.patch [bz#1694164]
  - kvm-virtiofsd-fix-libfuse-information-leaks.patch [bz#1694164]
  - kvm-virtiofsd-add-syslog-command-line-option.patch [bz#1694164]
  - kvm-virtiofsd-print-log-only-when-priority-is-high-enoug.patch [bz#1694164]
  - kvm-virtiofsd-Add-ID-to-the-log-with-FUSE_LOG_DEBUG-leve.patch [bz#1694164]
  - kvm-virtiofsd-Add-timestamp-to-the-log-with-FUSE_LOG_DEB.patch [bz#1694164]
  - kvm-virtiofsd-Handle-reinit.patch [bz#1694164]
  - kvm-virtiofsd-Handle-hard-reboot.patch [bz#1694164]
  - kvm-virtiofsd-Kill-threads-when-queues-are-stopped.patch [bz#1694164]
  - kvm-vhost-user-Print-unexpected-slave-message-types.patch [bz#1694164]
  - kvm-contrib-libvhost-user-Protect-slave-fd-with-mutex.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-renameat2-support.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-disable-readdirplus-on-cach.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-control-readdirplus.patch [bz#1694164]
  - kvm-virtiofsd-rename-unref_inode-to-unref_inode_lolocked.patch [bz#1694164]
  - kvm-virtiofsd-fail-when-parent-inode-isn-t-known-in-lo_d.patch [bz#1694164]
  - kvm-virtiofsd-extract-root-inode-init-into-setup_root.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-clean-up-cache-related-opti.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-use-hashtable.patch [bz#1694164]
  - kvm-virtiofsd-Clean-up-inodes-on-destroy.patch [bz#1694164]
  - kvm-virtiofsd-support-nanosecond-resolution-for-file-tim.patch [bz#1694164]
  - kvm-virtiofsd-fix-error-handling-in-main.patch [bz#1694164]
  - kvm-virtiofsd-cleanup-allocated-resource-in-se.patch [bz#1694164]
  - kvm-virtiofsd-fix-memory-leak-on-lo.source.patch [bz#1694164]
  - kvm-virtiofsd-add-helper-for-lo_data-cleanup.patch [bz#1694164]
  - kvm-virtiofsd-Prevent-multiply-running-with-same-vhost_u.patch [bz#1694164]
  - kvm-virtiofsd-enable-PARALLEL_DIROPS-during-INIT.patch [bz#1694164]
  - kvm-virtiofsd-fix-incorrect-error-handling-in-lo_do_look.patch [bz#1694164]
  - kvm-Virtiofsd-fix-memory-leak-on-fuse-queueinfo.patch [bz#1694164]
  - kvm-virtiofsd-Support-remote-posix-locks.patch [bz#1694164]
  - kvm-virtiofsd-use-fuse_lowlevel_is_virtio-in-fuse_sessio.patch [bz#1694164]
  - kvm-virtiofsd-prevent-fv_queue_thread-vs-virtio_loop-rac.patch [bz#1694164]
  - kvm-virtiofsd-make-lo_release-atomic.patch [bz#1694164]
  - kvm-virtiofsd-prevent-races-with-lo_dirp_put.patch [bz#1694164]
  - kvm-virtiofsd-rename-inode-refcount-to-inode-nlookup.patch [bz#1694164]
  - kvm-libvhost-user-Fix-some-memtable-remap-cases.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-fix-refcounting-on-remove-r.patch [bz#1694164]
  - kvm-virtiofsd-introduce-inode-refcount-to-prevent-use-af.patch [bz#1694164]
  - kvm-virtiofsd-do-not-always-set-FUSE_FLOCK_LOCKS.patch [bz#1694164]
  - kvm-virtiofsd-convert-more-fprintf-and-perror-to-use-fus.patch [bz#1694164]
  - kvm-virtiofsd-Reset-O_DIRECT-flag-during-file-open.patch [bz#1694164]
  - kvm-virtiofsd-Fix-data-corruption-with-O_APPEND-write-in.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-Use-cache_readdir-for-direc.patch [bz#1694164]
  - kvm-virtiofsd-add-definition-of-fuse_buf_writev.patch [bz#1694164]
  - kvm-virtiofsd-use-fuse_buf_writev-to-replace-fuse_buf_wr.patch [bz#1694164]
  - kvm-virtiofsd-process-requests-in-a-thread-pool.patch [bz#1694164]
  - kvm-virtiofsd-prevent-FUSE_INIT-FUSE_DESTROY-races.patch [bz#1694164]
  - kvm-virtiofsd-fix-lo_destroy-resource-leaks.patch [bz#1694164]
  - kvm-virtiofsd-add-thread-pool-size-NUM-option.patch [bz#1694164]
  - kvm-virtiofsd-Convert-lo_destroy-to-take-the-lo-mutex-lo.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-Pass-errno-to-fuse_reply_er.patch [bz#1694164]
  - kvm-virtiofsd-stop-all-queue-threads-on-exit-in-virtio_l.patch [bz#1694164]
  - kvm-virtiofsd-add-some-options-to-the-help-message.patch [bz#1694164]
  - kvm-redhat-ship-virtiofsd-vhost-user-device-backend.patch [bz#1694164]
  - Resolves: bz#1694164
    (virtio-fs: host<->guest shared file system (qemu))
  - Resolves: bz#1725084
    (aarch64: support dumping SVE registers)
  - Resolves: bz#1779041
    (netkvm: no connectivity Windows guest with q35 + hugepages + vhost + hv_synic)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-9.el8
changelog:
  - kvm-ppc-Deassert-the-external-interrupt-pin-in-KVM-on-re.patch [bz#1776638]
  - kvm-xics-Don-t-deassert-outputs.patch [bz#1776638]
  - kvm-ppc-Don-t-use-CPUPPCState-irq_input_state-with-moder.patch [bz#1776638]
  - kvm-trace-update-qemu-trace-stap-to-Python-3.patch [bz#1787395]
  - kvm-redhat-Remove-redundant-fix-for-qemu-trace-stap.patch [bz#1787395]
  - kvm-iscsi-Cap-block-count-from-GET-LBA-STATUS-CVE-2020-1.patch [bz#1794503]
  - kvm-tpm-ppi-page-align-PPI-RAM.patch [bz#1787444]
  - kvm-target-arm-kvm-trivial-Clean-up-header-documentation.patch [bz#1647366]
  - kvm-target-arm-kvm64-kvm64-cpus-have-timer-registers.patch [bz#1647366]
  - kvm-tests-arm-cpu-features-Check-feature-default-values.patch [bz#1647366]
  - kvm-target-arm-kvm-Implement-virtual-time-adjustment.patch [bz#1647366]
  - kvm-target-arm-cpu-Add-the-kvm-no-adjvtime-CPU-property.patch [bz#1647366]
  - kvm-migration-Define-VMSTATE_INSTANCE_ID_ANY.patch [bz#1529231]
  - kvm-migration-Change-SaveStateEntry.instance_id-into-uin.patch [bz#1529231]
  - kvm-apic-Use-32bit-APIC-ID-for-migration-instance-ID.patch [bz#1529231]
  - Resolves: bz#1529231
    ([q35] VM hangs after migration with 200 vCPUs)
  - Resolves: bz#1647366
    (aarch64: Add support for the kvm-no-adjvtime ARM CPU feature)
  - Resolves: bz#1776638
    (Guest failed to boot up after system_reset  20 times)
  - Resolves: bz#1787395
    (qemu-trace-stap list : TypeError: startswith first arg must be bytes or a tuple of bytes, not str)
  - Resolves: bz#1787444
    (Broken postcopy migration with vTPM device)
  - Resolves: bz#1794503
    (CVE-2020-1711 qemu-kvm: QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server [rhel-av-8.2.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-10.el8
changelog:
  - kvm-i386-Resolve-CPU-models-to-v1-by-default.patch [bz#1779078 bz#1787291 bz#1779078 bz#1779078]
  - kvm-iotests-Support-job-complete-in-run_job.patch [bz#1781637]
  - kvm-iotests-Create-VM.blockdev_create.patch [bz#1781637]
  - kvm-block-Activate-recursively-even-for-already-active-n.patch [bz#1781637]
  - kvm-hmp-Allow-using-qdev-ID-for-qemu-io-command.patch [bz#1781637]
  - kvm-iotests-Test-external-snapshot-with-VM-state.patch [bz#1781637]
  - kvm-iotests.py-Let-wait_migration-wait-even-more.patch [bz#1781637]
  - kvm-blockdev-fix-coding-style-issues-in-drive_backup_pre.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-unify-qmp_drive_backup-and-drive-backup-tra.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-unify-qmp_blockdev_backup-and-blockdev-back.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-honor-bdrv_try_set_aio_context-context-requ.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-backup-top-Begin-drain-earlier.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-block-backup-top-Don-t-acquire-context-while-droppin.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-Acquire-AioContext-on-dirty-bitmap-function.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-Return-bs-to-the-proper-context-on-snapshot.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-iotests-Test-handling-of-AioContexts-with-some-block.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-target-arm-monitor-query-cpu-model-expansion-crashed.patch [bz#1801320]
  - kvm-docs-arm-cpu-features-Make-kvm-no-adjvtime-comment-c.patch [bz#1801320]
  - Resolves: bz#1745606
    (Qemu hang when do incremental live backup in transaction mode without bitmap)
  - Resolves: bz#1746217
    (Src qemu hang when do storage vm migration during guest installation)
  - Resolves: bz#1773517
    (Src qemu hang when do storage vm migration with dataplane enable)
  - Resolves: bz#1779036
    (Qemu coredump when do snapshot in transaction mode with one snapshot path not exist)
  - Resolves: bz#1779078
    (RHVH 4.4: Failed to run VM on 4.3/4.4 engine (Exit message: the CPU is incompatible with host CPU: Host CPU does not provide required features: hle, rtm))
  - Resolves: bz#1781637
    (qemu crashed when do mem and disk snapshot)
  - Resolves: bz#1782111
    (Qemu hang when do full backup on multi-disks with one job's 'job-id' missed in transaction mode(data plane enable))
  - Resolves: bz#1782175
    (Qemu core dump when add persistent bitmap(data plane enable))
  - Resolves: bz#1783965
    (Qemu core dump when do backup with sync: bitmap and no bitmap provided)
  - Resolves: bz#1787291
    (RHVH 4.4: Failed to run VM on 4.3/4.4 engine (Exit message: the CPU is incompatible with host CPU: Host CPU does not provide required features: hle, rtm) [rhel-8.1.0.z])
  - Resolves: bz#1801320
    (aarch64: backport query-cpu-model-expansion and adjvtime document fixes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-11.el8
changelog:
  - kvm-spapr-Enable-DD2.3-accelerated-count-cache-flush-in-.patch [bz#1796240]
  - kvm-util-add-slirp_fmt-helpers.patch [bz#1798994]
  - kvm-tcp_emu-fix-unsafe-snprintf-usages.patch [bz#1798994]
  - kvm-virtio-add-ability-to-delete-vq-through-a-pointer.patch [bz#1791590]
  - kvm-virtio-make-virtio_delete_queue-idempotent.patch [bz#1791590]
  - kvm-virtio-reset-region-cache-when-on-queue-deletion.patch [bz#1791590]
  - kvm-virtio-net-delete-also-control-queue-when-TX-RX-dele.patch [bz#1791590]
  - Resolves: bz#1791590
    ([Q35] No "DEVICE_DELETED" event in qmp after unplug virtio-net-pci device)
  - Resolves: bz#1796240
    (Enable hw accelerated cache-count-flush by default for POWER9 DD2.3 cpus)
  - Resolves: bz#1798994
    (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-av-8.2.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-12.el8
changelog:
  - kvm-vhost-user-gpu-Drop-trailing-json-comma.patch [bz#1805334]
  - Resolves: bz#1805334
    (vhost-user/50-qemu-gpu.json is not valid JSON)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-13.el8
changelog:
  - kvm-target-i386-kvm-initialize-feature-MSRs-very-early.patch [bz#1791648]
  - kvm-target-i386-add-a-ucode-rev-property.patch [bz#1791648]
  - kvm-target-i386-kvm-initialize-microcode-revision-from-K.patch [bz#1791648]
  - kvm-target-i386-fix-TCG-UCODE_REV-access.patch [bz#1791648]
  - kvm-target-i386-check-for-availability-of-MSR_IA32_UCODE.patch [bz#1791648]
  - kvm-target-i386-enable-monitor-and-ucode-revision-with-c.patch [bz#1791648]
  - kvm-qcow2-Fix-qcow2_alloc_cluster_abort-for-external-dat.patch [bz#1703907]
  - kvm-mirror-Store-MirrorOp.co-for-debuggability.patch [bz#1794692]
  - kvm-mirror-Don-t-let-an-operation-wait-for-itself.patch [bz#1794692]
  - Resolves: bz#1703907
    ([upstream]QEMU coredump when converting to qcow2: external data file images on block devices with copy_offloading)
  - Resolves: bz#1791648
    ([RFE] Passthrough host CPU microcode version to KVM guest if using CPU passthrough)
  - Resolves: bz#1794692
    (Mirror block job stops making progress)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-14.el8
changelog:
  - kvm-hw-smbios-set-new-default-SMBIOS-fields-for-Windows-.patch [bz#1782529]
  - kvm-migration-multifd-clean-pages-after-filling-packet.patch [bz#1738451]
  - kvm-migration-Make-sure-that-we-don-t-call-write-in-case.patch [bz#1738451]
  - kvm-migration-multifd-fix-nullptr-access-in-terminating-.patch [bz#1738451]
  - kvm-migration-multifd-fix-destroyed-mutex-access-in-term.patch [bz#1738451]
  - kvm-multifd-Make-sure-that-we-don-t-do-any-IO-after-an-e.patch [bz#1738451]
  - kvm-qemu-file-Don-t-do-IO-after-shutdown.patch [bz#1738451]
  - kvm-migration-Don-t-send-data-if-we-have-stopped.patch [bz#1738451]
  - kvm-migration-Create-migration_is_running.patch [bz#1738451]
  - kvm-migration-multifd-fix-nullptr-access-in-multifd_send.patch [bz#1738451]
  - kvm-migration-Maybe-VM-is-paused-when-migration-is-cance.patch [bz#1738451]
  - kvm-virtiofsd-Remove-fuse_req_getgroups.patch [bz#1797064]
  - kvm-virtiofsd-fv_create_listen_socket-error-path-socket-.patch [bz#1797064]
  - kvm-virtiofsd-load_capng-missing-unlock.patch [bz#1797064]
  - kvm-virtiofsd-do_read-missing-NULL-check.patch [bz#1797064]
  - kvm-tools-virtiofsd-fuse_lowlevel-Fix-fuse_out_header-er.patch [bz#1797064]
  - kvm-virtiofsd-passthrough_ll-cleanup-getxattr-listxattr.patch [bz#1797064]
  - kvm-virtiofsd-Fix-xattr-operations.patch [bz#1797064]
  - Resolves: bz#1738451
    (qemu on src host core dump after set multifd-channels and do migration twice (first migration execute migrate_cancel))
  - Resolves: bz#1782529
    (Windows Update Enablement with default smbios strings in qemu)
  - Resolves: bz#1797064
    (virtiofsd: Fixes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-15.el8
changelog:
  - kvm-block-nbd-Fix-hang-in-.bdrv_close.patch [bz#1640894]
  - kvm-block-Generic-file-creation-fallback.patch [bz#1640894]
  - kvm-file-posix-Drop-hdev_co_create_opts.patch [bz#1640894]
  - kvm-iscsi-Drop-iscsi_co_create_opts.patch [bz#1640894]
  - kvm-iotests-Add-test-for-image-creation-fallback.patch [bz#1640894]
  - kvm-block-Fix-leak-in-bdrv_create_file_fallback.patch [bz#1640894]
  - kvm-iotests-Use-complete_and_wait-in-155.patch [bz#1790482 bz#1805143]
  - kvm-block-Introduce-bdrv_reopen_commit_post-step.patch [bz#1790482 bz#1805143]
  - kvm-block-qcow2-Move-bitmap-reopen-into-bdrv_reopen_comm.patch [bz#1790482 bz#1805143]
  - kvm-iotests-Refactor-blockdev-reopen-test-for-iothreads.patch [bz#1790482 bz#1805143]
  - kvm-block-bdrv_reopen-with-backing-file-in-different-Aio.patch [bz#1790482 bz#1805143]
  - kvm-block-Versioned-x-blockdev-reopen-API-with-feature-f.patch [bz#1790482 bz#1805143]
  - kvm-block-Make-bdrv_get_cumulative_perm-public.patch [bz#1790482 bz#1805143]
  - kvm-block-Relax-restrictions-for-blockdev-snapshot.patch [bz#1790482 bz#1805143]
  - kvm-iotests-Fix-run_job-with-use_log-False.patch [bz#1790482 bz#1805143]
  - kvm-iotests-Test-mirror-with-temporarily-disabled-target.patch [bz#1790482 bz#1805143]
  - kvm-block-Fix-cross-AioContext-blockdev-snapshot.patch [bz#1790482 bz#1805143]
  - kvm-iotests-Add-iothread-cases-to-155.patch [bz#1790482 bz#1805143]
  - kvm-qapi-Add-allow-write-only-overlay-feature-for-blockd.patch [bz#1790482 bz#1805143]
  - kvm-exec-rom_reset-Free-rom-data-during-inmigrate-skip.patch [bz#1809380]
  - Resolves: bz#1640894
    (Fix generic file creation fallback for qemu-img nvme:// image creation support)
  - Resolves: bz#1790482
    (bitmaps in backing images can't be modified)
  - Resolves: bz#1805143
    (allow late/lazy opening of backing chain for shallow blockdev-mirror)
  - Resolves: bz#1809380
    (guest hang during reboot process after migration from RHEl7.8 to RHEL8.2.0.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-16.el8
changelog:
  - kvm-migration-Rate-limit-inside-host-pages.patch [bz#1814336]
  - kvm-build-sys-do-not-make-qemu-ga-link-with-pixman.patch [bz#1811670]
  - Resolves: bz#1811670
    (Unneeded qemu-guest-agent dependency on pixman)
  - Resolves: bz#1814336
    ([POWER9] QEMU migration-test triggers a kernel warning)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-17.el8
changelog:
  - kvm-block-pass-BlockDriver-reference-to-the-.bdrv_co_cre.patch [bz#1816007]
  - kvm-block-trickle-down-the-fallback-image-creation-funct.patch [bz#1816007]
  - kvm-Revert-mirror-Don-t-let-an-operation-wait-for-itself.patch [bz#1794692]
  - kvm-mirror-Wait-only-for-in-flight-operations.patch [bz#1794692]
  - Resolves: bz#1794692
    (Mirror block job stops making progress)
  - Resolves: bz#1816007
    (qemu-img convert failed to convert with block device as target)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-18.el8_2
changelog:
  - kvm-job-take-each-job-s-lock-individually-in-job_txn_app.patch [bz#1817621]
  - kvm-replication-assert-we-own-context-before-job_cancel_.patch [bz#1817621]
  - kvm-backup-don-t-acquire-aio_context-in-backup_clean.patch [bz#1817621]
  - kvm-block-backend-Reorder-flush-pdiscard-function-defini.patch [bz#1817621]
  - kvm-block-Increase-BB.in_flight-for-coroutine-and-sync-i.patch [bz#1817621]
  - kvm-block-Fix-blk-in_flight-during-blk_wait_while_draine.patch [bz#1817621]
  - Resolves: bz#1817621
    (Crash and deadlock with block jobs when using io-threads)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-19.el8_2
changelog:
  - kvm-target-i386-do-not-set-unsupported-VMX-secondary-exe.patch [bz#1822682]
  - Resolves: bz#1822682
    (QEMU-4.2 fails to start a VM on Azure)


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-20.el8
changelog:
  - kvm-pcie_root_port-Add-hotplug-disabling-option.patch [bz#1790899]
  - kvm-compat-disable-edid-for-virtio-gpu-ccw.patch [bz#1816793]
  - Resolves: bz#1790899
    ([RFE] QEMU devices should have the option to enable/disable hotplug/unplug)
  - Resolves: bz#1816793
    ('edid' compat handling missing for virtio-gpu-ccw)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-21.el8
changelog:
  - kvm-hw-pci-pcie-Forbid-hot-plug-if-it-s-disabled-on-the-.patch [bz#1820531]
  - kvm-hw-pci-pcie-Replace-PCI_DEVICE-casts-with-existing-v.patch [bz#1820531]
  - kvm-tools-virtiofsd-passthrough_ll-Fix-double-close.patch [bz#1817445]
  - kvm-virtiofsd-add-rlimit-nofile-NUM-option.patch [bz#1817445]
  - kvm-virtiofsd-stay-below-fs.file-max-sysctl-value-CVE-20.patch [bz#1817445]
  - kvm-virtiofsd-jail-lo-proc_self_fd.patch [bz#1817445]
  - kvm-virtiofsd-Show-submounts.patch [bz#1817445]
  - kvm-virtiofsd-only-retain-file-system-capabilities.patch [bz#1817445]
  - kvm-virtiofsd-drop-all-capabilities-in-the-wait-parent-p.patch [bz#1817445]
  - Resolves: bz#1817445
    (CVE-2020-10717 virt:8.2/qemu-kvm: QEMU: virtiofsd: guest may open maximum file descriptor to cause DoS [rhel-av-8])
  - Resolves: bz#1820531
    (qmp command query-pci get wrong result after hotplug device under hotplug=off controller)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-22.el8
changelog:
  - kvm-block-always-fill-entire-LUKS-header-space-with-zero.patch [bz#1775462]
  - kvm-numa-remove-not-needed-check.patch [bz#1600217]
  - kvm-numa-properly-check-if-numa-is-supported.patch [bz#1600217]
  - kvm-numa-Extend-CLI-to-provide-initiator-information-for.patch [bz#1600217]
  - kvm-numa-Extend-CLI-to-provide-memory-latency-and-bandwi.patch [bz#1600217]
  - kvm-numa-Extend-CLI-to-provide-memory-side-cache-informa.patch [bz#1600217]
  - kvm-hmat-acpi-Build-Memory-Proximity-Domain-Attributes-S.patch [bz#1600217]
  - kvm-hmat-acpi-Build-System-Locality-Latency-and-Bandwidt.patch [bz#1600217]
  - kvm-hmat-acpi-Build-Memory-Side-Cache-Information-Struct.patch [bz#1600217]
  - kvm-tests-numa-Add-case-for-QMP-build-HMAT.patch [bz#1600217]
  - kvm-tests-bios-tables-test-add-test-cases-for-ACPI-HMAT.patch [bz#1600217]
  - kvm-ACPI-add-expected-files-for-HMAT-tests-acpihmat.patch [bz#1600217]
  - Resolves: bz#1600217
    ([Intel 8.2.1 FEAT] KVM ACPI HMAT support - qemu-kvm  Fast Train)
  - Resolves: bz#1775462
    (Creating luks-inside-qcow2 images with cluster_size=2k/4k will get a corrupted image)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-23.el8
changelog:
  - kvm-target-arm-Fix-PAuth-sbox-functions.patch [bz#1813940]
  - kvm-Don-t-leak-memory-when-reallocation-fails.patch [bz#1749737]
  - kvm-Replace-remaining-malloc-free-user-with-glib.patch [bz#1749737]
  - kvm-Revert-RHEL-disable-hostmem-memfd.patch [bz#1839030]
  - kvm-block-introducing-bdrv_co_delete_file-interface.patch [bz#1827630]
  - kvm-block.c-adding-bdrv_co_delete_file.patch [bz#1827630]
  - kvm-crypto.c-cleanup-created-file-when-block_crypto_co_c.patch [bz#1827630]
  - Resolves: bz#1749737
    (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-av-8])
  - Resolves: bz#1813940
    (CVE-2020-10702 virt:8.1/qemu-kvm: qemu: weak signature generation in Pointer Authentication support for ARM [rhel-av-8])
  - Resolves: bz#1827630
    (volume creation leaving uncleaned stuff behind on error (vol-clone/libvirt/qemu-kvm))
  - Resolves: bz#1839030
    (RFE: enable the "memfd" memory backend)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-24.el8
changelog:
  - kvm-target-i386-set-the-CPUID-level-to-0x14-on-old-machi.patch [bz#1513681]
  - kvm-block-curl-HTTP-header-fields-allow-whitespace-aroun.patch [bz#1841038]
  - kvm-block-curl-HTTP-header-field-names-are-case-insensit.patch [bz#1841038]
  - kvm-MAINTAINERS-fix-qcow2-bitmap.c-under-Dirty-Bitmaps-h.patch [bz#1779893 bz#1779904]
  - kvm-iotests-Let-_make_test_img-parse-its-parameters.patch [bz#1779893 bz#1779904]
  - kvm-qemu_img-add-cvtnum_full-to-print-error-reports.patch [bz#1779893 bz#1779904]
  - kvm-block-Make-it-easier-to-learn-which-BDS-support-bitm.patch [bz#1779893 bz#1779904]
  - kvm-blockdev-Promote-several-bitmap-functions-to-non-sta.patch [bz#1779893 bz#1779904]
  - kvm-blockdev-Split-off-basic-bitmap-operations-for-qemu-.patch [bz#1779893 bz#1779904]
  - kvm-qemu-img-Add-bitmap-sub-command.patch [bz#1779893 bz#1779904]
  - kvm-iotests-Fix-test-178.patch [bz#1779893 bz#1779904]
  - kvm-qcow2-Expose-bitmaps-size-during-measure.patch [bz#1779893 bz#1779904]
  - kvm-qemu-img-Factor-out-code-for-merging-bitmaps.patch [bz#1779893 bz#1779904]
  - kvm-qemu-img-Add-convert-bitmaps-option.patch [bz#1779893 bz#1779904]
  - kvm-iotests-Add-test-291-to-for-qemu-img-bitmap-coverage.patch [bz#1779893 bz#1779904]
  - kvm-iotests-Add-more-skip_if_unsupported-statements-to-t.patch [bz#1778593]
  - kvm-iotests-don-t-use-format-for-drive_add.patch [bz#1778593]
  - kvm-iotests-055-refactor-compressed-backup-to-vmdk.patch [bz#1778593]
  - kvm-iotests-055-skip-vmdk-target-tests-if-vmdk-is-not-wh.patch [bz#1778593]
  - kvm-backup-Improve-error-for-bdrv_getlength-failure.patch [bz#1778593]
  - kvm-backup-Make-sure-that-source-and-target-size-match.patch [bz#1778593]
  - kvm-iotests-Backup-with-different-source-target-size.patch [bz#1778593]
  - kvm-iotests-109-Don-t-mirror-with-mismatched-size.patch [bz#1778593]
  - kvm-iotests-229-Use-blkdebug-to-inject-an-error.patch [bz#1778593]
  - kvm-mirror-Make-sure-that-source-and-target-size-match.patch [bz#1778593]
  - kvm-iotests-Mirror-with-different-source-target-size.patch [bz#1778593]
  - Resolves: bz#1513681
    ([Intel 8.2.1 Feat] qemu-kvm PT VMX -- Fast Train)
  - Resolves: bz#1778593
    (Qemu coredump when backup to a existing small size image)
  - Resolves: bz#1779893
    (RFE: Copy bitmaps with qemu-img convert)
  - Resolves: bz#1779904
    (RFE: ability to estimate bitmap space utilization for qcow2)
  - Resolves: bz#1841038
    (qemu-img: /var/tmp/v2vovl56bced.qcow2: CURL: Error opening file: Server does not support 'range' (byte ranges) with HTTP/2 server in VMware ESXi 7)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-25.el8
changelog:
  - kvm-enable-ramfb.patch [bz#1841068]
  - kvm-block-Add-flags-to-BlockDriver.bdrv_co_truncate.patch [bz#1780574]
  - kvm-block-Add-flags-to-bdrv-_co-_truncate.patch [bz#1780574]
  - kvm-block-backend-Add-flags-to-blk_truncate.patch [bz#1780574]
  - kvm-qcow2-Support-BDRV_REQ_ZERO_WRITE-for-truncate.patch [bz#1780574]
  - kvm-raw-format-Support-BDRV_REQ_ZERO_WRITE-for-truncate.patch [bz#1780574]
  - kvm-file-posix-Support-BDRV_REQ_ZERO_WRITE-for-truncate.patch [bz#1780574]
  - kvm-block-truncate-Don-t-make-backing-file-data-visible.patch [bz#1780574]
  - kvm-iotests-Add-qemu_io_log.patch [bz#1780574]
  - kvm-iotests-Filter-testfiles-out-in-filter_img_info.patch [bz#1780574]
  - kvm-iotests-Test-committing-to-short-backing-file.patch [bz#1780574]
  - kvm-qcow2-Forward-ZERO_WRITE-flag-for-full-preallocation.patch [bz#1780574]
  - kvm-i386-Add-MSR-feature-bit-for-MDS-NO.patch [bz#1769912]
  - kvm-i386-Add-macro-for-stibp.patch [bz#1769912]
  - kvm-target-i386-Add-new-bit-definitions-of-MSR_IA32_ARCH.patch [bz#1769912]
  - kvm-i386-Add-new-CPU-model-Cooperlake.patch [bz#1769912]
  - kvm-target-i386-Add-missed-features-to-Cooperlake-CPU-mo.patch [bz#1769912]
  - Resolves: bz#1769912
    ([Intel 8.2.1 Feature] introduce Cooper Lake cpu model - qemu-kvm Fast Train)
  - Resolves: bz#1780574
    (Data corruption with resizing short overlay over longer backing files)
  - Resolves: bz#1841068
    (RFE: please support the "ramfb" display device model)


author: Eduardo Lima (Etrunko) <elima@redhat.com> - 4.2.0-26.el8
changelog:
  - kvm-nbd-server-Avoid-long-error-message-assertions-CVE-2.patch [bz#1845384]
  - kvm-block-Call-attention-to-truncation-of-long-NBD-expor.patch [bz#1845384]
  - Resolves: bz#1845384
    (CVE-2020-10761 virt:8.2/qemu-kvm: QEMU: nbd: reachable assertion failure in nbd_negotiate_send_rep_verr via remote client [rhel-av-8])


author: Eduardo Lima (Etrunko) <elima@redhat.com> - 4.2.0-27.el8
changelog:
  - kvm-hw-pci-pcie-Move-hot-plug-capability-check-to-pre_pl.patch [bz#1820531]
  - kvm-spec-Fix-python-shenigans-for-tests.patch [bz#1845779]
  - kvm-target-i386-Add-ARCH_CAPABILITIES-related-bits-into-.patch [bz#1840342]
  - Resolves: bz#1820531
    (qmp command query-pci get wrong result after hotplug device under hotplug=off controller)
  - Resolves: bz#1840342
    ([Intel 8.2.1 Bug] qemu-kvm Add ARCH_CAPABILITIES to Icelake-Server cpu model - Fast Train)
  - Resolves: bz#1845779
    (Install 'qemu-kvm-tests' failed as nothing provides /usr/libexec/platform-python3 - virt module 6972)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-28.el8
changelog:
  - kvm-virtio-blk-Refactor-the-code-that-processes-queued-r.patch [bz#1812765]
  - kvm-virtio-blk-On-restart-process-queued-requests-in-the.patch [bz#1812765]
  - kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1838082]
  - Resolves: bz#1812765
    (qemu with iothreads enabled crashes on resume after enospc pause for disk extension)
  - Resolves: bz#1838082
    (CVE-2020-1983 virt:8.2/qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-29.el8
changelog:
  - kvm-virtio-net-fix-removal-of-failover-device.patch [bz#1820120]
  - Resolves: bz#1820120
    (After hotunplugging the vitrio device and netdev, hotunpluging the failover VF will cause qemu core dump)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-1.el8
changelog:
  - Quick changelog fix to reflect the current fixes:
  - Resolve: bz#1781911
  - Resolve: bz#1841529
  - Resolve: bz#1842902
  - Resolve: bz#1818843
  - Resolve: bz#1819292
  - Resolve: bz#1801242


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-2.el8
changelog:
  - kvm-redhat-define-hw_compat_8_2.patch [bz#1853265]
  - Resolves: bz#1853265
    (Forward and backward migration from rhel-av-8.3.0(qemu-kvm-5.0.0) to rhel-av-8.2.1(qemu-kvm-4.2.0) failed with "qemu-kvm: error while loading state for instance 0x0 of device 'spapr'")


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-3.el8
changelog:
  - kvm-redhat-Update-hw_compat_8_2.patch [bz#1843348]
  - kvm-redhat-update-pseries-rhel8.2.0-machine-type.patch [bz#1843348]
  - kvm-Disable-TPM-passthrough-backend-on-ARM.patch [bz#1801242]
  - kvm-Require-libfdt-1.6.0.patch [bz#1867847]
  - Resolves: bz#1801242
    ([aarch64] vTPM support in machvirt)
  - Resolves: bz#1843348
    (8.3 machine types for POWER)
  - Resolves: bz#1867847
    ([ppc] virt module 7629: /usr/libexec/qemu-kvm: undefined symbol: fdt_check_full, version LIBFDT_1.2)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-4.el8
changelog:
  - kvm-Drop-bogus-IPv6-messages.patch [bz#1867075]
  - kvm-machine-types-numa-set-numa_mem_supported-on-old-mac.patch [bz#1849707]
  - kvm-machine_types-numa-compatibility-for-auto_enable_num.patch [bz#1849707]
  - kvm-migration-Add-block-bitmap-mapping-parameter.patch [bz#1790492]
  - kvm-iotests.py-Let-wait_migration-return-on-failure.patch [bz#1790492]
  - kvm-iotests-Test-node-bitmap-aliases-during-migration.patch [bz#1790492]
  - Resolves: bz#1790492
    ('dirty-bitmaps' migration capability should allow configuring target nodenames)
  - Resolves: bz#1849707
    (8.3 machine types for x86 - 5.1 update)
  - Resolves: bz#1867075
    (CVE-2020-10756 virt:8.3/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-5.el8
changelog:
  - kvm-Revert-i386-Fix-pkg_id-offset-for-EPYC-cpu-models.patch [bz#1873417]
  - kvm-Revert-target-i386-Enable-new-apic-id-encoding-for-E.patch [bz#1873417]
  - kvm-Revert-hw-i386-Move-arch_id-decode-inside-x86_cpus_i.patch [bz#1873417]
  - kvm-Revert-i386-Introduce-use_epyc_apic_id_encoding-in-X.patch [bz#1873417]
  - kvm-Revert-hw-i386-Introduce-apicid-functions-inside-X86.patch [bz#1873417]
  - kvm-Revert-target-i386-Cleanup-and-use-the-EPYC-mode-top.patch [bz#1873417]
  - kvm-Revert-hw-386-Add-EPYC-mode-topology-decoding-functi.patch [bz#1873417]
  - kvm-nvram-Exit-QEMU-if-NVRAM-cannot-contain-all-prom-env.patch [bz#1867739]
  - kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869715]
  - kvm-Remove-explicit-glusterfs-api-dependency.patch [bz#1872853]
  - kvm-disable-virgl.patch [bz#1831271]
  - Resolves: bz#1831271
    (Drop virgil acceleration support and remove virglrenderer dependency)
  - Resolves: bz#1867739
    (-prom-env does not validate input)
  - Resolves: bz#1869715
    (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-av-8.3.0])
  - Resolves: bz#1872853
    (move the glusterfs dependency out of qemu-kvm-core to the glusterfs module)
  - Resolves: bz#1873417
    (AMD/NUMA topology - revert 5.1 changes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-6.el8
changelog:
  - kvm-spec-Move-qemu-pr-helper-back-to-usr-bin.patch [bz#1869635]
  - kvm-Bump-required-libusbx-version.patch [bz#1856591]
  - Resolves: bz#1856591
    (libusbx isn't updated with qemu-kvm)
  - Resolves: bz#1869635
    ('/usr/bin/qemu-pr-helper' is not a suitable pr helper: No such file or directory)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-7.el8
changelog:
  - kvm-target-ppc-Add-experimental-option-for-enabling-secu.patch [bz#1789757 bz#1870384]
  - kvm-target-arm-Move-start-powered-off-property-to-generi.patch [bz#1849483]
  - kvm-target-arm-Move-setting-of-CPU-halted-state-to-gener.patch [bz#1849483]
  - kvm-ppc-spapr-Use-start-powered-off-CPUState-property.patch [bz#1849483]
  - Resolves: bz#1789757
    ([IBM 8.4 FEAT] Add machine option to enable secure VM support)
  - Resolves: bz#1849483
    (Failed to boot up guest when hotplugging vcpus on bios stage)
  - Resolves: bz#1870384
    ([IBM 8.3 FEAT] Add interim/unsupported machine option to enable secure VM support for testing purposes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-8.el8
changelog:
  - kvm-redhat-link-etc-qemu-ga-fsfreeze-hook-to-etc-qemu-kv.patch [bz#1738820]
  - kvm-seccomp-fix-killing-of-whole-process-instead-of-thre.patch [bz#1752376]
  - kvm-Revert-Drop-bogus-IPv6-messages.patch [bz#1867075]
  - kvm-block-rbd-add-namespace-to-qemu_rbd_strong_runtime_o.patch [bz#1821528]
  - Resolves: bz#1738820
    ('-F' option of qemu-ga command  cause the guest-fsfreeze-freeze command doesn't work)
  - Resolves: bz#1752376
    (qemu use SCMP_ACT_TRAP even SCMP_ACT_KILL_PROCESS is available)
  - Resolves: bz#1821528
    (missing namespace attribute when access the rbd image with namespace)
  - Resolves: bz#1867075
    (CVE-2020-10756 virt:8.3/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-9.el8
changelog:
  - kvm-hw-nvram-fw_cfg-fix-FWCfgDataGeneratorClass-get_data.patch [bz#1688978]
  - Resolves: bz#1688978
    (RFE: forward host preferences for cipher suites and CA certs to guest firmware)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-10.el8
changelog:
  - kvm-qemu-img-Support-bitmap-merge-into-backing-image.patch [bz#1877209]
  - Resolves: bz#1877209
    ('qemu-img bitmaps --merge' failed when trying to merge top volume bitmap to base volume bitmap)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-11.el8_3
changelog:
  - kvm-migration-increase-max-bandwidth-to-128-MiB-s-1-Gib-.patch [bz#1874004]
  - kvm-redhat-Make-all-generated-so-files-executable-not-on.patch [bz#1876635]
  - Resolves: bz#1874004
    (Live migration performance is poor during guest installation process on power host)
  - Resolves: bz#1876635
    (VM fails to start with a passthrough smartcard)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-12.el8_3
changelog:
  - kvm-virtio-skip-legacy-support-check-on-machine-types-le.patch [bz#1868449]
  - kvm-vhost-vsock-pci-force-virtio-version-1.patch [bz#1868449]
  - kvm-vhost-user-vsock-pci-force-virtio-version-1.patch [bz#1868449]
  - kvm-vhost-vsock-ccw-force-virtio-version-1.patch [bz#1868449]
  - Resolves: bz#1868449
    (vhost_vsock error: device is modern-only, use disable-legacy=on)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-13.el8_3
changelog:
  - kvm-x86-lpc9-let-firmware-negotiate-CPU-hotplug-with-SMI.patch [bz#1846886]
  - kvm-x86-cpuhp-prevent-guest-crash-on-CPU-hotplug-when-br.patch [bz#1846886]
  - kvm-x86-cpuhp-refuse-cpu-hot-unplug-request-earlier-if-n.patch [bz#1846886]
  - Resolves: bz#1846886
    (Guest hit soft lockup or reboots if hotplug vcpu under ovmf)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-14.el8_3
changelog:
  - kvm-virtiofsd-avoid-proc-self-fd-tempdir.patch [bz#1884276]
  - Resolves: bz#1884276
    (Pod with kata-runtime won't start, QEMU: "vhost_user_dev init failed, Operation not permitted" [mkdtemp failing in sandboxing])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-15.el8
changelog:
  - kvm-redhat-add-un-pre-install-systemd-hooks-for-qemu-ga.patch [bz#1882719]
  - kvm-rcu-Implement-drain_call_rcu.patch [bz#1812399 bz#1866707]
  - kvm-libqtest-Rename-qmp_assert_error_class-to-qmp_expect.patch [bz#1812399 bz#1866707]
  - kvm-qtest-rename-qtest_qmp_receive-to-qtest_qmp_receive_.patch [bz#1812399 bz#1866707]
  - kvm-qtest-Reintroduce-qtest_qmp_receive-with-QMP-event-b.patch [bz#1812399 bz#1866707]
  - kvm-qtest-remove-qtest_qmp_receive_success.patch [bz#1812399 bz#1866707]
  - kvm-device-plug-test-use-qtest_qmp-to-send-the-device_de.patch [bz#1812399 bz#1866707]
  - kvm-qtest-switch-users-back-to-qtest_qmp_receive.patch [bz#1812399 bz#1866707]
  - kvm-qtest-check-that-drives-are-really-appearing-and-dis.patch [bz#1812399 bz#1866707]
  - kvm-qemu-iotests-qtest-rewrite-test-067-as-a-qtest.patch [bz#1812399 bz#1866707]
  - kvm-qdev-add-check-if-address-free-callback-for-buses.patch [bz#1812399 bz#1866707]
  - kvm-scsi-scsi_bus-switch-search-direction-in-scsi_device.patch [bz#1812399 bz#1866707]
  - kvm-device_core-use-drain_call_rcu-in-in-qmp_device_add.patch [bz#1812399 bz#1866707]
  - kvm-device-core-use-RCU-for-list-of-children-of-a-bus.patch [bz#1812399 bz#1866707]
  - kvm-scsi-switch-to-bus-check_address.patch [bz#1812399 bz#1866707]
  - kvm-device-core-use-atomic_set-on-.realized-property.patch [bz#1812399 bz#1866707]
  - kvm-scsi-scsi-bus-scsi_device_find-don-t-return-unrealiz.patch [bz#1812399]
  - kvm-scsi-scsi_bus-Add-scsi_device_get.patch [bz#1812399 bz#1866707]
  - kvm-virtio-scsi-use-scsi_device_get.patch [bz#1812399 bz#1866707]
  - kvm-scsi-scsi_bus-fix-races-in-REPORT-LUNS.patch [bz#1812399 bz#1866707]
  - kvm-tests-migration-fix-memleak-in-wait_command-wait_com.patch [bz#1812399 bz#1866707]
  - kvm-libqtest-fix-the-order-of-buffered-events.patch [bz#1812399 bz#1866707]
  - kvm-libqtest-fix-memory-leak-in-the-qtest_qmp_event_ref.patch [bz#1812399 bz#1866707]
  - kvm-iotests-add-filter_qmp_virtio_scsi-function.patch [bz#1812399 bz#1866707]
  - kvm-iotests-rewrite-iotest-240-in-python.patch [bz#1812399 bz#1866707]
  - Resolves: bz#1812399
    (Qemu crash when detach disk with cache="none" discard="ignore" io="native")
  - Resolves: bz#1866707
    (qemu-kvm is crashing with error "scsi_target_emulate_report_luns: Assertion `i == n + 8' failed")
  - Resolves: bz#1882719
    (qemu-ga service still active and can work after qemu-guest-agent been removed)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-16.el8
changelog:
  - kvm-redhat-introduces-disable_everything-macro-into-the-.patch [bz#1884611]
  - kvm-redhat-scripts-extract_build_cmd.py-Avoid-listing-em.patch [bz#1884611]
  - kvm-redhat-Removing-unecessary-configurations.patch [bz#1884611]
  - kvm-redhat-Fixing-rh-local-build.patch [bz#1884611]
  - kvm-redhat-allow-Makefile-rh-prep-builddep-to-fail.patch [bz#1884611]
  - kvm-redhat-adding-rh-rpm-target.patch [bz#1884611]
  - kvm-redhat-move-shareable-files-from-qemu-kvm-core-to-qe.patch [bz#1884611]
  - kvm-redhat-Add-qemu-kiwi-subpackage.patch [bz#1884611]
  - Resolves: bz#1884611
    (Build kata-specific version of qemu)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-2.el8
changelog:
  - kvm-redhat-Define-hw_compat_8_3.patch [bz#1893935]
  - kvm-redhat-Add-spapr_machine_rhel_default_class_options.patch [bz#1893935]
  - kvm-redhat-Define-pseries-rhel8.4.0-machine-type.patch [bz#1893935]
  - kvm-redhat-s390x-add-rhel-8.4.0-compat-machine.patch [bz#1836282]
  - Resolves: bz#1836282
    (New machine type for qemu-kvm on s390x in RHEL-AV)
  - Resolves: bz#1893935
    (New machine type on RHEL-AV 8.4 for ppc64le)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-3.el8
changelog:
  - kvm-block-nvme-Implement-fake-truncate-coroutine.patch [bz#1848834]
  - kvm-spec-find-system-python-via-meson.patch [bz#1899619]
  - kvm-build-system-use-b_staticpic-false.patch [bz#1899619]
  - kvm-spapr-Fix-buffer-overflow-in-spapr_numa_associativit.patch [bz#1908693]
  - kvm-usb-hcd-xhci-pci-Fixup-capabilities-ordering-again.patch [bz#1912846]
  - kvm-qga-commands-posix-Send-CCW-address-on-s390x-with-th.patch [bz#1755075]
  - kvm-AArch64-machine-types-cleanup.patch [bz#1895276]
  - kvm-hw-arm-virt-Add-8.4-Machine-type.patch [bz#1895276]
  - kvm-udev-kvm-check-remove-the-exceeded-subscription-limi.patch [bz#1914463]
  - kvm-memory-Rename-memory_region_notify_one-to-memory_reg.patch [bz#1845758]
  - kvm-memory-Add-IOMMUTLBEvent.patch [bz#1845758]
  - kvm-memory-Add-IOMMU_NOTIFIER_DEVIOTLB_UNMAP-IOMMUTLBNot.patch [bz#1845758]
  - kvm-intel_iommu-Skip-page-walking-on-device-iotlb-invali.patch [bz#1845758]
  - kvm-memory-Skip-bad-range-assertion-if-notifier-is-DEVIO.patch [bz#1845758]
  - kvm-RHEL-Switch-pvpanic-test-to-q35.patch [bz#1885555]
  - kvm-8.4-x86-machine-type.patch [bz#1885555]
  - kvm-memory-clamp-cached-translation-in-case-it-points-to.patch [bz#1904392]
  - Resolves: bz#1848834
    (Failed to create luks format image on NVMe device)
  - Resolves: bz#1899619
    (QEMU 5.2 is built with PIC objects instead of PIE)
  - Resolves: bz#1908693
    ([ppc64le]boot up a guest with 128 numa nodes ,qemu got coredump)
  - Resolves: bz#1912846
    (qemu-kvm: Failed to load xhci:parent_obj during migration)
  - Resolves: bz#1755075
    ([qemu-guest-agent] fsinfo doesn't return disk info on s390x)
  - Resolves: bz#1895276
    (Machine types update for aarch64 for QEMU 5.2.0)
  - Resolves: bz#1914463
    (Remove KVM guest count and limit info message)
  - Resolves: bz#1845758
    (qemu core dumped: qemu-kvm: /builddir/build/BUILD/qemu-4.2.0/memory.c:1928: memory_region_notify_one: Assertion `entry->iova >= notifier->start && entry_end <= notifier->end' failed.)
  - Resolves: bz#1885555
    (8.4 machine types for x86)
  - Resolves: bz#1904392
    (CVE-2020-27821 virt:8.4/qemu-kvm: QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-4.el8
changelog:
  - kvm-Drop-bogus-IPv6-messages.patch [bz#1918061]
  - Resolves: bz#1918061
    (CVE-2020-10756 virt:rhel/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-av-8])


author: Eduardo Lima (Etrunko) <elima@redhat.com> - 5.2.0-5.el8
changelog:
  - kvm-spapr-Allow-memory-unplug-to-always-succeed.patch [bz#1914069]
  - kvm-spapr-Improve-handling-of-memory-unplug-with-old-gue.patch [bz#1914069]
  - kvm-x86-cpu-Add-AVX512_FP16-cpu-feature.patch [bz#1838738]
  - kvm-q35-Increase-max_cpus-to-710-on-pc-q35-rhel8-machine.patch [bz#1904268]
  - kvm-config-enable-VFIO_CCW.patch [bz#1922170]
  - Resolves: bz#1914069
    ([ppc64le] have this fix for rhel8.4 av (spapr: Allow memory unplug to always succeed))
  - Resolves: bz#1838738
    ([Intel 8.4 FEAT] qemu-kvm Sapphire Rapids (SPR) New Instructions (NIs) - Fast Train)
  - Resolves: bz#1904268
    ([RFE] [HPEMC] qemu-kvm: support up to 710 VCPUs)
  - Resolves: bz#1922170
    (Enable vfio-ccw in AV)


author: Eduardo Lima (Etrunko) <elima@redhat.com> - 5.2.0-6.el8
changelog:
  - kvm-scsi-fix-device-removal-race-vs-IO-restart-callback-.patch [bz#1854811]
  - kvm-tracetool-also-strip-l-and-ll-from-systemtap-format-.patch [bz#1907264]
  - kvm-redhat-moving-all-documentation-files-to-qemu-kvm-do.patch [bz#1881170 bz#1924766]
  - kvm-hw-arm-smmuv3-Fix-addr_mask-for-range-based-invalida.patch [bz#1834152]
  - kvm-redhat-makes-qemu-respect-system-s-crypto-profile.patch [bz#1902219]
  - kvm-vhost-Unbreak-SMMU-and-virtio-iommu-on-dev-iotlb-sup.patch [bz#1925028]
  - kvm-docs-set-CONFDIR-when-running-sphinx.patch [bz#1902537]
  - Resolves: bz#1854811
    (scsi-bus.c: use-after-free due to race between device unplug and I/O operation causes guest crash)
  - Resolves: bz#1907264
    (systemtap: invalid or missing conversion specifier at the trace event vhost_vdpa_set_log_base)
  - Resolves: bz#1881170
    (split documentation from the qemu-kvm-core package to its own subpackage)
  - Resolves: bz#1924766
    (split documentation from the qemu-kvm-core package to its own subpackage [av-8.4.0])
  - Resolves: bz#1834152
    ([aarch64] QEMU SMMUv3 device: Support range invalidation)
  - Resolves: bz#1902219
    (QEMU doesn't honour system crypto policies)
  - Resolves: bz#1925028
    (vsmmuv3/vhost and virtio-iommu/vhost regression)
  - Resolves: bz#1902537
    (The default fsfreeze-hook path from man page and qemu-ga --help command are different)


author: Eduardo Lima (Etrunko) <elima@redhat.com> - 5.2.0-7.el8
changelog:
  - kvm-virtio-Add-corresponding-memory_listener_unregister-.patch [bz#1903521]
  - kvm-block-Honor-blk_set_aio_context-context-requirements.patch [bz#1918966 bz#1918968]
  - kvm-nbd-server-Quiesce-coroutines-on-context-switch.patch [bz#1918966 bz#1918968]
  - kvm-block-Avoid-processing-BDS-twice-in-bdrv_set_aio_con.patch [bz#1918966 bz#1918968]
  - kvm-storage-daemon-Call-bdrv_close_all-on-exit.patch [bz#1918966 bz#1918968]
  - kvm-block-move-blk_exp_close_all-to-qemu_cleanup.patch [bz#1918966 bz#1918968]
  - Resolves: bz#1903521
    (hot unplug vhost-user cause qemu crash: qemu-kvm: ../softmmu/memory.c:2818: do_address_space_destroy: Assertion `QTAILQ_EMPTY(&as->listeners)' failed.)
  - Resolves: bz#1918966
    ([incremental_backup] qemu aborts if guest reboot during backup when using virtio-blk: "aio_co_schedule: Co-routine was already scheduled in 'aio_co_schedule'")
  - Resolves: bz#1918968
    ([incremental_backup] qemu deadlock after poweroff in guest during backup in nbd_export_close_all())


author: Eduardo Lima (Etrunko) <elima@redhat.com> - 5.2.0-8.el8
changelog:
  - kvm-block-nbd-only-detach-existing-iochannel-from-aio_co.patch [bz#1887883]
  - kvm-block-nbd-only-enter-connection-coroutine-if-it-s-pr.patch [bz#1887883]
  - kvm-nbd-make-nbd_read-return-EIO-on-error.patch [bz#1887883]
  - kvm-virtio-move-use-disabled-flag-property-to-hw_compat_.patch [bz#1907255]
  - kvm-virtiofsd-extract-lo_do_open-from-lo_open.patch [bz#1920740]
  - kvm-virtiofsd-optionally-return-inode-pointer-from-lo_do.patch [bz#1920740]
  - kvm-virtiofsd-prevent-opening-of-special-files-CVE-2020-.patch [bz#1920740]
  - kvm-spapr-Adjust-firmware-path-of-PCI-devices.patch [bz#1920941]
  - kvm-pci-reject-too-large-ROMs.patch [bz#1917830]
  - kvm-pci-add-romsize-property.patch [bz#1917830]
  - kvm-redhat-Add-some-devices-for-exporting-upstream-machi.patch [bz#1917826]
  - kvm-vhost-Check-for-valid-vdev-in-vhost_backend_handle_i.patch [bz#1880299]
  - Resolves: bz#1887883
    (qemu blocks client progress with various NBD actions)
  - Resolves: bz#1907255
    (Migrate failed with vhost-vsock-pci from RHEL-AV 8.3.1 to RHEL-AV 8.2.1)
  - Resolves: bz#1920740
    (CVE-2020-35517 virt:8.4/qemu-kvm: QEMU: virtiofsd: potential privileged host device access from guest [rhel-av-8.4.0])
  - Resolves: bz#1920941
    ([ppc64le] [AV]--disk cdimage.iso,bus=usb fails to boot)
  - Resolves: bz#1917830
    (Add romsize property to qemu-kvm)
  - Resolves: bz#1917826
    (Add extra device support to qemu-kvm, but not to rhel machine types)
  - Resolves: bz#1880299
    (vhost-user mq connection fails to restart after kill host testpmd which acts as vhost-user client)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-9.el8
changelog:
  - kvm-docs-generate-qemu-storage-daemon-qmp-ref-7-man-page.patch [bz#1901323]
  - kvm-docs-add-qemu-storage-daemon-1-man-page.patch [bz#1901323]
  - kvm-docs-Add-qemu-storage-daemon-1-manpage-to-meson.buil.patch [bz#1901323]
  - kvm-qemu-storage-daemon-Enable-object-add.patch [bz#1901323]
  - kvm-spec-Package-qemu-storage-daemon.patch [bz#1901323]
  - kvm-default-configs-Enable-vhost-user-blk.patch [bz#1930033]
  - kvm-qemu-nbd-Use-SOMAXCONN-for-socket-listen-backlog.patch [bz#1925345]
  - kvm-pcie-don-t-set-link-state-active-if-the-slot-is-empt.patch [bz#1917654]
  - Resolves: bz#1901323
    (QSD (QEMU Storage Daemon): basic support - TechPreview)
  - Resolves: bz#1930033
    (enable vhost-user-blk device)
  - Resolves: bz#1925345
    (qemu-nbd needs larger backlog for Unix socket listen())
  - Resolves: bz#1917654
    ([failover vf migration][RHEL84 vm] After start a vm with a failover vf + a failover virtio net device, the failvoer vf do not exist in the vm)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-10.el8
changelog:
  - kvm-migration-dirty-bitmap-Use-struct-for-alias-map-inne.patch [bz#1930757]
  - kvm-migration-dirty-bitmap-Allow-control-of-bitmap-persi.patch [bz#1930757]
  - kvm-qemu-iotests-300-Add-test-case-for-modifying-persist.patch [bz#1930757]
  - kvm-failover-fix-indentantion.patch [bz#1819991]
  - kvm-failover-Use-always-atomics-for-primary_should_be_hi.patch [bz#1819991]
  - kvm-failover-primary-bus-is-only-used-once-and-where-it-.patch [bz#1819991]
  - kvm-failover-Remove-unused-parameter.patch [bz#1819991]
  - kvm-failover-Remove-external-partially_hotplugged-proper.patch [bz#1819991]
  - kvm-failover-qdev_device_add-returns-err-or-dev-set.patch [bz#1819991]
  - kvm-failover-Rename-bool-to-failover_primary_hidden.patch [bz#1819991]
  - kvm-failover-g_strcmp0-knows-how-to-handle-NULL.patch [bz#1819991]
  - kvm-failover-Remove-primary_device_opts.patch [bz#1819991]
  - kvm-failover-remove-standby_id-variable.patch [bz#1819991]
  - kvm-failover-Remove-primary_device_dict.patch [bz#1819991]
  - kvm-failover-Remove-memory-leak.patch [bz#1819991]
  - kvm-failover-simplify-virtio_net_find_primary.patch [bz#1819991]
  - kvm-failover-should_be_hidden-should-take-a-bool.patch [bz#1819991]
  - kvm-failover-Rename-function-to-hide_device.patch [bz#1819991]
  - kvm-failover-virtio_net_connect_failover_devices-does-no.patch [bz#1819991]
  - kvm-failover-Rename-to-failover_find_primary_device.patch [bz#1819991]
  - kvm-failover-simplify-qdev_device_add-failover-case.patch [bz#1819991]
  - kvm-failover-simplify-qdev_device_add.patch [bz#1819991]
  - kvm-failover-make-sure-that-id-always-exist.patch [bz#1819991]
  - kvm-failover-remove-failover_find_primary_device-error-p.patch [bz#1819991]
  - kvm-failover-split-failover_find_primary_device_id.patch [bz#1819991]
  - kvm-failover-We-don-t-need-to-cache-primary_device_id-an.patch [bz#1819991]
  - kvm-failover-Caller-of-this-two-functions-already-have-p.patch [bz#1819991]
  - kvm-failover-simplify-failover_unplug_primary.patch [bz#1819991]
  - kvm-failover-Remove-primary_dev-member.patch [bz#1819991]
  - kvm-virtio-net-add-missing-object_unref.patch [bz#1819991]
  - kvm-x86-cpu-Populate-SVM-CPUID-feature-bits.patch [bz#1926785]
  - kvm-i386-Add-the-support-for-AMD-EPYC-3rd-generation-pro.patch [bz#1926785]
  - Resolves: bz#1930757
    (Allow control of block-dirty-bitmap persistence via 'block-bitmap-mapping')
  - Resolves: bz#1819991
    (Hostdev type interface with net failover enabled exists in domain xml and doesn't reattach to host after hot-unplug)
  - Resolves: bz#1926785
    ([RFE] AMD Milan - Add KVM/support for EPYC-Milan CPU Model - Fast Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-11.el8
changelog:
  - kvm-qxl-set-qxl.ssd.dcl.con-on-secondary-devices.patch [bz#1932190]
  - kvm-qxl-also-notify-the-rendering-is-done-when-skipping-.patch [bz#1932190]
  - kvm-virtiofsd-Save-error-code-early-at-the-failure-calls.patch [bz#1935071]
  - kvm-virtiofs-drop-remapped-security.capability-xattr-as-.patch [bz#1935071]
  - Resolves: bz#1932190
    (Timeout when dump the screen from 2nd VGA)
  - Resolves: bz#1935071
    (CVE-2021-20263 virt:8.4/qemu-kvm: QEMU: virtiofsd: 'security.capabilities' is not dropped with xattrmap option [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-12.el8
changelog:
  - kvm-scsi-disk-move-scsi_handle_rw_error-earlier.patch [bz#1927530]
  - kvm-scsi-disk-do-not-complete-requests-early-for-rerror-.patch [bz#1927530]
  - kvm-scsi-introduce-scsi_sense_from_errno.patch [bz#1927530]
  - kvm-scsi-disk-pass-SCSI-status-to-scsi_handle_rw_error.patch [bz#1927530]
  - kvm-scsi-disk-pass-guest-recoverable-errors-through-even.patch [bz#1927530]
  - kvm-hw-intc-arm_gic-Fix-interrupt-ID-in-GICD_SGIR-regist.patch [bz#1936948]
  - Resolves: bz#1927530
    (RHEL8 Hypervisor - OVIRT  - Issues seen on a virtualization guest with direct passthrough LUNS  pausing when a host gets a Thin threshold warning)
  - Resolves: bz#1936948
    (CVE-2021-20221 virt:av/qemu-kvm: qemu: out-of-bound heap buffer access via an interrupt ID field [rhel-av-8.4.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-13.el8
changelog:
  - kvm-i386-acpi-restore-device-paths-for-pre-5.1-vms.patch [bz#1934158]
  - Resolves: bz#1934158
    (Windows guest looses network connectivity when NIC was configured with static IP)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-14.el8
changelog:
  - kvm-vhost-user-blk-fix-blkcfg-num_queues-endianness.patch [bz#1937004]
  - kvm-block-export-fix-blk_size-double-byteswap.patch [bz#1937004]
  - kvm-block-export-use-VIRTIO_BLK_SECTOR_BITS.patch [bz#1937004]
  - kvm-block-export-fix-vhost-user-blk-export-sector-number.patch [bz#1937004]
  - kvm-block-export-port-virtio-blk-discard-write-zeroes-in.patch [bz#1937004]
  - kvm-block-export-port-virtio-blk-read-write-range-check.patch [bz#1937004]
  - kvm-spec-ui-spice-sub-package.patch [bz#1936373]
  - kvm-spec-ui-opengl-sub-package.patch [bz#1936373]
  - Resolves: bz#1937004
    (vhost-user-blk server endianness and input validation fixes)
  - Resolves: bz#1936373
    (move spice & opengl modules to rpm subpackages)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-15.el8_4
changelog:
  - kvm-block-Simplify-qmp_block_resize-error-paths.patch [bz#1903511]
  - kvm-block-Fix-locking-in-qmp_block_resize.patch [bz#1903511]
  - kvm-block-Fix-deadlock-in-bdrv_co_yield_to_drain.patch [bz#1903511]
  - Resolves: bz#1903511
    (no response on  QMP command 'block_resize')


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-16.el8
changelog:
  - kvm-virtio-pci-compat-page-aligned-ATS.patch [bz#1942362]
  - Resolves: bz#1942362
    (Live migration with iommu from rhel8.3.1 to rhel8.4 fails: qemu-kvm: get_pci_config_device: Bad config data)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-17.el8
changelog:
  - kvm-redhat-s390x-add-rhel-8.5.0-compat-machine.patch [bz#1951476]
  - kvm-redhat-add-missing-entries-in-hw_compat_rhel_8_4.patch [bz#1957834]
  - kvm-redhat-Define-pseries-rhel8.5.0-machine-type.patch [bz#1957834]
  - Resolves: bz#1951476
    ([s390x] RHEL AV 8.5 new machine type for s390x)
  - Resolves: bz#1957834
    ([ppc64le] RHEL AV 8.5 new machine type for ppc64le)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-18.el8
changelog:
  - kvm-virtio-net-failover-add-missing-remove_migration_sta.patch [bz#1953045]
  - kvm-hw-arm-virt-Add-8.5-machine-type.patch [bz#1957667]
  - kvm-hw-arm-virt-Disable-PL011-clock-migration-through-hw.patch [bz#1957667]
  - kvm-arm-virt-Register-highmem-and-gic-version-as-class-p.patch [bz#1957667]
  - kvm-virtio-blk-Fix-rollback-path-in-virtio_blk_data_plan.patch [bz#1927108]
  - kvm-virtio-blk-Configure-all-host-notifiers-in-a-single-.patch [bz#1927108]
  - kvm-virtio-scsi-Set-host-notifiers-and-callbacks-separat.patch [bz#1927108]
  - kvm-virtio-scsi-Configure-all-host-notifiers-in-a-single.patch [bz#1927108]
  - kvm-hw-arm-smmuv3-Another-range-invalidation-fix.patch [bz#1929720]
  - Resolves: bz#1953045
    (qemu-kvm NULL pointer de-reference  during migration at migrate_fd_connect ->...-> notifier_list_notify)
  - Resolves: bz#1957667
    ([aarch64] Add 8.5 machine type)
  - Resolves: bz#1927108
    (It's too slow to load scsi  disk when use 384 vcpus)
  - Resolves: bz#1929720
    ([aarch64] Handle vsmmuv3 IOTLB invalidation with non power of 2 size)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-19.el8
changelog:
  - kvm-pc-bios-s390-ccw-don-t-try-to-read-the-next-block-if.patch [bz#1965626]
  - kvm-redhat-Install-the-s390-netboot.img-that-we-ve-built.patch [bz#1966463]
  - kvm-sockets-update-SOCKET_ADDRESS_TYPE_FD-listen-2-backl.patch [bz#1967177]
  - kvm-target-i386-sev-add-support-to-query-the-attestation.patch [bz#1957022]
  - kvm-spapr-Don-t-hijack-current_machine-boot_order.patch [bz#1960119]
  - kvm-target-i386-Add-CPU-model-versions-supporting-xsaves.patch [bz#1942914]
  - kvm-spapr-Remove-stale-comment-about-power-saving-LPCR-b.patch [bz#1940731]
  - kvm-spapr-Set-LPCR-to-current-AIL-mode-when-starting-a-n.patch [bz#1940731]
  - Resolves: bz#1965626
    (RHEL8.2 - QEMU BIOS fails to read stage2 loader (kvm))
  - Resolves: bz#1966463
    (Rebuild the s390-netboot.img for downstream instead of shipping the upstream image)
  - Resolves: bz#1967177
    (QEMU 6.0.0 socket_get_fd() fails with the error "socket_get_fd: too many connections")
  - Resolves: bz#1957022
    (SEV: Add support to query the attestation report)
  - Resolves: bz#1960119
    ([regression]Failed to reset guest)
  - Resolves: bz#1942914
    ([Hyper-V][RHEL8.4]Nested Hyper-V on KVM: On Intel CPU L1 2016 can not start with cpu model Skylake-Server-noTSX-IBRS or Skylake-Client-noTSX-IBRS)
  - Resolves: bz#1940731
    ([ppc64le] Hotplug vcpu device hit call trace:[qemu output] KVM: unknown exit, hardware reason 7fff9ce87ed8)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-20.el8
changelog:
  - kvm-x86-Add-x86-rhel8.5-machine-types.patch [bz#1957838]
  - kvm-redhat-x86-Enable-kvm-asyncpf-int-by-default.patch [bz#1967603]
  - kvm-yank-Unregister-function-when-using-TLS-migration.patch [bz#1964326]
  - Resolves: bz#1957838
    (8.5 machine types for x86)
  - Resolves: bz#1967603
    (Enable interrupt based asynchronous page fault mechanism by default)
  - Resolves: bz#1964326
    (Qemu core dump when do tls migration via tcp protocol)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-21.el8
changelog:
  - kvm-block-backend-add-drained_poll.patch [bz#1960137]
  - kvm-nbd-server-Use-drained-block-ops-to-quiesce-the-serv.patch [bz#1960137]
  - kvm-disable-CONFIG_USB_STORAGE_BOT.patch [bz#1866133]
  - kvm-doc-Fix-some-mistakes-in-the-SEV-documentation.patch [bz#1954750]
  - kvm-docs-Add-SEV-ES-documentation-to-amd-memory-encrypti.patch [bz#1954750]
  - kvm-docs-interop-firmware.json-Add-SEV-ES-support.patch [bz#1954750]
  - Resolves: bz#1960137
    ([incremental backup] qemu-kvm hangs when Rebooting the VM during full backup)
  - Resolves: bz#1866133
    (Disable usb-bot device in QEMU (unsupported))
  - Resolves: bz#1954750
    (firmware scheme for sev-es)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-22.el8
changelog:
  - kvm-redhat-Expose-upstream-machines-pc-4.2-and-pc-2.11.patch [bz#1897923]
  - kvm-redhat-Enable-FDC-device-for-upstream-machines-too.patch [bz#1897923]
  - kvm-redhat-Add-hw_compat_4_2_extra-and-apply-to-upstream.patch [bz#1897923]
  - kvm-ppc-pef.c-initialize-cgs-ready-in-kvmppc_svm_init.patch [bz#1789757]
  - kvm-virtio-gpu-handle-partial-maps-properly.patch [bz#1932279]
  - kvm-redhat-Fix-unversioned-Obsoletes-warning.patch [bz#1950405 bz#1967330]
  - kvm-redhat-Move-qemu-kvm-docs-dependency-to-qemu-kvm.patch [bz#1950405 bz#1967330]
  - kvm-redhat-introducting-qemu-kvm-hw-usbredir.patch [bz#1950405 bz#1967330]
  - kvm-spapr-Fix-EEH-capability-issue-on-KVM-guest-for-PCI-.patch [bz#1976015]
  - Resolves: bz#1897923
    (support Live Migration from Ubuntu 18.04 i440fx to RHEL)
  - Resolves: bz#1789757
    ([IBM 8.5 FEAT] Add machine option to enable secure VM support)
  - Resolves: bz#1932279
    ([aarch64] qemu core dumped when using smmuv3 and iommu_platform enabling at virtio-gpu-pci)
  - Resolves: bz#1950405
    (review qemu-kvm-core dependencies)
  - Resolves: bz#1967330
    (Make qemu-kvm use versioned obsoletes for qemu-kvm-ma and qemu-kvm-rhev)
  - Resolves: bz#1976015
    (spapr: Fix EEH capability issue on KVM guest for PCI passthru)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-23.el8
changelog:
  - kvm-Add-mtod_check.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-bootp-limit-vendor-specific-area-to-input-packet-mem.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-bootp-check-bootp_input-buffer-size.patch [bz#1970823]
  - kvm-upd6-check-udp6_input-buffer-size.patch [bz#1970842]
  - kvm-tftp-check-tftp_input-buffer-size.patch [bz#1970850]
  - kvm-tftp-introduce-a-header-structure.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-udp-check-upd_input-buffer-size.patch [bz#1970858]
  - kvm-Fix-DHCP-broken-in-libslirp-v4.6.0.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-redhat-use-the-standard-vhost-user-JSON-path.patch [bz#1804196]
  - Resolves: bz#1970823
    (CVE-2021-3592 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) [rhel-av-8])
  - Resolves: bz#1970842
    (CVE-2021-3593 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) [rhel-av-8])
  - Resolves: bz#1970850
    (CVE-2021-3595 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) [rhel-av-8])
  - Resolves: bz#1970858
    (CVE-2021-3594 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) [rhel-av-8])
  - Resolves: bz#1804196
    (inconsistent paths for interop json files)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-24.el8
changelog:
  - kvm-s390x-css-Introduce-an-ESW-struct.patch [bz#1968326]
  - kvm-s390x-css-Split-out-the-IRB-sense-data.patch [bz#1968326]
  - kvm-s390x-css-Refactor-IRB-construction.patch [bz#1968326]
  - kvm-s390x-css-Add-passthrough-IRB.patch [bz#1968326]
  - kvm-vhost-user-blk-Fail-gracefully-on-too-large-queue-si.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Make-sure-to-set-Error-on-realize-fai.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Don-t-reconnect-during-initialisation.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Improve-error-reporting-in-realize.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Get-more-feature-flags-from-vhost-dev.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-virtio-Fail-if-iommu_platform-is-requested-but-unsup.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Check-that-num-queues-is-supported-by.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-Fix-backends-without-multiqueue-support.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - Resolves: bz#1968326
    ([vfio_ccw] I/O error when checking format - dasdfmt requires --force in quick mode when passed through)
  - Resolves: bz#1935014
    (qemu crash when attach vhost-user-blk-pci with option queue-size=4096)
  - Resolves: bz#1935019
    (qemu guest failed boot when attach vhost-user-blk-pci with option iommu_platform=on)
  - Resolves: bz#1935020
    (qemu guest failed boot when attach vhost-user-blk-pci with option packed=on)
  - Resolves: bz#1935031
    (qemu guest failed boot when attach vhost-user-blk-pci with unmatched num-queues with qsd)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-25.el8
changelog:
  - kvm-s390x-cpumodel-add-3931-and-3932.patch [bz#1976171]
  - kvm-file-posix-fix-max_iov-for-dev-sg-devices.patch [bz#1943653]
  - kvm-scsi-generic-pass-max_segments-via-max_iov-field-in-.patch [bz#1943653]
  - kvm-osdep-provide-ROUND_DOWN-macro.patch [bz#1943653]
  - kvm-block-backend-align-max_transfer-to-request-alignmen.patch [bz#1943653]
  - kvm-block-add-max_hw_transfer-to-BlockLimits.patch [bz#1943653]
  - kvm-file-posix-try-BLKSECTGET-on-block-devices-too-do-no.patch [bz#1943653]
  - Resolves: bz#1976171
    ([IBM 8.5 FEAT] CPU Model for new IBM Z Hardware - qemu part)
  - Resolves: bz#1943653
    (RHV VM pauses due to 'qemu-kvm' getting EINVAL on i/o to a direct lun with scsi passthrough enabled)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-26
changelog:
  - kvm-acpi-pc-revert-back-to-v5.2-PCI-slot-enumeration.patch [bz#1977798]
  - kvm-migration-failover-reset-partially_hotplugged.patch [bz#1787194]
  - kvm-hmp-Fix-loadvm-to-resume-the-VM-on-success-instead-o.patch [bz#1959676]
  - kvm-migration-Move-bitmap_mutex-out-of-migration_bitmap_.patch [bz#1959729]
  - kvm-i386-cpu-Expose-AVX_VNNI-instruction-to-guest.patch [bz#1924822]
  - kvm-ratelimit-protect-with-a-mutex.patch [bz#1838221]
  - kvm-Update-Linux-headers-to-5.13-rc4.patch [bz#1838221]
  - kvm-i386-Add-ratelimit-for-bus-locks-acquired-in-guest.patch [bz#1838221]
  - kvm-iothread-generalize-iothread_set_param-iothread_get_.patch [bz#1930286]
  - kvm-iothread-add-aio-max-batch-parameter.patch [bz#1930286]
  - kvm-linux-aio-limit-the-batch-size-using-aio-max-batch-p.patch [bz#1930286]
  - kvm-block-nvme-Fix-VFIO_MAP_DMA-failed-No-space-left-on-.patch [bz#1848881]
  - Resolves: bz#1977798
    (RHEL8.5 guest network interface name changed after upgrade to qemu-6.0)
  - Resolves: bz#1787194
    (After canceling the migration of a vm with VF which enables failover, using "migrate -d tcp:invalid uri" to re-migrating the vm will cause the VF in vm to be hot-unplug.)
  - Resolves: bz#1959676
    (guest status is paused after loadvm on rhel8.5.0)
  - Resolves: bz#1959729
    (SAP/3TB VM migration slowness [idle db])
  - Resolves: bz#1924822
    ([Intel 8.5 FEAT] qemu-kvm AVX2 VNNI - Fast Train)
  - Resolves: bz#1838221
    ([Intel 8.5 FEAT]  qemu-kvm Bus Lock VM Exit - Fast Train)
  - Resolves: bz#1930286
    (randread and randrw regression with virtio-blk multi-queue)
  - Resolves: bz#1848881
    (nvme:// block driver can exhaust IOMMU DMAs, hanging the VM, possible data loss)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-27
changelog:
  - kvm-migration-move-wait-unplug-loop-to-its-own-function.patch [bz#1976852]
  - kvm-migration-failover-continue-to-wait-card-unplug-on-e.patch [bz#1976852]
  - kvm-aarch64-Add-USB-storage-devices.patch [bz#1974579]
  - Resolves: bz#1976852
    ([failover vf migration]  The failover vf will be unregistered  if canceling the migration whose status is "wait-unplug")
  - Resolves: bz#1974579
    (It's not possible to start installation from a virtual USB device on aarch64)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-28.el8
changelog:
  - kvm-iotests-Improve-and-rename-test-291-to-qemu-img-bitm.patch [bz#1946084]
  - kvm-qemu-img-Fail-fast-on-convert-bitmaps-with-inconsist.patch [bz#1946084]
  - kvm-qemu-img-Add-skip-broken-bitmaps-for-convert-bitmaps.patch [bz#1946084]
  - kvm-audio-Never-send-migration-section.patch [bz#1991671]
  - Resolves: bz#1946084
    (qemu-img convert --bitmaps fail if a bitmap is inconsistent)
  - Resolves: bz#1991671
    (vmstate differs between -audiodev and QEMU_AUDIO_DRV when no sound frontends devs present.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-29.el8
changelog:
  - kvm-file-posix-Cap-max_iov-at-IOV_MAX.patch [bz#1994494]
  - kvm-migration-Move-yank-outside-qemu_start_incoming_migr.patch [bz#1974366]
  - Resolves: bz#1994494
    (VM remains in paused state when trying to write on a resized disk resides on iscsi)
  - Resolves: bz#1974366
    (Fail to set migrate incoming for 2nd time after the first time failed)


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-2
changelog:
  - kvm-qxl-fix-pre-save-logic.patch [bz#2002907]
  - kvm-redhat-Define-hw_compat_rhel_8_5.patch [bz#1998949]
  - kvm-redhat-Update-pseries-rhel8.5.0.patch [bz#1998949]
  - kvm-redhat-Add-s390x-machine-type-compatibility-update-f.patch [bz#1998950]
  - Resolves: bz#2002907
    (Unexpectedly failed when managedsave the guest which has qxl video device)
  - Resolves: bz#1998949
    (Add machine type compatibility update for 6.1 rebase [ppc64le])
  - Resolves: bz#1998950
    (Add machine type compatibility update for 6.1 rebase [s390x])


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-3
changelog:
  - kvm-virtio-net-fix-use-after-unmap-free-for-sg.patch [bz#1999221]
  - Resolves: bz#1999221
    (CVE-2021-3748 virt:rhel/qemu-kvm: QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-4
changelog:
  - kvm-spec-Remove-qemu-kiwi-build.patch [bz#2002694]
  - kvm-hw-arm-virt-Add-hw_compat_rhel_8_5-to-8.5-machine-ty.patch [bz#1998947]
  - Resolves: bz#2002694
    (remove qemu-kiwi rpm from qemu-kvm sources in rhel-8.6)
  - Resolves: bz#1998947
    (Add machine type compatibility update for 6.1 rebase [aarch64])


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-5
changelog:
  - kvm-e1000-fix-tx-re-entrancy-problem.patch [bz#1930092]
  - kvm-hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-allowed-in-MODE.patch [bz#2020720]
  - Resolves: bz#1930092
    (CVE-2021-20257 virt:rhel/qemu-kvm: QEMU: net: e1000: infinite loop while processing transmit descriptors [rhel-8.5.0])
  - Resolves: bz#2020720
    (CVE-2021-3930 virt:rhel/qemu-kvm: QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-2
changelog:
  - kvm-redhat-Add-rhel8.6.0-machine-type-for-s390x.patch [bz#2005325]
  - kvm-redhat-Define-pseries-rhel8.6.0-machine-type.patch [bz#2031041]
  - Resolves: bz#2005325
    (Fix CPU Model for new IBM Z Hardware - qemu part)
  - Resolves: bz#2031041
    (Add rhel-8.6.0 machine types for RHEL 8.6 [ppc64le])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-4
changelog:
  - kvm-hw-arm-virt-Register-iommu-as-a-class-property.patch [bz#2031039]
  - kvm-hw-arm-virt-Register-its-as-a-class-property.patch [bz#2031039]
  - kvm-hw-arm-virt-Rename-default_bus_bypass_iommu.patch [bz#2031039]
  - kvm-hw-arm-virt-Add-8.6-machine-type.patch [bz#2031039]
  - kvm-hw-arm-virt-Check-no_tcg_its-and-minor-style-changes.patch [bz#2031039]
  - kvm-rhel-machine-types-x86-set-prefer_sockets.patch [bz#2029582]
  - Resolves: bz#2031039
    (Add rhel-8.6.0 machine types for RHEL 8.6 [aarch64])
  - Resolves: bz#2029582
    ([8.6] machine types: 6.2: Fix prefer_sockets)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-5
changelog:
  - kvm-acpi-validate-hotplug-selector-on-access.patch [bz#2036580]
  - kvm-x86-Add-q35-RHEL-8.6.0-machine-type.patch [bz#2031035]
  - Resolves: bz#2036580
    (CVE-2021-4158 virt:rhel/qemu-kvm: QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c [rhel-8])
  - Resolves: bz#2031035
    (Add rhel-8.6.0 machine types for RHEL 8.6 [x86])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-6
changelog:
  - kvm-virtiofsd-Drop-membership-of-all-supplementary-group.patch [bz#2046198]
  - kvm-softmmu-fix-device-deletion-events-with-device-JSON-.patch [bz#2033279]
  - kvm-block-backend-prevent-dangling-BDS-pointers-across-a.patch [bz#2021778 bz#2036178]
  - kvm-iotests-stream-error-on-reset-New-test.patch [bz#2021778 bz#2036178]
  - kvm-block-rbd-fix-handling-of-holes-in-.bdrv_co_block_st.patch [bz#2037135]
  - kvm-block-rbd-workaround-for-ceph-issue-53784.patch [bz#2037135]
  - Resolves: bz#2046198
    (CVE-2022-0358 virt:av/qemu-kvm: QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 [rhel-8.6])
  - Resolves: bz#2033279
    ([wrb][qemu-kvm 6.2] The hot-unplugged device can not be hot-plugged back)
  - Resolves: bz#2021778
    (Qemu core dump when do full backup during system reset)
  - Resolves: bz#2036178
    (Qemu core dumped when do block-stream to a snapshot node on non-enough space storage)
  - Resolves: bz#2037135
    (Booting from Local Snapshot Core Dumped Whose Backing File Is Based on RBD)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-7
changelog:
  - kvm-numa-Enable-numa-for-SGX-EPC-sections.patch [bz#1518984]
  - kvm-numa-Support-SGX-numa-in-the-monitor-and-Libvirt-int.patch [bz#1518984]
  - kvm-doc-Add-the-SGX-numa-description.patch [bz#1518984]
  - kvm-Enable-SGX-RH-Only.patch [bz#1518984]
  - kvm-qapi-Cleanup-SGX-related-comments-and-restore-sectio.patch [bz#1518984]
  - kvm-block-io-Update-BSC-only-if-want_zero-is-true.patch [bz#2041480]
  - kvm-iotests-block-status-cache-New-test.patch [bz#2041480]
  - Resolves: bz#1518984
    ([Intel 8.6 Feat] qemu-kvm: SGX 1.5 (SGX1 + Flexible Launch Control) support)
  - Resolves: bz#2041480
    ([incremental_backup] Inconsistent block status reply in qemu-nbd)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-8
changelog:
  - kvm-block-nbd-Delete-reconnect-delay-timer-when-done.patch [bz#2035185]
  - kvm-block-nbd-Assert-there-are-no-timers-when-closed.patch [bz#2035185]
  - kvm-iotests.py-Add-QemuStorageDaemon-class.patch [bz#2035185]
  - kvm-iotests-281-Test-lingering-timers.patch [bz#2035185]
  - kvm-block-nbd-Move-s-ioc-on-AioContext-change.patch [bz#2035185]
  - kvm-iotests-281-Let-NBD-connection-yield-in-iothread.patch [bz#2035185]
  - Resolves: bz#2035185
    (Qemu core dump when start guest with nbd node or do block jobs to nbd node)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-9
changelog:
  - kvm-Revert-redhat-Add-hw_compat_4_2_extra-and-apply-to-u.patch [bz#2062613]
  - kvm-Revert-redhat-Enable-FDC-device-for-upstream-machine.patch [bz#2062613]
  - kvm-Revert-redhat-Expose-upstream-machines-pc-4.2-and-pc.patch [bz#2062613]
  - kvm-hw-virtio-vdpa-Fix-leak-of-host-notifier-memory-regi.patch [bz#2060843]
  - kvm-pci-expose-TYPE_XIO3130_DOWNSTREAM-name.patch [bz#2062610]
  - kvm-acpi-pcihp-pcie-set-power-on-cap-on-parent-slot.patch [bz#2062610]
  - kvm-vmxcap-Add-5-level-EPT-bit.patch [bz#2065207]
  - kvm-i386-Add-Icelake-Server-v6-CPU-model-with-5-level-EP.patch [bz#2065207]
  - kvm-acpi-fix-QEMU-crash-when-started-with-SLIC-table.patch [bz#2062611]
  - kvm-tests-acpi-whitelist-expected-blobs-before-changing-.patch [bz#2062611]
  - kvm-tests-acpi-add-SLIC-table-test.patch [bz#2062611]
  - kvm-tests-acpi-SLIC-update-expected-blobs.patch [bz#2062611]
  - kvm-tests-acpi-manually-pad-OEM_ID-OEM_TABLE_ID-for-test.patch [bz#2062611]
  - kvm-tests-acpi-whitelist-nvdimm-s-SSDT-and-FACP.slic-exp.patch [bz#2062611]
  - kvm-acpi-fix-OEM-ID-OEM-Table-ID-padding.patch [bz#2062611]
  - kvm-tests-acpi-update-expected-blobs.patch [bz#2062611]
  - kvm-tests-acpi-test-short-OEM_ID-OEM_TABLE_ID-values-in-.patch [bz#2062611]
  - kvm-rhel-workaround-for-lack-of-binary-patches-in-SRPM.patch [bz#2062611]
  - Resolves: bz#2062613
    (Revert IBM-specific Ubuntu-compatibility machine type for 8.6-AV GA [rhel-8.7.0])
  - Resolves: bz#2060843
    ([virtual network][vDPA] qemu crash after hot unplug vdpa device [rhel-8.7.0])
  - Resolves: bz#2062610
    (Do operation to disk will hang in the guest of target host after hotplugging and migrating [rhel-8.7.0])
  - Resolves: bz#2065207
    (Win11 (q35+edk2) guest broke after install wsl2 through 'wsl --install -d Ubuntu-20.04' [rhel-8.7.0])
  - Resolves: bz#2062611
    (Guest can not start with SLIC acpi table [rhel-8.7.0])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-10
changelog:
  - kvm-RHEL-disable-seqpacket-for-vhost-vsock-device-in-rhe.patch [bz#2068202]
  - kvm-block-Lock-AioContext-for-drain_end-in-blockdev-reop.patch [bz#2067118]
  - kvm-iotests-Test-blockdev-reopen-with-iothreads-and-thro.patch [bz#2067118]
  - kvm-s390x-css-fix-PMCW-invalid-mask.patch [bz#2071070]
  - kvm-Set-permission-on-installing-files.patch [bz#2072377]
  - Resolves: bz#2068202
    (RHEL 9.0 guest with vsock device migration failed from RHEL 9.0 > RHEL 8.6 [rhel-8.7.0])
  - Resolves: bz#2067118
    (qemu crash after execute blockdev-reopen with  iothread)
  - Resolves: bz#2071070
    (s390x/css: fix PMCW invalid mask)
  - Resolves: bz#2072377
    (Fix build warnings that occur when installing the keymap files)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-11
changelog:
  - kvm-hw-intc-arm_gicv3-Check-for-MEMTX_OK-instead-of-MEMT.patch [bz#1999236]
  - kvm-softmmu-physmem-Simplify-flatview_write-and-address_.patch [bz#1999236]
  - kvm-softmmu-physmem-Introduce-MemTxAttrs-memory-field-an.patch [bz#1999236]
  - Resolves: bz#1999236
    (CVE-2021-3750 virt:rhel/qemu-kvm: QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-12
changelog:
  - kvm-display-qxl-render-fix-race-condition-in-qxl_cursor-.patch [bz#2040738]
  - kvm-vhost-vsock-detach-the-virqueue-element-in-case-of-e.patch [bz#2063262]
  - Resolves: bz#2040738
    (CVE-2021-4207 virt:rhel/qemu-kvm: QEMU: QXL: double fetch in qxl_cursor() can lead to heap buffer overflow [rhel-8])
  - Resolves: bz#2063262
    (CVE-2022-26354 virt:rhel/qemu-kvm: QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-13
changelog:
  - kvm-s390x-ipl-support-extended-kernel-command-line-size.patch [bz#2043830]
  - kvm-virtio-net-fix-map-leaking-on-error-during-receive.patch [bz#2063206]
  - kvm-qcow2-Improve-refcount-structure-rebuilding.patch [bz#1519071]
  - kvm-iotests-108-Test-new-refcount-rebuild-algorithm.patch [bz#1519071]
  - kvm-qcow2-Add-errp-to-rebuild_refcount_structure.patch [bz#1519071]
  - kvm-iotests-108-Fix-when-missing-user_allow_other.patch [bz#1519071]
  - Resolves: bz#2043830
    ([IBM 8.7 FEAT] KVM: Allow long kernel command lines for QEMU)
  - Resolves: bz#2063206
    (CVE-2022-26353 virt:rhel/qemu-kvm: QEMU: virtio-net: map leaking on error during receive [rhel-8])
  - Resolves: bz#1519071
    (Fail to rebuild the reference count tables of qcow2 image on host block devices (e.g. LVs))


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-14
changelog:
  - kvm-Revert-redhat-Add-some-devices-for-exporting-upstrea.patch [bz#2065043]
  - kvm-target-i386-properly-reset-TSC-on-reset.patch [bz#2070417]
  - kvm-ui-cursor-fix-integer-overflow-in-cursor_alloc-CVE-2.patch [bz#2040734]
  - Resolves: bz#2065043
    (Remove upstream-only devices from the qemu-kvm binary)
  - Resolves: bz#2070417
    (Windows guest hangs after updating and restarting from the guest OS [rhel-8.7.0])
  - Resolves: bz#2040734
    (CVE-2021-4206 virt:rhel/qemu-kvm: QEMU: QXL: integer overflow in cursor_alloc() can lead to heap buffer overflow [rhel-8.7])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-15
changelog:
  - kvm-virtio-gpu-do-not-byteswap-padding.patch [bz#1916415]
  - kvm-linux-headers-update-to-5.16-rc1.patch [bz#1916415]
  - kvm-linux-headers-Update-headers-to-v5.17-rc1.patch [bz#1916415]
  - kvm-linux-headers-include-missing-changes-from-5.17.patch [bz#1916415]
  - kvm-x86-Fix-the-64-byte-boundary-enumeration-for-extende.patch [bz#1916415]
  - kvm-x86-Add-AMX-XTILECFG-and-XTILEDATA-components.patch [bz#1916415]
  - kvm-x86-Grant-AMX-permission-for-guest.patch [bz#1916415]
  - kvm-x86-Add-XFD-faulting-bit-for-state-components.patch [bz#1916415]
  - kvm-x86-Add-AMX-CPUIDs-enumeration.patch [bz#1916415]
  - kvm-x86-add-support-for-KVM_CAP_XSAVE2-and-AMX-state-mig.patch [bz#1916415]
  - kvm-x86-Support-XFD-and-AMX-xsave-data-migration.patch [bz#1916415]
  - kvm-target-i386-kvm-do-not-access-uninitialized-variable.patch [bz#1916415]
  - kvm-KVM-x86-workaround-invalid-CPUID-0xD-9-info-on-some-.patch [bz#1916415]
  - kvm-virtio-net-setup-vhost_dev-and-notifiers-for-cvq-onl.patch [bz#2069946]
  - kvm-virtio-net-align-ctrl_vq-index-for-non-mq-guest-for-.patch [bz#2069946]
  - kvm-vhost-vdpa-fix-improper-cleanup-in-net_init_vhost_vd.patch [bz#2069946]
  - kvm-vhost-net-fix-improper-cleanup-in-vhost_net_start.patch [bz#2069946]
  - kvm-vhost-vdpa-backend-feature-should-set-only-once.patch [bz#2069946]
  - kvm-vhost-vdpa-change-name-and-polarity-for-vhost_vdpa_o.patch [bz#2069946]
  - kvm-virtio-net-don-t-handle-mq-request-in-userspace-hand.patch [bz#2069946]
  - kvm-ide-Increment-BB-in-flight-counter-for-TRIM-BH.patch [bz#2029980]
  - kvm-block-Make-bdrv_refresh_limits-non-recursive.patch [bz#2072932]
  - kvm-iotests-Allow-using-QMP-with-the-QSD.patch [bz#2072932]
  - kvm-iotests-graph-changes-while-io-New-test.patch [bz#2072932]
  - Resolves: bz#1916415
    ([Intel 8.7 FEAT] qemu-kvm Sapphire Rapids (SPR) AMX Instructions)
  - Resolves: bz#2069946
    (PXE boot crash qemu when using multiqueue vDPA)
  - Resolves: bz#2029980
    (Failed assertion in IDE emulation with Ceph backend)
  - Resolves: bz#2072932
    (Qemu coredump when refreshing block limits on an actively used iothread block device [rhel.8.7])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-16
changelog:
  - kvm-virtiofsd-Fix-breakage-due-to-fuse_init_in-size-chan.patch [bz#2097209]
  - kvm-hw-block-fdc-Prevent-end-of-track-overrun-CVE-2021-3.patch [bz#1951521]
  - kvm-tests-qtest-fdc-test-Add-a-regression-test-for-CVE-2.patch [bz#1951521]
  - Resolves: bz#2097209
    ([virtiofs] mount virtiofs failed: SELinux: (dev virtiofs, type virtiofs) getxattr errno 111)
  - Resolves: bz#1951521
    (CVE-2021-3507 virt:rhel/qemu-kvm: QEMU: fdc: heap buffer overflow in DMA read data transfers [rhel-8])


author: Camilla Conte <cconte@redhat.com> - 6.2.0-17
changelog:
  - kvm-migration-Never-call-twice-qemu_target_page_size.patch [bz#2072049]
  - kvm-multifd-Rename-used-field-to-num.patch [bz#2072049]
  - kvm-multifd-Add-missing-documentation.patch [bz#2072049]
  - kvm-multifd-The-variable-is-only-used-inside-the-loop.patch [bz#2072049]
  - kvm-multifd-remove-used-parameter-from-send_prepare-meth.patch [bz#2072049]
  - kvm-multifd-remove-used-parameter-from-send_recv_pages-m.patch [bz#2072049]
  - kvm-multifd-Fill-offset-and-block-for-reception.patch [bz#2072049]
  - kvm-multifd-Make-zstd-compression-method-not-use-iovs.patch [bz#2072049]
  - kvm-multifd-Make-zlib-compression-method-not-use-iovs.patch [bz#2072049]
  - kvm-migration-All-this-fields-are-unsigned.patch [bz#2072049]
  - kvm-multifd-Move-iov-from-pages-to-params.patch [bz#2072049]
  - kvm-multifd-Make-zlib-use-iov-s.patch [bz#2072049]
  - kvm-multifd-Make-zstd-use-iov-s.patch [bz#2072049]
  - kvm-multifd-Remove-send_write-method.patch [bz#2072049]
  - kvm-multifd-Use-a-single-writev-on-the-send-side.patch [bz#2072049]
  - kvm-multifd-Use-normal-pages-array-on-the-send-side.patch [bz#2072049]
  - kvm-QIOChannel-Add-flags-on-io_writev-and-introduce-io_f.patch [bz#2072049]
  - kvm-QIOChannelSocket-Implement-io_writev-zero-copy-flag-.patch [bz#2072049]
  - kvm-migration-Add-zero-copy-send-parameter-for-QMP-HMP-f.patch [bz#2072049]
  - kvm-migration-Add-migrate_use_tls-helper.patch [bz#2072049]
  - kvm-multifd-multifd_send_sync_main-now-returns-negative-.patch [bz#2072049]
  - kvm-multifd-Send-header-packet-without-flags-if-zero-cop.patch [bz#2072049]
  - kvm-multifd-Implement-zero-copy-write-in-multifd-migrati.patch [bz#2072049]
  - kvm-QIOChannelSocket-Introduce-assert-and-reduce-ifdefs-.patch [bz#2072049]
  - kvm-QIOChannelSocket-Fix-zero-copy-send-so-socket-flush-.patch [bz#2072049]
  - kvm-migration-Change-zero_copy_send-from-migration-param.patch [bz#2072049]
  - kvm-migration-Add-migration_incoming_transport_cleanup.patch [bz#2097652]
  - kvm-migration-Allow-migrate-recover-to-run-multiple-time.patch [bz#2097652]
  - kvm-pc-bios-s390-ccw-virtio-Introduce-a-macro-for-the-DA.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-bootmap-Improve-the-guessing-logic-.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Simplify-fix-virtio_i.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Remove-virtio_assume_.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-Set-missing-status-bits-whil.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-Read-device-config-after-fea.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-Beautify-the-code-for-readin.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-Split-virtio-scsi-code-from-virtio_.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Request-the-right-fea.patch [bz#2098076]
  - Resolves: bz#2072049
    (Pull  MSG_ZEROCOPY on QEMU Live Migration Patches into RHEL 8)
  - Resolves: bz#2097652
    (The migration port is not released if use it again for recovering postcopy migration)
  - Resolves: bz#2098076
    (virtio-blk: Can't boot fresh installation from used virtio-blk dasd disk under certain conditions)


author: Camilla Conte <cconte@redhat.com> - 6.2.0-18
changelog:
  - kvm-linux-aio-fix-unbalanced-plugged-counter-in-laio_io_.patch [bz#2105410]
  - kvm-linux-aio-explain-why-max-batch-is-checked-in-laio_i.patch [bz#2105410]
  - Resolves: bz#2105410
    (Stalled IO Operations in VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-19
changelog:
  - kvm-migration-Introduce-ram_transferred_add.patch [bz#2110203]
  - kvm-migration-Tally-pre-copy-downtime-and-post-copy-byte.patch [bz#2110203]
  - kvm-QIOChannelSocket-Fix-zero-copy-flush-returning-code-.patch [bz#2110203]
  - kvm-Add-dirty-sync-missed-zero-copy-migration-stat.patch [bz#2110203]
  - kvm-migration-multifd-Report-to-user-when-zerocopy-not-w.patch [bz#2110203]
  - kvm-migration-Avoid-false-positive-on-non-supported-scen.patch [bz#2110203]
  - kvm-migration-add-remaining-params-has_-true-in-migratio.patch [bz#2110203]
  - kvm-QIOChannelSocket-Add-support-for-MSG_ZEROCOPY-IPV6.patch [bz#2110203]
  - kvm-pc-bios-s390-ccw-Fix-booting-with-logical-block-size.patch [bz#2112296]
  - Resolves: bz#2110203
    (zerocopy capability can be enabled when set migrate capabilities with multifd and compress/xbzrle together)
  - Resolves: bz#2112296
    (virtio-blk: Can't boot fresh installation from used 512 cluster_size image under certain conditions)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-20
changelog:
  - kvm-scsi-generic-Fix-emulated-block-limits-VPD-page.patch [bz#2120279]
  - Resolves: bz#2120279
    (Wrong max_sectors_kb and Maximum transfer length on the pass-through device [rhel-8.7])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-21
changelog:
  - kvm-backends-hostmem-Fix-support-of-memory-backend-memfd.patch [bz#2117149]
  - kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2125271]
  - kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2125271]
  - Resolves: bz#2117149
    (Can't run when memory backing with hugepages and backend type memfd)
  - Resolves: bz#2125271
    ([RHEL8.7] Guests in VMX root operation fail to reboot with QEMU's 'system_reset' command [rhel-8.8.0])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-22
changelog:
  - kvm-redhat-Update-linux-headers-linux-kvm.h-to-v5.18-rc6.patch [bz#2124757]
  - kvm-target-s390x-kvm-Honor-storage-keys-during-emulation.patch [bz#2124757]
  - kvm-virtiofsd-use-g_date_time_get_microsecond-to-get-sub.patch [bz#2018885]
  - Resolves: bz#2124757
    (RHEL8: skey test in kvm_unit_test got failed)
  - Resolves: bz#2018885
    ([virtiofs] virtiofsd debug log's timestamp is NULL)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-23
changelog:
  - kvm-virtio-fix-the-condition-for-iommu_platform-not-supp.patch [bz#2116302]
  - kvm-virtio-fix-feature-negotiation-for-ACCESS_PLATFORM.patch [bz#2116302]
  - Resolves: bz#2116302
    (RHEL8.6 - virtiofs will not mount fs on secure execution guest)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-24
changelog:
  - kvm-s390x-pci-use-a-reserved-ID-for-the-default-PCI-grou.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-don-t-use-hard-coded-dma-range-in-reg_ioat.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-use-the-passthrough-measurement-update-int.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-add-supported-DT-information-to-clp-respon.patch [bz#1664378 bz#2043909]
  - kvm-Update-linux-headers-to-v6.0-rc4.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-add-routine-to-get-host-function-handle-fr.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-enable-for-load-store-interpretation.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-don-t-fence-interpreted-devices-without-MS.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-enable-adapter-event-notification-for-inte.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-let-intercept-devices-have-separate-PCI-gr.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-reflect-proper-maxstbl-for-groups-of-inter.patch [bz#1664378 bz#2043909]
  - kvm-s390x-s390-virtio-ccw-Switch-off-zPCI-enhancements-o.patch [bz#1664378 bz#2043909]
  - kvm-dump-Use-ERRP_GUARD.patch [bz#1664378 bz#2043909]
  - kvm-dump-Remove-the-sh_info-variable.patch [bz#1664378 bz#2043909]
  - kvm-dump-Introduce-shdr_num-to-decrease-complexity.patch [bz#1664378 bz#2043909]
  - kvm-dump-Remove-the-section-if-when-calculating-the-memo.patch [bz#1664378 bz#2043909]
  - kvm-dump-Add-more-offset-variables.patch [bz#1664378 bz#2043909]
  - kvm-dump-Introduce-dump_is_64bit-helper-function.patch [bz#1664378 bz#2043909]
  - kvm-dump-Consolidate-phdr-note-writes.patch [bz#1664378 bz#2043909]
  - kvm-dump-Cleanup-dump_begin-write-functions.patch [bz#1664378 bz#2043909]
  - kvm-dump-Consolidate-elf-note-function.patch [bz#1664378 bz#2043909]
  - kvm-dump-Replace-opaque-DumpState-pointer-with-a-typed-o.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rename-write_elf_loads-to-write_elf_phdr_loads.patch [bz#1664378 bz#2043909]
  - kvm-dump-Refactor-dump_iterate-and-introduce-dump_filter.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rework-get_start_block.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rework-filter-area-variables.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rework-dump_calculate_size-function.patch [bz#1664378 bz#2043909]
  - kvm-dump-Split-elf-header-functions-into-prepare-and-wri.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rename-write_elf-_phdr_note-to-prepare_elf-_phd.patch [bz#1664378 bz#2043909]
  - kvm-dump-simplify-a-bit-kdump-get_next_page.patch [bz#1664378 bz#2043909]
  - kvm-dump-fix-kdump-to-work-over-non-aligned-blocks.patch [bz#1664378 bz#2043909]
  - kvm-dump-Use-a-buffer-for-ELF-section-data-and-headers.patch [bz#1664378 bz#2043909]
  - kvm-dump-Write-ELF-section-headers-right-after-ELF-heade.patch [bz#1664378 bz#2043909]
  - kvm-dump-Reorder-struct-DumpState.patch [bz#1664378 bz#2043909]
  - kvm-dump-Reintroduce-memory_offset-and-section_offset.patch [bz#1664378 bz#2043909]
  - kvm-dump-Add-architecture-section-and-section-string-tab.patch [bz#1664378 bz#2043909]
  - kvm-s390x-Add-protected-dump-cap.patch [bz#1664378 bz#2043909]
  - kvm-s390x-Introduce-PV-query-interface.patch [bz#1664378 bz#2043909]
  - kvm-include-elf.h-add-s390x-note-types.patch [bz#1664378 bz#2043909]
  - kvm-s390x-Add-KVM-PV-dump-interface.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pv-Add-dump-support.patch [bz#1664378 bz#2043909]
  - kvm-ui-vnc-clipboard-fix-integer-underflow-in-vnc_client.patch [bz#2129760]
  - Resolves: bz#1664378
    ([IBM 8.8 FEAT] Enhanced Interpretation for PCI Functions (kvm) - qemu part)
  - Resolves: bz#2043909
    ([IBM 8.8 FEAT] KVM: Secure Execution guest dump encryption with customer keys - qemu part)
  - Resolves: bz#2129760
    (CVE-2022-3165 virt:rhel/qemu-kvm: QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-25
changelog:
  - kvm-hw-acpi-Add-ospm_status-hook-implementation-for-acpi.patch [bz#2132609]
  - kvm-target-arm-kvm-Retry-KVM_CREATE_VM-call-if-it-fails-.patch [bz#2132609]
  - Resolves: bz#2132609
    (qemu-kvm: backport some aarch64 fixes)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-26
changelog:
  - kvm-docs-system-s390x-Document-the-loadparm-machine-prop.patch [bz#2128225]
  - kvm-s390x-Register-TYPE_S390_CCW_MACHINE-properties-as-c.patch [bz#2128225]
  - kvm-ui-vnc.c-Fixed-a-deadlock-bug.patch [bz#2141896]
  - Resolves: bz#2128225
    ([s390x] [RHEL8][s390x-ccw bios] lacking document about parameter loadparm in qemu)
  - Resolves: bz#2141896
    (VMs hung on vnc_clipboard_send)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-27
changelog:
  - kvm-hw-display-qxl-Have-qxl_log_command-Return-early-if-.patch [bz#2148545]
  - kvm-hw-display-qxl-Document-qxl_phys2virt.patch [bz#2148545]
  - kvm-hw-display-qxl-Pass-requested-buffer-size-to-qxl_phy.patch [bz#2148545]
  - kvm-hw-display-qxl-Avoid-buffer-overrun-in-qxl_phys2virt.patch [bz#2148545]
  - kvm-hw-display-qxl-Assert-memory-slot-fits-in-preallocat.patch [bz#2148545]
  - Resolves: bz#2148545
    (CVE-2022-4144 virt:rhel/qemu-kvm: QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-of-bounds read [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-28
changelog:
  - kvm-s390x-tod-kvm-don-t-save-restore-the-TOD-in-PV-guest.patch [bz#2155448]
  - Resolves: bz#2155448
    (RHEL8.8 - KVM: s390: pv: don't allow userspace to set the clock under PV - QEMU part)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-29
changelog:
  - kvm-block-mirror-Do-not-wait-for-active-writes.patch [bz#2125119]
  - kvm-block-mirror-Drop-mirror_wait_for_any_operation.patch [bz#2125119]
  - kvm-block-mirror-Fix-NULL-s-job-in-active-writes.patch [bz#2125119]
  - kvm-accel-introduce-accelerator-blocker-API.patch [bz#2161188]
  - kvm-KVM-keep-track-of-running-ioctls.patch [bz#2161188]
  - kvm-kvm-Atomic-memslot-updates.patch [bz#2161188]
  - kvm-migration-Read-state-once.patch [bz#2074205]
  - kvm-s390x-pci-RPCIT-second-pass-when-mappings-exhausted.patch [bz#2163713]
  - kvm-s390x-pci-coalesce-unmap-operations.patch [bz#2163713]
  - kvm-s390x-pci-shrink-DMA-aperture-to-be-bound-by-vfio-DM.patch [bz#2163713]
  - kvm-s390x-pci-reset-ISM-passthrough-devices-on-shutdown-.patch [bz#2163713]
  - Resolves: bz#2125119
    (Mirror job with "copy-mode":"write-blocking" that used for storage migration can't converge under heavy I/O)
  - Resolves: bz#2161188
    (SVM: non atomic memslot updates cause boot failure with seabios and cpu-pm=on)
  - Resolves: bz#2074205
    (while live-migrating many instances concurrently, libvirt sometimes return internal error: migration was active, but no RAM info was set)
  - Resolves: bz#2163713
    ([s390x] VM fails to start with ISM passed through)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-30
changelog:
  - kvm-qcow2-Fix-theoretical-corruption-in-store_bitmap-err.patch [bz#2147617]
  - kvm-qemu-img-commit-Report-errors-while-closing-the-imag.patch [bz#2147617]
  - kvm-qemu-img-bitmap-Report-errors-while-closing-the-imag.patch [bz#2147617]
  - kvm-qemu-iotests-Test-qemu-img-bitmap-commit-exit-code-o.patch [bz#2147617]
  - Resolves: bz#2147617
    (qemu-img finishes successfully while having errors in commit or bitmaps operations)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-31
changelog:
  - kvm-io-Add-support-for-MSG_PEEK-for-socket-channel.patch [bz#2137740]
  - kvm-migration-check-magic-value-for-deciding-the-mapping.patch [bz#2137740]
  - kvm-target-s390x-arch_dump-Fix-memory-corruption-in-s390.patch [bz#2168187]
  - Resolves: bz#2137740
    (Multifd migration fails under a weak network/socket ordering race)
  - Resolves: bz#2168187
    ([s390x] qemu-kvm coredumps when SE crashes)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-32.el8_8
changelog:
  - kvm-aio_wait_kick-add-missing-memory-barrier.patch [bz#2168472]
  - kvm-qatomic-add-smp_mb__before-after_rmw.patch [bz#2168472]
  - kvm-qemu-thread-posix-cleanup-fix-document-QemuEvent.patch [bz#2168472]
  - kvm-qemu-thread-win32-cleanup-fix-document-QemuEvent.patch [bz#2168472]
  - kvm-edu-add-smp_mb__after_rmw.patch [bz#2168472]
  - kvm-aio-wait-switch-to-smp_mb__after_rmw.patch [bz#2168472]
  - kvm-qemu-coroutine-lock-add-smp_mb__after_rmw.patch [bz#2168472]
  - kvm-physmem-add-missing-memory-barrier.patch [bz#2168472]
  - kvm-async-update-documentation-of-the-memory-barriers.patch [bz#2168472]
  - kvm-async-clarify-usage-of-barriers-in-the-polling-case.patch [bz#2168472]
  - kvm-scsi-protect-req-aiocb-with-AioContext-lock.patch [bz#2090990]
  - kvm-dma-helpers-prevent-dma_blk_cb-vs-dma_aio_cancel-rac.patch [bz#2090990]
  - kvm-virtio-scsi-reset-SCSI-devices-from-main-loop-thread.patch [bz#2090990]
  - Resolves: bz#2168472
    (Guest hangs when starting or rebooting)
  - Resolves: bz#2090990
    (qemu crash with error scsi_req_unref(SCSIRequest *): Assertion `req->refcount > 0' failed or scsi_dma_complete(void *, int): Assertion `r->req.aiocb != NULL' failed [8.7.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-33
changelog:
  - kvm-s390x-pv-Implement-a-CGS-check-helper.patch [bz#2187159]
  - Resolves: bz#2187159
    (RHEL8.8 - KVM - Secure Guest crashed during booting with 248 vcpus)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-34
changelog:
  - kvm-migration-Handle-block-device-inactivation-failures-.patch [bz#2177957]
  - kvm-migration-Minor-control-flow-simplification.patch [bz#2177957]
  - kvm-migration-Attempt-disk-reactivation-in-more-failure-.patch [bz#2177957]
  - kvm-nbd-server-push-pending-frames-after-sending-reply.patch [bz#2035712]
  - kvm-nbd-server-Request-TCP_NODELAY.patch [bz#2035712]
  - Resolves: bz#2177957
    (Qemu core dump if cut off nfs storage during migration)
  - Resolves: bz#2035712
    ([qemu] Booting from Guest Image over NBD with TLS Is Slow)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-35
changelog:
  - kvm-virtiofsd-Add-basic-support-for-FUSE_SYNCFS-request.patch [bz#2196880]
  - kvm-s390-kvm-adjust-diag318-resets-to-retain-data.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-SLDA-sign-bit-index.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-SRDA-CC-calculation.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-cc_calc_sla_64-missing-overflows.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-shifting-32-bit-values-for-more-tha.patch [bz#2169308 bz#2209605]
  - kvm-s390x-sigp-Reorder-the-SIGP-STOP-code.patch [bz#2169308 bz#2209605]
  - kvm-s390x-tcg-Fix-BRASL-with-a-large-negative-offset.patch [bz#2169308 bz#2209605]
  - kvm-s390x-tcg-Fix-BRCL-with-a-large-negative-offset.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-determination-of-overflow-condition.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-determination-of-overflow-cond.patch [bz#2169308 bz#2209605]
  - kvm-s390x-follow-qdev-tree-to-detect-SCSI-device-on-a-CC.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-the-accumulation-of-ccm-in-op_icm.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-writeback-to-v1-in-helper_vstl.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-fix-handling-of-zeroes-in-vfmin-vfmax.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-CLFIT-and-CLGIT-immediate-size.patch [bz#2169308 bz#2209605]
  - kvm-s390x-tcg-Fix-opcode-for-lzrf.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-emulation-of-the-VISTR-instruction.patch [bz#2169308 bz#2209605]
  - kvm-s390x-css-revert-SCSW-ctrl-flag-bits-on-error.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-tcg-Fix-and-improve-the-SACF-instructio.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-tcg-mem_helper-Test-the-right-bits-in-p.patch [bz#2169308 bz#2209605]
  - kvm-pc-bios-Add-support-for-List-Directed-IPL-from-ECKD-.patch [bz#2169308 bz#2209605]
  - Resolves: bz#2196880
    ([virtiofs] Backport FUSE_SYNCFS support)
  - Resolves: bz#2169308
    (Backport latest s390x-related fixes from upstream QEMU for qemu-kvm in RHEL 8.9)
  - Resolves: bz#2209605
    ([IBM 8.9 FEAT] KVM: ECKD List Directed IPL - virtio (qemu))


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-36
changelog:
  - kvm-memory-prevent-dma-reentracy-issues.patch [bz#1999236]
  - kvm-async-Add-an-optional-reentrancy-guard-to-the-BH-API.patch [bz#1999236]
  - kvm-checkpatch-add-qemu_bh_new-aio_bh_new-checks.patch [bz#1999236]
  - kvm-hw-replace-most-qemu_bh_new-calls-with-qemu_bh_new_g.patch [bz#1999236]
  - kvm-lsi53c895a-disable-reentrancy-detection-for-script-R.patch [bz#1999236]
  - kvm-bcm2835_property-disable-reentrancy-detection-for-io.patch [bz#1999236]
  - kvm-raven-disable-reentrancy-detection-for-iomem.patch [bz#1999236]
  - kvm-apic-disable-reentrancy-detection-for-apic-msi.patch [bz#1999236]
  - kvm-async-avoid-use-after-free-on-re-entrancy-guard.patch [bz#1999236]
  - kvm-memory-stricter-checks-prior-to-unsetting-engaged_in.patch [bz#1999236]
  - kvm-lsi53c895a-disable-reentrancy-detection-for-MMIO-reg.patch [bz#1999236]
  - kvm-hw-scsi-lsi53c895a-Fix-reentrancy-issues-in-the-LSI-.patch [bz#1999236]
  - kvm-target-i386-add-support-for-FLUSH_L1D-feature.patch [bz#2216203]
  - kvm-target-i386-add-support-for-FB_CLEAR-feature.patch [bz#2216203]
  - kvm-migration-Disable-postcopy-multifd-migration.patch [bz#2169733]
  - Resolves: bz#1999236
    (CVE-2021-3750 virt:rhel/qemu-kvm: QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free [rhel-8])
  - Resolves: bz#2216203
    ([qemu-kvm]VM reports vulnerabilty to mmio_stale_data on patched host with microcode)
  - Resolves: bz#2169733
    (Qemu on destination host crashed if migrate with postcopy and multifd enabled)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-37
changelog:
  - kvm-util-iov-Make-qiov_slice-public.patch [bz#2141964]
  - kvm-block-Collapse-padded-I-O-vecs-exceeding-IOV_MAX.patch [bz#2141964]
  - kvm-util-iov-Remove-qemu_iovec_init_extended.patch [bz#2141964]
  - kvm-iotests-iov-padding-New-test.patch [bz#2141964]
  - kvm-block-Fix-pad_request-s-request-restriction.patch [bz#2141964]
  - Resolves: bz#2141964
    (Guest hit EXT4-fs error on host 4K disk  when repeatedly hot-plug/unplug running IO disk)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-38
changelog:
  - kvm-qapi-i386-sev-Change-the-reduced-phys-bits-value-fro.patch [bz#2214840]
  - kvm-qemu-options.hx-Update-the-reduced-phys-bits-documen.patch [bz#2214840]
  - kvm-i386-sev-Update-checks-and-information-related-to-re.patch [bz#2214840]
  - kvm-i386-cpu-Update-how-the-EBX-register-of-CPUID-0x8000.patch [bz#2214840]
  - kvm-target-i386-kvm-Fix-disabling-MPX-on-cpu-host-with-M.patch [bz#2223947]
  - Resolves: bz#2214840
    ([AMDSERVER 8.9 Bug] Qemu SEV reduced-phys-bits fixes)
  - Resolves: bz#2223947
    ([RHEL8.9] qemu core dump with '-cpu host,mpx=off' on Cascadelake host)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-39
changelog:
  - kvm-vhost-vdpa-do-not-cleanup-the-vdpa-vhost-net-structu.patch [bz#2215786]
  - Resolves: bz#2215786
    (CVE-2023-3301 virt:rhel/qemu-kvm: QEMU: net: triggerable assertion due to race condition in hot-unplug [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-40
changelog:
  - kvm-ui-vnc-clipboard-fix-infinite-loop-in-inflate_buffer.patch [bz#2218488]
  - Resolves: bz#2218488
    (CVE-2023-3255 virt:rhel/qemu-kvm: QEMU: VNC: infinite loop in inflate_buffer() leads to denial of service [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-41
changelog:
  - kvm-s390x-ap-fix-missing-subsystem-reset-registration.patch [bz#2111390]
  - kvm-s390x-do-a-subsystem-reset-before-the-unprotect-on-r.patch [bz#2111390]
  - kvm-redhat-Update-linux-headers-for-kvm_s390_vm_cpu_uv_f.patch [bz#2111390]
  - kvm-target-s390x-kvm-Refactor-AP-functionalities.patch [bz#2111390]
  - kvm-target-s390x-AP-passthrough-for-PV-guests.patch [bz#2111390]
  - Resolves: bz#2111390
    ([IBM 8.10 FEAT] KVM: Enable Secure Execution Crypto Passthrough - qemu part)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-42
changelog:
  - kvm-target-s390x-dump-Remove-unneeded-dump-info-function.patch [RHEL-16696]
  - kvm-dump-Add-arch-cleanup-function.patch [RHEL-16696]
  - kvm-target-s390x-arch_dump-Add-arch-cleanup-function-for.patch [RHEL-16696]
  - Resolves: RHEL-16696
    (RHEL8 - KVM : Secure execution guest remains in "paused" state, post "virsh dump" failure (qemu-kvm))


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-43
changelog:
  - kvm-net-Provide-MemReentrancyGuard-to-qemu_new_nic.patch [RHEL-7309]
  - kvm-net-Update-MemReentrancyGuard-for-NIC.patch [RHEL-7309]
  - kvm-vhost-release-memory_listener-object-in-error-path.patch [RHEL-7567]
  - kvm-ui-fix-crash-when-there-are-no-active_console.patch [RHEL-2600]
  - Resolves: RHEL-7309
    (CVE-2023-3019 virt:rhel/qemu-kvm: QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest() [rhel-8])
  - Resolves: RHEL-7567
    ([RHEL8][clone]VM crash when guest running testpmd and delete created vhostuserclient port on host)
  - Resolves: RHEL-2600
    (qemu core dump occurs when client connects to VNC server because qemu cmd only adds vnc but without graphics device)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-44
changelog:
  - kvm-hw-ide-reset-cancel-async-DMA-operation-before-reset.patch [RHEL-15437]
  - kvm-tests-qtest-ahci-test-add-test-exposing-reset-issue-.patch [RHEL-15437]
  - Resolves: RHEL-15437
    (CVE-2023-5088 virt:rhel/qemu-kvm: QEMU: improper IDE controller reset can lead to MBR overwrite [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-45
changelog:
  - kvm-acpi-fix-acpi_index-migration.patch [RHEL-20189]
  - kvm-RHEL-Enable-x-not-migrate-acpi-index-for-all-pre-RHE.patch [RHEL-20189]
  - kvm-hw-arm-virt-Do-not-load-efi-virtio.rom-for-all-virti.patch [RHEL-14870]
  - Resolves: RHEL-20189
    ([RHEL.8.10.0]Failed to migrate guest with pc (i440x)  between RHELAV 8.4.0 and RHEL 8.10.0)
  - Resolves: RHEL-14870
    ([rhel8]ipxe-roms-qemu does not provide efi-virtio.rom)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-46
changelog:
  - kvm-MAINTAINERS-split-out-s390x-sections.patch [RHEL-18214]
  - kvm-s390x-pv-remove-semicolon-from-macro-definition.patch [RHEL-18214]
  - kvm-hw-s390x-pv-Restrict-Protected-Virtualization-to-sys.patch [RHEL-18214]
  - kvm-hw-s390x-Move-KVM-specific-PV-from-hw-to-target-s390.patch [RHEL-18214]
  - kvm-target-s390x-kvm-pv-Provide-some-more-useful-informa.patch [RHEL-18214]
  - Resolves: RHEL-18214
    ([RHEL8][Secure-execution][s390x]  The error message is not clear when boot up a SE guest with wrong encryption)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-47
changelog:
  - kvm-s390x-pci-avoid-double-enable-disable-of-aif.patch [RHEL-22411]
  - kvm-s390x-pci-refresh-fh-before-disabling-aif.patch [RHEL-22411]
  - kvm-s390x-pci-drive-ISM-reset-from-subsystem-reset.patch [RHEL-22411]
  - Resolves: RHEL-22411
    ([s390x] VM fails to start with ISM passed through)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-48
changelog:
  - kvm-iotests-add-filter_qmp_generated_node_ids.patch [RHEL-7353]
  - kvm-iotests-port-141-to-Python-for-reliable-QMP-testing.patch [RHEL-7353]
  - kvm-monitor-only-run-coroutine-commands-in-qemu_aio_cont.patch [RHEL-7353]
  - kvm-iotests-Make-144-deterministic-again.patch [RHEL-7353]
  - Resolves: RHEL-7353
    ([qemu-kvm] no response with QMP command device_add when repeatedly hotplug/unplug virtio disks [RHEL-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-49
changelog:
  - kvm-glib-compat-Introduce-g_memdup2-wrapper.patch [RHEL-19628]
  - kvm-ui-clipboard-mark-type-as-not-available-when-there-i.patch [RHEL-19628]
  - kvm-virtio-net-correctly-copy-vnet-header-when-flushing-.patch [RHEL-19496]
  - Resolves: RHEL-19628
    (CVE-2023-6683 virt:rhel/qemu-kvm: QEMU: VNC: NULL pointer dereference in qemu_clipboard_request() [rhel-8])
  - Resolves: RHEL-19496
    (CVE-2023-6693 virt:rhel/qemu-kvm: QEMU: virtio-net: stack buffer overflow in virtio_net_flush_tx() [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-50
changelog:
  - kvm-qcow2-Don-t-open-data_file-with-BDRV_O_NO_IO.patch [RHEL-35616]
  - kvm-iotests-244-Don-t-store-data-file-with-protocol-in-i.patch [RHEL-35616]
  - kvm-iotests-270-Don-t-store-data-file-with-json-prefix-i.patch [RHEL-35616]
  - kvm-block-introduce-bdrv_open_file_child-helper.patch [RHEL-35616]
  - kvm-block-Parse-filenames-only-when-explicitly-requested.patch [RHEL-35616]
  - Resolves: RHEL-35616
    (CVE-2024-4467 virt:rhel/qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write [rhel-8.10.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-51.el8
changelog:
  - kvm-virtio-gpu-free-BHs-by-implementing-unrealize.patch [RHEL-32276]
  - kvm-virtio-gpu-reset-gfx-resources-in-main-thread.patch [RHEL-32276]
  - kvm-hw-virtio-Introduce-virtio_bh_new_guarded-helper.patch [RHEL-32276]
  - kvm-hw-display-virtio-gpu-Protect-from-DMA-re-entrancy-b.patch [RHEL-32276]
  - kvm-hw-char-virtio-serial-bus-Protect-from-DMA-re-entran.patch [RHEL-32276]
  - kvm-hw-virtio-virtio-crypto-Protect-from-DMA-re-entrancy.patch [RHEL-32276]
  - Resolves: RHEL-32276
    (CVE-2024-3446 virt:rhel/qemu-kvm: QEMU: virtio: DMA reentrancy issue leads to double free vulnerability [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-52.el8
changelog:
  - kvm-nbd-server-Plumb-in-new-args-to-nbd_client_add.patch [RHEL-52611]
  - kvm-nbd-server-CVE-2024-7409-Cap-default-max-connections.patch [RHEL-52611]
  - kvm-nbd-server-CVE-2024-7409-Drop-non-negotiating-client.patch [RHEL-52611]
  - kvm-nbd-server-CVE-2024-7409-Close-stray-clients-at-serv.patch [RHEL-52611]
  - kvm-vnc-increase-max-display-size.patch [RHEL-50854]
  - Resolves: RHEL-52611
    (CVE-2024-7409 virt:rhel/qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-8.10.z])
  - Resolves: RHEL-50854
    (vnc: increase max display size to 4K)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-53.el8
changelog:
  - kvm-nbd-server-Favor-qemu_aio_context-over-iohandler-con.patch [RHEL-52611]
  - kvm-iotests-test-NBD-TLS-iothread.patch [RHEL-52611]
  - kvm-nbd-server-CVE-2024-7409-Avoid-use-after-free-when-c.patch [RHEL-52611]
  - Resolves: RHEL-52611
    (CVE-2024-7409 virt:rhel/qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-53.el8.1
changelog:
  - kvm-block-move-bdrv_qiov_is_aligned-to-file-posix.patch [RHEL-60553]
  - kvm-block-use-the-request-length-for-iov-alignment.patch [RHEL-60553]
  - Resolves: RHEL-60553
    (Frequent VM pauses on OpenShift Virtualization with Portworx storage)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-53.el8.2
changelog:
  - kvm-Fix-thread-pool-size-default-value-in-the-man-page.patch [RHEL-26197]
  - Resolves: RHEL-26197
    (virtiofsd --help and manpage does not agree on --thread-pool-size default value)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-53.el8.3
changelog:
  - kvm-qga-skip-bind-mounts-in-fs-list.patch [RHEL-59214]
  - Resolves: RHEL-59214
    (qemu-ga cannot freeze filesystems with sentinelone)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-53.el8.4
changelog:
  - kvm-target-s390x-report-deprecated-props-in-cpu-model-ex.patch [RHEL-88701]
  - kvm-target-s390x-flag-te-and-cte-as-deprecated.patch [RHEL-88701]
  - kvm-target-s390x-filter-deprecated-properties-based-on-m.patch [RHEL-88701]
  - kvm-target-s390x-move-deprecated-props-to-CpuModelExpans.patch [RHEL-88701]
  - kvm-redhat-Adjust-indentation-in-qapi-machine-target.jso.patch [RHEL-88701]
  - Resolves: RHEL-88701
    ([RHEL 8.10 qemu] KVM - Live migration of guest fails from z16-z17 [rhel-8.10.z])


author: Jacob Wang <jacob.wang@openanolis.org> - 6.2.0-53.0.8.4
changelog:
  - Adjust limit for virtiofsd minor version
  - Add loongarch supporti (lixianglai@loongson.cn)
  - Add package qemu-user-static (fuyuan.wh@alibaba-inc.com)
  - Modify-smbios-option-lack-and-Modify-the-maximum-num.patch (lixianglai@loongson.cn)
  - rename-kvm_msr_buf-with-kvm_csr_buf.patch (lixianglai@loongson.cn)
  - code-cleanup-for-loongarch-kvm.patch (lixianglai@loongson.cn)
  - Support-TPM.patch (lixianglai@loongson.cn)
  - kvm-csr-save-and-restore-optimization.patch (lixianglai@loongson.cn)
  - address-space-code-cleanup-on-7A-virt-machine.patch (lixianglai@loongson.cn)
  - Fix-irq-routing-and-fpu-option-to-compat-with-kernel.patch (lixianglai@loongson.cn)
  - Support-vfio-config.patch (lixianglai@loongson.cn)
  - pass-to-make-check.patch (lixianglai@loongson.cn)
  - fixup-can-t-find-cpu-type.patch (lixianglai@loongson.cn)
  - fix-smbios-type4-info-for-numa-support.patch (lixianglai@loongson.cn)
  - Fix-smp.cores-value.patch (lixianglai@loongson.cn)
  - Add-lbt-support-for-kvm.patch (lixianglai@loongson.cn)
  - Modify-the-ioctl-command-of-kvm.patch (lixianglai@loongson.cn)
  - Add-usb-storage-config-for-loongarch.patch (zhaotianrui@loongson.c)
  - Add-loongarch-into-QEMU_ARCH_VIRTIO_PCI-to-support-q.patch (zhaotianrui@loongson.c)
  - Fix-host-architecture-macro-of-LoongArch-to-HOST_LOO.patch (zhaotianrui@loongson.c)
  - Fix-LoongArch-KVM-header-macros.patch (zhaotianrui@loongson.c)
  - loongarch: Fixed the issue where qemu specifies the boot order (lixianglai@loongson.cn)
  - 0001-anolis-csv-i386-add-CSV-context.patch (jiangxin@hygon.cn)
  - 0002-anolis-csv-i386-add-command-to-initialize-CSV-contex.patch (jiangxin@hygon.cn)
  - 0003-anolis-csv-i386-add-command-to-load-data-to-guest-me.patch (jiangxin@hygon.cn)
  - 0004-anolis-csv-i386-add-command-to-load-vmcb-to-guest-me.patch (jiangxin@hygon.cn)
  - 0005-anolis-cpu-i386-populate-CPUID-0x8000_001F-when-CSV-.patch (jiangxin@hygon.cn)
  - 0006-anolis-csv-i386-CSV-guest-do-not-need-register-unreg.patch (jiangxin@hygon.cn)
  - 0007-anolis-target-i386-csv-load-initial-image-to-private.patch (jiangxin@hygon.cn)
  - 0008-anolis-vga-force-full-update-for-CSV-guest.patch (jiangxin@hygon.cn)
    (Hygon CSV3 feature)
  - Support Hygon CSV/CSV2 live migration, CSV2 reboot (hanliyang@hygon.cn)
  - Support CSV3 live migration (jiangxin@hygon.cn)
  - Support reuse ASID for CSV guests (hanliyang@hygon.cn)
  - Support tkm key isolation (xiongmengbiao@hygon.cn)
  - Add Hygon Dhyana-v3 and Dharma CPU model (zhouyanjing@hygon.cn)
  - Intel-SIG: Supprt Intel SPR/GNR/SRF new ISAs and cpu models (quanxian.wang@intel.com)
  - Intel-SIG: Supprt new SPR models (quanxian.wang@intel.com)
  - Intel-SIG: Sync more intel platform related features/fixes from upstream (jason.zeng@intel.com)
  - Sync Patch from source repo
  - fix psp device is not enabled
  - Support Hygon TKM run on CSV Guest
  - support Hygon CCP used in guest
  - Repair-CPU-hotplug-object-repeated-release-problem.patch
  - Dependency patches for Intel CWF platform


author: Jacob Wang <jacob.wang@openanolis.org> - 6.2.0-53.0.1.2
changelog:
  - Adjust limit for virtiofsd minor version
  - Add loongarch supporti (lixianglai@loongson.cn)
  - Add package qemu-user-static (fuyuan.wh@alibaba-inc.com)
  - Modify-smbios-option-lack-and-Modify-the-maximum-num.patch (lixianglai@loongson.cn)
  - rename-kvm_msr_buf-with-kvm_csr_buf.patch (lixianglai@loongson.cn)
  - code-cleanup-for-loongarch-kvm.patch (lixianglai@loongson.cn)
  - Support-TPM.patch (lixianglai@loongson.cn)
  - kvm-csr-save-and-restore-optimization.patch (lixianglai@loongson.cn)
  - address-space-code-cleanup-on-7A-virt-machine.patch (lixianglai@loongson.cn)
  - Fix-irq-routing-and-fpu-option-to-compat-with-kernel.patch (lixianglai@loongson.cn)
  - Support-vfio-config.patch (lixianglai@loongson.cn)
  - pass-to-make-check.patch (lixianglai@loongson.cn)
  - fixup-can-t-find-cpu-type.patch (lixianglai@loongson.cn)
  - fix-smbios-type4-info-for-numa-support.patch (lixianglai@loongson.cn)
  - Fix-smp.cores-value.patch (lixianglai@loongson.cn)
  - Add-lbt-support-for-kvm.patch (lixianglai@loongson.cn)
  - Modify-the-ioctl-command-of-kvm.patch (lixianglai@loongson.cn)
  - Add-usb-storage-config-for-loongarch.patch (zhaotianrui@loongson.c)
  - Add-loongarch-into-QEMU_ARCH_VIRTIO_PCI-to-support-q.patch (zhaotianrui@loongson.c)
  - Fix-host-architecture-macro-of-LoongArch-to-HOST_LOO.patch (zhaotianrui@loongson.c)
  - Fix-LoongArch-KVM-header-macros.patch (zhaotianrui@loongson.c)
  - loongarch: Fixed the issue where qemu specifies the boot order (lixianglai@loongson.cn)
  - 0001-anolis-csv-i386-add-CSV-context.patch (jiangxin@hygon.cn)
  - 0002-anolis-csv-i386-add-command-to-initialize-CSV-contex.patch (jiangxin@hygon.cn)
  - 0003-anolis-csv-i386-add-command-to-load-data-to-guest-me.patch (jiangxin@hygon.cn)
  - 0004-anolis-csv-i386-add-command-to-load-vmcb-to-guest-me.patch (jiangxin@hygon.cn)
  - 0005-anolis-cpu-i386-populate-CPUID-0x8000_001F-when-CSV-.patch (jiangxin@hygon.cn)
  - 0006-anolis-csv-i386-CSV-guest-do-not-need-register-unreg.patch (jiangxin@hygon.cn)
  - 0007-anolis-target-i386-csv-load-initial-image-to-private.patch (jiangxin@hygon.cn)
  - 0008-anolis-vga-force-full-update-for-CSV-guest.patch (jiangxin@hygon.cn)
    (Hygon CSV3 feature)
  - Support Hygon CSV/CSV2 live migration, CSV2 reboot (hanliyang@hygon.cn)
  - Support CSV3 live migration (jiangxin@hygon.cn)
  - Support reuse ASID for CSV guests (hanliyang@hygon.cn)
  - Support tkm key isolation (xiongmengbiao@hygon.cn)
  - Add Hygon Dhyana-v3 and Dharma CPU model (zhouyanjing@hygon.cn)
  - Intel-SIG: Supprt Intel SPR/GNR/SRF new ISAs and cpu models (quanxian.wang@intel.com)
  - Intel-SIG: Supprt new SPR models (quanxian.wang@intel.com)
  - Intel-SIG: Sync more intel platform related features/fixes from upstream (jason.zeng@intel.com)


author: Xuchun Shang <xuchun.shang@linux.alibaba.com> - 6.2.0-53.0.1.3
changelog:
  - Sync Patch from source repo
  - 1120-qapi-qom-target-i386-csv-guest-Introduce-secret-head.patch
  - 1121-target-i386-kvm-Support-to-get-and-enable-extensions.patch
  - 1122-target-i386-csv-Request-to-set-private-memory-of-CSV.patch
  - 1123-target-i386-csv-Support-load-kernel-hashes-for-CSV3-.patch
  - 1124-target-i386-csv-Support-inject-secret-for-CSV3-guest.patch
  - 1125-i386-Avoid-explicitly-using-KVM_CAP_HYGON_COCO_EXT_C.patch
  - 1126-target-i386-sev-Return-0-if-sev_send_get_packet_len-.patch
  - 1127-target-i386-csv-The-CSV2-guest-running-on-the-recipi.patch
  - 1128-virtio-net-Fix-network-stall-at-the-host-side-waitin.patch


author: xiongmengbiao <xiongmengbiao@hygon.cn> - 6.2.0-53.0.1.5
changelog:
  - Support Hygon TKM run on CSV Guest
  - 1130-newfeature-hw-i386-add-mem2-option-for-qemu.patch
  - 1131-newfeature-hw-misc-psp-support-tkm-use-mem2-memory.patch
  - 1132-newfeature-hw-misc-psp-Pin-the-hugepage-memory-speci.patch


author: yangdepei <yangdepei@hygon.cn> - 6.2.0-53.0.1.6
changelog:
  - support Hygon CCP used in guest
  - 1133-newfeature-hw-vfio-add-hct-device-based-mediated-use.patch
  - 1134-newfeature-hw-vfio-hct-Change-MAX_CCP_CNT-from-16-to.patch
  - 1135-bugfix-hw-vfio-hct-fix-ccp-index-error-caused-by-uni.patch
  - 1136-newfeature-hw-vfio-hct-sharing-CCP-resources-between.patch
  - 1137-bugfix-hw-vfio-hct-exit-once-mdev-deivce-realize-fai.patch
  - 1138-bugfix-hw-vfio-hct-build-hct-device-in-default.patch


author: Jason Zeng <jason.zeng@intel.com> - 6.2.0-53.0.1.8
changelog:
  - Dependency patches for Intel CWF platform
  - 1140-target-i386-Allow-MCDT_NO-if-host-supports.patch
  - 1141-vmxcap-add-tertiary-execution-controls.patch
  - 1142-target-i386-add-support-for-VMX_SECONDARY_EXEC_ENABL.patch
  - 1143-target-i386-enumerate-bit-56-of-MSR_IA32_VMX_BASIC.patch
  - 1144-target-i386-fix-feature-dependency-for-WAITPKG.patch
  - 1145-target-i386-add-support-for-LAM-in-CPUID-enumeration.patch
  - 1146-target-i386-add-control-bits-support-for-LAM.patch
  - 1147-target-i386-add-support-for-FRED-in-CPUID-enumeratio.patch
  - 1148-target-i386-mark-CR4.FRED-not-reserved.patch
  - 1149-vmxcap-add-support-for-VMX-FRED-controls.patch
  - 1150-target-i386-enumerate-VMX-nested-exception-support.patch
  - 1151-target-i386-Add-get-set-migrate-support-for-FRED-MSR.patch
  - 1152-target-i386-Delete-duplicated-macro-definition-CR4_F.patch
  - 1153-target-i386-Add-VMX-control-bits-for-nested-FRED-sup.patch
  - 1154-target-i386-Raise-the-highest-index-value-used-for-a.patch
  - 1155-target-i386-Add-more-features-enumerated-by-CPUID.7..patch
  - 1156-target-i386-pass-X86CPU-to-x86_cpu_get_supported_fea.patch
  - 1157-i386-cpuid-Remove-subleaf-constraint-on-CPUID-leaf-1.patch
  - 1158-target-i386-Don-t-construct-a-all-zero-entry-for-CPU.patch
  - 1159-target-i386-Enable-fdp-excptn-only-and-zero-fcs-fds.patch
  - 1160-target-i386-Construct-CPUID-2-as-stateful-iff-times-.patch
  - 1161-target-i386-Make-invtsc-migratable-when-user-sets-ts.patch
  - 1162-target-i386-cpu-Fix-notes-for-CPU-models.patch


author: Zdenek Dohnal <zdohnal@redhat.com> - 7.1.1-5
changelog:
  - CVE-2018-9918 qpdf: stack exhaustion in QPDFObjectHandle and QPDF_Dictionary classes in libqpdf.a [fedora-all]


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-2
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209491


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-3
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212753


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212753


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-3
changelog:
  - support %bootstrap, %check: add autotests
  - build with -O1 to workaround serious autotest/code failures (f28+, #1551246)


author: Remi Collet <rcollet@redhat.com> - 4.0.10-2
changelog:
  - drop build dependency on pandoc
  - drop dependency on jemalloc #1591762
  - fix License (BSD and MIT)
  - add bundled libraries licences
  - cleanup conditions from spec file


author: Remi Collet <rcollet@redhat.com> - 5.0.3-2
changelog:
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192
  - fix Stack buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10193


author: Remi Collet <rcollet@redhat.com> - 5.0.3-4
changelog:
  - fix lua scripts can overflow the heap-based Lua stack
    CVE-2021-32626
  - fix integer overflow issue with Streams
    CVE-2021-32627
  - fix integer overflow bug in the ziplist data structure
    CVE-2021-32628
  - fix integer overflow issue with intsets
    CVE-2021-32687
  - fix integer overflow issue with strings
    CVE-2021-41099


author: Liwei Ge <geliwei@openanolis.org> - 6.2.17-1.0.1
changelog:
  - Support loongarch64 platform
  - cherry-pick `add sw patch $cbad809d90a96439e196e8610d5b1868bcca5d3d`. (nijie@wxiat.com)


author: Silas Sewell <silas@sewell.ch> - 1.2.6-3
changelog:
  - Add Fedora build flags
  - Send all scriplet output to /dev/null
  - Remove debugging flags
  - Add redis.conf check to init script


author: Fabian Deutsch <fabiand@fedoraproject.org> - 2.4.6-1
changelog:
  - Update to 2.4.6
  - systemd unit file added
  - Compiler flags changed to compile 2.4.6
  - Remove doc/ and Changelog


author: Fabian Deutsch <fabian.deutsch@gmx.de> - 2.6.16-1
changelog:
  - Update to 2.6.16
  - Fix rhbz#973151
  - Fix rhbz#656683
  - Fix rhbz#977357 (Jan Vcelak <jvcelak@fedoraproject.org>)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.8.14-1
changelog:
  - Upstream 2.8.14 (RHBZ #1136287)
  - Bugfix for lua scripting users (server crash)
  - Refresh patches
  - backport spec from EPEL7 (thanks Warren)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.8.14-2
changelog:
  - Cleanup spec
  - Fix shutdown for redis-{server,sentinel}
  - Backport fixes from Remi Collet repository (ie: sentinel working)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.8.15-1
changelog:
  - Upstream 2.8.15 (critical bugfix for sentinel)
  - Fix to sentinel systemd service and configuration (thanks Remi)
  - Refresh patch management


author: Remi Collet <remi@fedoraproject.org> - 2.8.17-1
changelog:
  - Upstream 2.8.17
  - fix redis-sentinel service unit file for systemd
  - fix redis-shutdown for sentinel
  - also use redis-shutdown in init scripts


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.8.19-1
changelog:
  - Upstream 2.8.19 (RHBZ #1175232)
  - Fix permissions for tmpfiles (RHBZ #1182913)
  - Add limits config files
  - Spec cleanups


author: Haïkel Guémar <hguemar@fedoraproject.org> - 3.0.2-1
changelog:
  - Upstream 3.0.2 (RHBZ #1228245)
  - Fix Lua sandbox escape and arbitrary code execution (RHBZ #1228331)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 3.2.3-1
changelog:
  - Upstream 3.2.3
  - Security fix for CVE-2013-7458 (redis-cli history world readable)
  - RHBZ#1363670 RHBZ#1363671


author: Remi Collet <remi@fedoraproject.org> - 3.2.3-2
changelog:
  - add missing man pages #1374577
    using patch from https://github.com/antirez/redis/pull/3491
  - data and configuration should not be publicly readable #1374700
  - remove /var/run/redis with systemd #1374728
  - provide redis-check-rdb as a symlink to redis-server #1374736
    using patch from https://github.com/antirez/redis/pull/3494
  - move redis-shutdown to libexec


author: Nathan Scott <nathans@redhat.com> - 3.2.9-1
changelog:
  - Upstream 3.2.9
  - Add RuntimeDirectory=redis to systemd unit file (RHBZ #1454700)
  - Mark rundir as %ghost since it may disappear (tmpfs - #1454700)
  - Fix a shutdown failure with Unix domain sockets (RHBZ #1444988)


author: Nathan Scott <nathans@redhat.com> - 3.2.10-1
changelog:
  - Upstream 3.2.10 release
  - Ensure both the redis and redis-sentinel service files set correct perms
  - Dropped systemd tmpfiles source, handled directly in systemd service files


author: Nathan Scott <nathans@redhat.com> - 3.2.11-1
changelog:
  - Upstream 3.2.11 bug-fix-only release
  - Switch to using Type=notify for Redis systemd services (RHBZ #1172841)
  - Add Provides:bundled hiredis, linenoise, lua-libs clauses (RHBZ #788500)


author: Nathan Scott <nathans@redhat.com> - 4.0.2-1
changelog:
  - Upstream 4.0.2 release.  (RHBZ #1389592)
  - Add redis-devel for loadable module development.
  - Add redis-doc for man pages and detailed documentation.
  - Provide redis-check-aof as a symlink to redis-server also now.


author: Remi Collet <remi@remirepo.net> - 4.0.3-1
changelog:
  - Redis 4.0.3
  - fix ownership of /usr/share/doc/redis
  - use make_flags for test to avoid rebuild and failure
  - fix rpm macro location on EL-6
  - add /var/run/redis on EL-6
  - add spec file license header
  - drop duplicated documentation from main package
  - keep man in main page


author: Nathan Scott <nathans@redhat.com> - 4.0.4-1
changelog:
  - Upstream 4.0.4 release.
  - Update to current upstream redis-doc also.
  - Fix man page issues (RHBZ #1513594 and RHBZ #1515417).


author: Remi Collet <remi@remirepo.net> - 4.0.5-1
changelog:
  - Redis 4.0.5 - Released Thu Dec 1 16:03:32 CET 2017
  - Upgrade urgency CRITICAL: Redis 4.0.4 fix for PSYNC2 was broken,
    causing the slave to crash when receiving an RDB file from the
    master that contained a duplicated Lua script.


author: Kalev Lember <kalevlember@gmail.com> - 0.7.93-1
changelog:
  - Update to 0.7.93
  - Tighten deps with the _isa macro
  - Don't manually require pkgconfig; rpmbuild generates this automatically
  - Use license macro for the COPYING file


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-5
changelog:
  + rhythmbox-3.4.2-5
  - Remove LIRC plugin
  - Fix 2 build warnings
  - Remove BRs for removed visualiser plugin


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-7
changelog:
  + rhythmbox-3.4.2-7
  - Fix warnings in art search when playing a radio
  - Fix initial import never finishing
  - Fix multimedia keys integration in GNOME


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - adjust for rpmdb index name change
  - drop unnecessary vendor-macro patch for real
  - add ISA-dependencies among rpm subpackages
  - make lzma and sqlite deps conditional and disabled by default for now


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - rpm 4.5.90-0.git8424.1 (alpha snapshot)
  - adjust to build against Berkeley DB 4.5.20 from compat-db for now
  - add posttrans to clean up db environment mismatch after upgrade
  - forward-port devel autodeps patch


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8426.5
  - flip back to external bdb
  - fix tab vs spaces complaints from rpmlint
  - add dep for lzma and require unzip instead of zip in build (#310694)
  - add pkgconfig dependency to rpm-devel
  - drop ISA-dependencies for initial introduction
  - new snapshot from upstream for documentation fixes


author: Florian Festi <ffesti@redhat.com>
changelog:
  - 4.5.90-0.git8426.10
  - rpm-4.5.90-posttrans.patch
  - use header from rpmdb in posttrans to make anaconda happy


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8461.1
  - new snapshot from upstream
  - fixes #68290, #455972, #446202, #453364, #456708, #456103, #456321, #456913,
    - partial fix for #457360


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - add support for noarch subpackages
  - fix segfault in case of insufficient disk space detected (#460146)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - fix parsing of boolean expressions in spec (#456103)
    (unbreaks pam, jpilot and maybe other builds)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - create directory structure for rpmbuild prior to build if it doesn't exist (#455387)
  - create _topdir if it doesn't exist when installing SRPM
  - don't generate broken cpio in case of hardlink pointing on softlink,
    thanks to pixel@mandriva.com


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - add hack to support extracting gstreamer plugin provides (#438225)
  - fix another macro argument handling regression (#461180)


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to official 4.5.90 alpha tarball 
  - a big pile of misc bugfixes + translation updates
  - isa-macro generation fix for ppc (#464754)
  - avoid pulling in pile of perl dependencies for an unused script
  - handle both "invalid argument" and clear env version mismatch on posttrans


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc1 
  - fixes #465586, #466597, #465409, #216221, #466503, #466009, #463447...
  - avoid using %configure macro for now, it has unwanted side-effects on rpm


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - Make noarch sub-packages actually work
  - Fix defaultdocdir logic in installplatform to avoid hardwiring mandir


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc2
  - fixes #471820, #473167, #469355, #468319, #472507, #247374, #426672, #444661
  - enable automatic generation of pkg-config and libtool dependencies #465377


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.2
changelog:
  - change platform sharedstatedir to something more sensible (#185862)
  - add rpmdb_foo links to db utils for documentation compatibility


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.3
changelog:
  - extract mimehandler provides from .desktop files
  - preliminaries for extracting font provides (not enabled yet)
  - dont classify font metrics data as fonts
  - only run script dep extraction once per file, duh


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-1
changelog:
  - update to 4.6.0 final
  - revert libmagic looking into compressed files for now, breaks ooffice build


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-4
changelog:
  - inherit group tag from the main package (#470714)
  - ignore BuildArch tags for anyarch actions (#442105)
  - don't check package BuildRequires when doing --rmsource (#452477)
  - don't fail because of missing sources when only spec removal
    is requested (#472427)


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-5
changelog:
  - remove two offending hunks from anyarch patch causing that
    RPMTAG_BUILDARCHS isn't written to SRPMs


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-7
changelog:
  - loosen up restrictions on dependency names (#455119)
  - handle inter-dependent pkg-config files for requires too (#473814)
  - error/warn on elf binaries in noarch package in build


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-0.beta1.9
changelog:
  - fix recorded file state of otherwise skipped files (#492947)
  - compress ChangeLog, drop old CHANGES file (#492440)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-1
changelog:
  - update to 4.7.0 final (http://rpm.org/wiki/Releases/4.7.0)
  - fixes #494049, #495429
  - dont permit test-suite failure anymore


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-2
changelog:
  - file classification tweaks for text files (#494817)
    - disable libmagic text token checks, it's way too error-prone
    - consistently classify all text as such and include description


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-3
changelog:
  - couple of merge-review fixes (#226377)
    - eliminate bogus leftover rpm:rpm rpmdb ownership
    - unescaped macro in changelog
  - fix find-lang --with-kde with KDE3 (#466009)
  - switch back to default file digest algorithm


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-4
changelog:
  - split cron-job into a sub-package to avoid silly deps on core rpm (#500722)
  - rpm requires coreutils but not in %post
  - build with libcap and libacl
  - fix pgp pubkey signature tag parsing


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-5
changelog:
  - don't mess up problem altNEVR in python ts.check() (#501068)
  - fix hardlink size calculation on build (#503020)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-8
changelog:
  - updated OSGi dependency extractor (#506471)
  - fix segfault in symlink fingerprinting (#505777)
  - fix invalid memory access causing bogus file dependency errors (#506323)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-5
changelog:
  - fix duplicate dependency filtering on build (#490378)
  - permit absolute paths in file lists again (#521760)
  - use permissions 444 for all .debug files (#522194)
  - add support for optional bugurl tag (#512774)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-6
changelog:
  - use relative paths within db environment (related to #507309, #507309...)
  - remove db environment on close in chrooted operation (related to above)
  - initialize rpmlib earlier in rpm2cpio (#523260)
  - fix file dependency tag extension formatting (#523282)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-7
changelog:
  - fix build with BDB 4.8.x by removing XA "support" from BDB backend 
  - perl dep extractor heredoc parsing improvements (#524929)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-8
changelog:
  - support multiple python implementations in brp-python-bytecompile (#531117)
  - make disk space problem reporting a bit saner (#517418)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.2-2
changelog:
  - missing error exit code from signing password checking (#496754)
  - dont fail build on unrecognized data files (#532489)
  - dont try to parse subkeys and secret keys (#436812)
  - fix chmod test on selinux, breaking %{_fixperms} macro (#543035)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.1
changelog:
  - update to 4.8.0-beta1 (http://rpm.org/wiki/Releases/4.8.0)
  - rpm-build conflicts with current ocaml-runtime


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.2
changelog:
  - fix noise from python bytecompile on non-python packages (#539635)
  - make all our -devel [build]requires isa-specific
  - trim out superfluous -devel dependencies from rpm-devel


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-3
changelog:
  - fix segfault on failed url retrieval
  - fix verification error code depending on verbosity level
  - if anything in testsuite fails, dump out the log


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-8
changelog:
  - more fixes to postscript provides extractor (#562228)
  - avoid accessing unrelated mount points in disk space checking (#547548)
  - fix disk space checking with erasures present in transaction (#561160)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-11
changelog:
  - support single PPD providing driver for devices (#568351)
  - merge the psdriver patch pile into one
  - preserve empty lines in spec prep section (#573339)
  - teach python bindings about RPMTRANS_FLAG_NOCONTEXTS (related to #573111)
  - dont own localized man directories through find_lang (#569536)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-15
changelog:
  - handle non-existent dependency sets correctly in python (#593553)
  - make find-lang look in all locale dirs (#584866)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-16
changelog:
  - adjust to new pkg-config behavior wrt private dependencies (#596433)
  - rpm-build now requires pkgconfig >= 0.24


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-1
changelog:
  - update to 4.8.1 (http://rpm.org/wiki/Releases/4.8.1)
  - drop no longer needed patches
  - fix source url pointing to testing directory


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-2
changelog:
  - fix a potential getOutputFrom() error from font provide extraction
  - debug-friendlier message to aid finding other similar cases (#565223)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-5
changelog:
  - create gdb index on debuginfo generation (#617166)
  - rpm-build now requires /usr/bin/gdb-add-index for consistent index creation
  - include COPYING in -apidocs for licensing guidelines compliance


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-7
changelog:
  - bunch of spec tweaks, cleanups + corrections:
    - shorten rpm-build filelist a bit with glob use, reorder for saner grouping
    - missing isa in popt version dependency
    - only add rpmdb_foo symlinks for actually relevant db_* utils
    - drop no longer necessary file-devel dependency from rpm-devel
    - drop sqlite backend build-conditional
    - preliminaries for moving from db4 to libdb
  - use gnupg2 for signing as that's more likely to be installed by default


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.1
changelog:
  - rpm 4.9.0-beta1 (http://rpm.org/wiki/Releases/4.9.0)
    - drop no longer needed patches
    - adjust requires + buildrequires to match current needs
    - adjust rpmdb index ghosts to match the new release
    - split librpmbuild and librpmsign to a separate rpm-build-libs package
    - split rpmsign to its own package to allow signing without all the build goo
    - build-conditionalize plugins, disabled for now
    - gstreamer and printer dependency generation moving out
    - handle .so symlink dependencies with fileattrs
    - use gnupg2 for signing as that's what typically installed by default


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.3
changelog:
  - avoid division by zero in rpmdb size calculation (#671056)
  - fix secondary index iteration returing duplicate at end (#671149)
  - fix rebuilddb creating duplicate indexes for first header


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.5
changelog:
  - dont try to remove environment files if private env used (related to #671200)
  - unbreak mono dependency extraction (#673663)
  - complain instead of silent abort if cwd is not readable (#672576)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.rc1.1
changelog:
  - update to 4.9.0-rc1
  - drop upstream patches
  - nss packaging has changed, buildrequire nss-softokn-freebl-devel


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.rc1.4
changelog:
  - spec cosmetics clean up extra whitespace + group more logically
  - wipe out BDB environment at boot via tmpfiles.d


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-5
changelog:
  - verify some properties of replaced and wrong-colored files (#528383)
  - only list packages that would be generated on spec query (#693338)
  - preferred color packages should be erased last (#680261)
  - fix leaks when freeing a populated transaction set
  - take file state into account for file dependencies


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-8
changelog:
  - add dwarf-4 support to debugedit (#707677)
  - generate build-id symlinks for all filenames sharing a build-id (#641377)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-9
changelog:
  - fix crash if prep or changelog section in spec is empty (#706959)
  - fix crash on macro which undefines itself
  - fix script dependency generation with file 5.07 string changes (#712251)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.1.2-3
changelog:
  - adjust db util prefix & dependency due to #749293
  - warn but dont fail the build if STABS encountered by debugedit (#725378)


author: Kay Sievers <kay@redhat.com> - 4.9.1.2-8
changelog:
  - add temporary rpmlib patch to support filesystem transition
    https://fedoraproject.org/wiki/Features/UsrMove


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.1.2-13
changelog:
  - fix memory corruption on rpmdb size estimation (#766260)
  - fix couple of memleaks in python bindings (#782147)
  - fix regression in verify output formatting (#797964)
  - dont process spec include in false branch of if (#782970)
  - only warn on missing excluded files on build (#745629)
  - dont free up file info sets on test transactions


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11505.5
changelog:
  - add temporary fake library provides to get around deltarpm "bootstrap"
    dependency (yes its dirty)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11519.1
changelog:
  - newer git snapshot to keep patch-count down
  - fixes CVE-2012-0060, CVE-2012-0061 and CVE-2012-0815
  - fix obsoletes in installing set getting matched on provides (#810077)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11536.1
changelog:
  - newer git snapshot (#809402, #808750)
  - adjust posttrans script wrt bdb string change (#803866, #805613)


author: Panu Matilainen <pmatilai@redhat.com> - 4.10.90-0.git11989.1
changelog:
  - update to 4.11 (http://rpm.org/wiki/Releases/4.11.0) post-alpha snapshot
  - drop/adjust patches as necessary


author: Panu Matilainen <pmatilai@redhat.com> - 4.10.90-0.git11989.3
changelog:
  - package /usr/lib/rpm/macros.d directory (related to #846679)
  - fixup a bunch of old incorrect dates in spec changelog


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.0-0.beta1.2
changelog:
  - armv7hl and armv7hnl should not have -mthumb (#901901)
  - fix duplicate directory ownership between rpm and rpm-build (#894201)
  - fix regression on paths shared between a real file/dir and a ghost


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-7
changelog:
  - fix build-time double-free on file capability processing (#956190)
  - fix relocation related regression on file sanity check (#1001553)
  - fix segfault on empty -p <lua> scriptlet body (#1004062)
  - fix source url, once again


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-11
changelog:
  - generate kmod(module.ko) provides for kernel (#1025513)
  - dont override CONFIG_SITE if already set (related to #962837)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.2-0.rc1.1
changelog:
  - update to 4.11.2-rc1 (http://rpm.org/wiki/Releases/4.11.2)
  - drop upstreamed patches, adjust others as needed
  - handle python egg-info's version munging in file lists


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.2-3
changelog:
  - dont eat newlines on parametrized macro invocations (#1045723)
  - fully reset file actions between rpmtsRun() calls (#1076552)
  - fix build and sign module initialization in python3 (#1064758)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.2-6
changelog:
  - build with -fsanitize=address and -fsanitize=undefined for now
  - add spec build conditional for sanitizer build


author: Tom Callaway <spot@fedoraproject.org> - 4.11.2-10
changelog:
  - remove _isa from all BuildRequires (bz 554854)
    See: https://fedoraproject.org/wiki/Packaging:Guidelines#BuildRequires_and_.25.7B_isa.7D


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.90-0.git12844.1
changelog:
  - Update to rpm 4.12-alpha ((http://rpm.org/wiki/Releases/4.12.0)
  - Drop/adjust patches as appropriate
  - New sub-package(s) for plugins


author: Panu Matilainen <pmatilai@redhat.com> - 4.12.0-0.beta1.1
changelog:
  - Update to 4.12.0-beta1 (http://rpm.org/wiki/Releases/4.12.0)
  - Fixes #1122004, #1111349, #1117912, #1123722
  - Drop upstreamed patches


author: Panu Matilainen <pmatilai@redhat.com> - 4.12.0.1-1
changelog:
  - Update to rpm-4.12.0.1 final (http://rpm.org/wiki/Releases/4.12.0.1)
  - Temporary workaround payload size mismatch issue in rpm2cpio (#1142949)


author: Panu Matilainen <pmatilai@redhat.com> - 4.12.0.1-3
changelog:
  - Skip ghost files in payload (#1156497)
  - Fix size and archice size tag generation on big-endian systems


author: Lubos Kardos <lkardos@redhat.com> - 4.12.0.1-5
changelog:
  - Add check against malicious CPIO file name size (#1168715)
  - Fixes CVE-2014-8118
  - Fix race condidition where unchecked data is exposed in the file system
    (#1039811)
  - Fixes CVE-2013-6435


author: Lubos Kardos <lkardos@redhat.com> 4.12.0-11
changelog:
  - Pass _find_debuginfo_opts -g to eu-strip for executables (#1186563)
  - add_minidebug is not ran when strip_g is set (#1186563)


author: Lubos Kardos <lkardos@redhat.com> - 4.12.90-5
changelog:
  - If globbing of a filename fails, try use the filename without globbing.
    (#1246743)
  - Modify rpmIsGlob() to be more precise and compatible with glob().
    (#1246743)


author: Lubos Kardos <lkardos@redhat.com> - 4.13-0.rc1.6
changelog:
  - If %_wrong_version_format_terminate_build is 1 then terminate build in case
    that version format is wrong i. e. epoch is not unsigned integer or version
    contains more separators (":", "-"). %_wrong_version_format_terminate_build
    is 1 by deafault (#1265700)


author: Lubos Kardos <lkardos@redhat.com> - 4.13-0.rc1.7
changelog:
  - Fix reading a memory right after the end of an allocated area (#1260248)
  - Add support for various types of dependencies to rpmdeps tool (#1247092)
  - fix %autopatch when patch do not exist (#1244172)


author: Lubos Kardos <lkardos@rpm.org> - 4.13.0-0.rc1.13
changelog:
  - Add possibility to disable file triggers
  - Fix unwanted multiple execution of filetriggers in dnf (#1282115)


author: Lubos Kardos <lkardos@redhat.com> - 4.13.0-0.rc1.20
changelog:
  - Revert using %configure, it causes problems
  - Temporary set %_gnu macro explictly, just for one build (#1303265)


author: Florian Festi <ffesti@rpm.org> - 4.13.0-0.rc1.24
changelog:
  - Also block idle and sleep in the systemd-inhibit plugin (#1297984)
  - Add support for MIPS release 6
  - Add mips32 mips64 mipsel and mipseb macros (#1285116)


author: Lubos Kardos <lkardos@redhat.com> 4.13.0-0.rc1.31
changelog:
  - Enable --no-backup-if-mismatch by default in %patch macro (#884755)
  - Add %{_default_patch_flags} to %__patch which is used in %autosetup
  - Use fuzz settings for %autopatch/%autosetup


author: Lubos Kardos <lkardos@redhat.com> 4.13.0-0.rc1.33
changelog:
  - Fix sigsegv in stringFormat() (#1316903)
  - Fix reading rpmtd behind its size in formatValue() (#1316896)


author: Igor Gnatenko <ignatenko@redhat.com> - 4.13.0-0.rc1.41
changelog:
  - Add %{?system_python_abi}
  - rpm-python -> python2-rpm && rpm-python3 -> python3-rpm with providing old names
  - Fixes and cleanups


author: Thierry Vignaud <tvignaud@redhat.com> - 4.13.0-2
changelog:
  - Fix package name references in python sub-packages to match reality
  - Re-enable test-suite now that it works again


author: Panu Matilainen <pmatilai@redhat.com> - 4.13.0-11
changelog:
  - Fix malformed packages being generated around 4GB boundary (#1405570)
  - Resurrect debuginfo GDB index generation (#1410907)


author: Mark Wielaard <mjw@redhat.com> - 4.13.0.1-13
changelog:
  - Add tests fix for sed file build-id regexp matching.
  - Add fix for build-ids in non-executable ELF files (#1433837).


author: Panu Matilainen <pmatilai@redhat.com> - 4.13.0.1-17
changelog:
  - Work around missing python[23] during build dependency parse
  - Include ISA in the new python library version dependencies too


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-19
changelog:
  - Minisymtab should only be added for executables or shared libraries.
  - Add find-debuginfo.sh -n (debugedit --no-recompute-build-id) option.


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-25
changelog:
  - Add support for debugsource and debuginfo subpackages
    - find-debuginfo-untangle-unique-build-options.patch
    - debugsrc-and-sub-debuginfo-packages.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-28
changelog:
  - Add debugedit-prefix.patch.
  - Add find-debuginfo-filter-built-ins.patch.
  - Add find-debuginfo-dwz-multi.patch.
  - Add find-debuginfo-and-macro-docs.patch.


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-29
changelog:
  - Track patches using https://pagure.io/rpm-fedora
  - Use file list to explicitly set mode for build-id dirs/files
    (#1452893, #1458839)


author: Miro Hrončok <mhroncok@redhat.com> - 4.13.90-0.git14000.4
changelog:
  - Add platform-python bytecompilation patch: platform-python-bytecompile.patch
  - Add platform python deps generator patch: platform-python-abi.patch
  - Add a platform-python subpackage and remove system python related declarations
  - Build rpm without platform_python for bytecompilation
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.0-0.rc1.1
changelog:
  - Rebase to rpm 4.14.0-rc1 (http://rpm.org/wiki/Releases/4.14.0)
  - Re-enable SHA256 header digest generation (see #1480407)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.0-0.rc1.2
changelog:
  - Actually honor with/without libimaevm option
  - ima-evm-utils-devel >= 1.0 is required for rpm >= 4.14.0


author: Tomas Orsava <torsava@redhat.com> - 4.14.1-5
changelog:
  - Add envvar that will be present during RPM build,
    Part of a Fedora Change for F28: "Avoid /usr/bin/python in RPM build"
    https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.1-6
changelog:
  - Avoid unnecessary macro helper dependency on /usr/bin/python (#1538657)
  - Fix release of previous changelog entry


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-0.rc2.1
changelog:
  - Update to rpm 4.14.2-rc2
  - Fixes a regression in rpmlog error handling (#1597274)
  - Fixes several resource leaks found by covscan (#1602681)
  - Fixes DISTTAG not getting copied to source rpms (#1596193)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-1
changelog:
  - Buildrequire audit-libs-devel to actually enable the feature (#1607612)
  - Update to rpm 4.14.2 final (http://rpm.org/wiki/Releases/4.14.2)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-7
changelog:
  - Move python-macro-helper to main package where the macros are (#1651926)
  - Document --noverify in the man page (#1646458)
  - Handle unsupported digests the same as disabled ones (#1652529)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-11
changelog:
  - Revised patch for Py3 string data as surrogate-escaped utf-8 (#1631292)
  - Add a .decode() method to returned Py3 strings for compatibility


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-14
changelog:
  - Verify packages before signing (#1646388)
  - Make rpmsign exist values more consistent with our other tools


author: Florian Festi <ffesti@redhat.com> - 4.14.2-16
changelog:
  - Sort list of hard linked files in find-debuginfo.sh (#1421272)
  - Correct rpm -ql exit value when optional -p is omitted (#1680610)
  - Show list of files only once when use rpm -ql and multiple rpm files (#1689898)


author: Florian Festi <ffesti@redhat.com> - 4.14.2-23
changelog:
  - Use --dpbath only with full path (#1696408)
  - Fix memory leaks (#1714657)
  - Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
  - Fix bash warning from solution for #1689810


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-27
changelog:
  - Support generating build-id's from compressed ELF files (#1650074)
  - Compress annobit notes in find-debuginfo (#1719837)


author: Florian Festi <ffesti@redhat.com> - 4.14.2-31
changelog:
  - Parallelize /usr/lib/rpm/brp-strip-static-archive (#1691824)
  - Parallelize /usr/lib/rpm/check-buildroot (#1704354)


author: Florian Festi <ffesti@redhat.com> - 4.14.3-5
changelog:
  - Don't error out when replacing an invalid signature (#1874062)
  - Raise an expection when erasing a package fails in Python (#1872623)
  - Fix builds on NFS filesystems (#1840728)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-12
changelog:
  - Bump up the limit of signature header to 64MB (#1918777)
  - Add fapolicyd plugin (#1923167)
  - Unblock signals in forked scriptlets (#1913765)
  - Fix ambiguous diagnostics output on file triggers (#1883338)
  - Ensure ELF files get stripped when debuginfo is disabled (#1634084)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-13
changelog:
  - Fix minor issues found by COVSCAN in fapolicyd plugin
  - Actually honor libarchive bcond at configure time (#1902887)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-15
changelog:
  - Add out-of-bounds checks to hdrblobInit() (#1929445)
  - Fixes CVE-2021-20266
  - Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-16
changelog:
  - Add support for read-only sqlite rpmdb (#1938928)
  - Drop compat .decode() method from returned Py3 strings (#1840142)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-20
changelog:
  - Add --path query option (#1940895)
  - Macroize find-debuginfo script location (#2019540)
  - Validate and require subkey binding sigs on PGP pubkeys (#1958480)
  - Fixes CVE-2021-3521


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-22
changelog:
  - Fix spurious %transfiletriggerpostun execution (#2023693)
  - Skip recorded symlinks in --setperms (#1900662)


author: Florian Festi <ffesti@redhat.com> - 4.14.3-31
changelog:
  - Backport file handling code from rpm-4.19 to fix CVE-2021-35937,
    CVE-2021-35938 and CVE-2021-35939


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-32
changelog:
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63069)
  - Fix IMA signature lengths assumed constant (RHEL-39896)
  - Fix root relocation regression (RHEL-49494)
  - Report unsafe symlinks during installation as a specific case (RHEL-39897)
  - Don't segfault on missing priority tag (RHEL-39894)


author: Liwei Ge <geliwei@openanolis.org> - 4.14.4-32.0.1
changelog:
  - Rebrand for Anolis OS
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 build
  - Support loongarch for rpm
  - Add loongarch64 support for debugedit(doupengda@loongson.cn)
  - Modify the spec to add debugedit for loongarch64(zhangwenlong@loongson.cn)
  - Support and switch rpmdb to sqlite (flin@linux.alibaba.com)
  - conditional set relbuf for loongarch debugedit (geliwei@openanolis.org)
  - avoid dead loop in db3_dbiOpen when db_create failed (xuchunmei@linux.alibaba.com)
  - do not switch rpmdb to sqlite (xuchunmei@linux.alibaba.com)
  - Fix a copy-paste --help description of --whatconflicts (wangkaiqiang@inspur.com)
  - https://bugzilla.openanolis.cn/show_bug.cgi?id=8035 (wangkaiqiang@inspur.com)
  - Add sw64 Architecture (nijie@wxiat.com)
  - update config to support sw64 Architecture. (Weisson@linux.alibaba.com)
  - keep compatibility between sw and other architecture. (Weisson@linux.alibaba.com)
  - Fix compatibility of debugedit tool on sw_64 platform. (Weisson@linux.alibaba.com)
  - cherry-pick Add sw8a Architecture #d96aa474da407c806ef6b68c669f8027e366f302 (nijie@wxiat.com)
  - cherry-pick Add sw8a patch #923576a65dc00eb4fbe1f10a5d0027c4de1f5be0 (nijie@wxiat.com)


author: Colin Walters <walters@verbum.org> - 2022.10.94.g89f58028-2
changelog:
  - Update to latest https://github.com/coreos/rpm-ostree/tree/rhel8 at commit
    https://github.com/coreos/rpm-ostree/commit/89f58028f0bea5b6fa59bdb3506078e09957ec00
  - Resolves: rhbz#2122289
  - Resolves: rhbz#2122299


author: Colin Walters <walters@verbum.org> - 2022.10.97.gade6df33-2
changelog:
  - Update to latest https://github.com/coreos/rpm-ostree/tree/rhel8 at commit
    https://github.com/coreos/rpm-ostree/commit/ac182cb920f84946bb155e9cf061db7f5f26e917
  - Resolves: rhbz#2122289


author: Colin Walters <walters@verbum.org> - 2022.10.112.g3d0ac35b-3
changelog:
  - Cherry pick
    https://github.com/coreos/rpm-ostree/pull/4311/commits/a0f1275dfbd835b704355d095e610ac1f1254f25
    Resolves: rhbz#2170579


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2022.10.117.g52714b51-2
changelog:
  - Backport fb97c48f3 & eae7e1d8
    https://github.com/coreos/rpm-ostree/commit/fb97c48f3cd070c1ad559f3f43f86ad6548f6b02
    https://github.com/coreos/rpm-ostree/commit/eae7e1d8d692b5ce6d3d6eef29abbd7512ae4682
    Resolves: rhbz#2229804


author: yuanhui <yuanhui@linux.alibaba.com> - 2022.10.117.g52714b51-3.0.1
changelog:
  - LifseaOS: Remove polkit support
  - LifseaOS: Add --apply-live/-A support for rpm-ostree uninstall
  - LifseaOS: Add upgrade one package for override replace
  - LifseaOS: Disable initramfs and selinux


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.4-4
changelog:
  - Expose gating.yaml file in order to enable manual CI gating for rshim
    in RHEL-8.4, by bumping release and doing a Brew build.
  - Partially resolves: rhbz#1912248


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5.
  - Modify rshim.spec accordingly.
  - Resolves: rhbz#1950425


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-2
changelog:
  - Add sysconfig/rshim file and update rshim.service to source it.
  - jbastian made the first cut of this patch, which needed to be
    modified due to the update to 2.0.5. And I chose to go with
    %autosetup to handle Patch0, instead of sticking with %setup.
  - Resolves: rhbz#1946349


author: Dean Nelson <dnelson@redhat.com> - 2.0.8-1
changelog:
  - Update user-space rshim driver source to version 2.0.8
  - Modify rshim.spec accordingly
  - Resolves: rhbz#2196852


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-9
changelog:
  - Add deleteStateOnFileMove imfile module option
    resolves: rhbz#1909639
  - Add inotify_rm_watch() inotify API call when object needs to be destroyed
    resolves: rhbz#2052403


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-10
changelog:
  - openssl: Correct gnutlsPriorityString (custom ciphers) behaviour
  - Fix error handling in gtlsRecordRecv that can cause 100 percent CPU usage
    resolves: rhbz#2046158
  - Address CVE-2022-24903, Heap-based overflow in TCP syslog server
    resolves: rhbz#2081401


author: Attila Lakatos <alaktos@redhat.com> - 8.2102.0-13
changelog:
  - Make rsyslog-relp require librelp>= 1.9.0
    resolves: rhbz#2029352
  - Reorder logrotate parameters to work with POSIXLY_CORRECT env var
    resolves: rhbz#2070496


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-14
changelog:
  - Fix wrong type conversion in cstrLen()
    resolves: rhbz#2157804
  - imjournal: by default retrieves _PID from journal as PID number
    resolves: rhbz#2176398
  - Systemd service file hardening
    resolves: rhbz#2176404


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-15
changelog:
  - omelasticsearch: make compatible with elasticsearch>=8
  - add new action specific parameter esversion.major
    resolves: rhbz#2192955


author: John Kacur <jkacur@redhat.com> - 2.4-3
changelog:
  - Add error checking in hackbench to connect and getsockname
  - Fix compile warnings in hackbench because of comparison of different signs
  - Fix compile warnings in hackbench because of warnings about fall through
  Resolves: rhbz#bz2115064


author: Leah Leshchinsky <lleshchi@redhat.com> - 2.4-4
changelog:
  - hwlatdetect: Convert to fstrings
  - hwlatdetect: Update to integer division
  - hwlatdetect: Fix incorrect comment about test duration
  Resolves: rhbz#2121152


author: John Kacur <jkacur@redhat.com> - 2.6-2
changelog:
  - oslat: Fix conversion to nanoseconds for 1us bucket
  - oslat: correct spelling of Mhz to MHz
  Resolves: RHEL-23908


author: Stephen Gallagher <sgallagh@redhat.com> - 0.11-15
changelog:
  - Temporarily disable -Werror=format-security to unbreak the build
  - Build with verbose command-line visible in the logs
  - Resolves: rhbz#1424270


author: John Kacur <jkacur@redhat.com> - 5.14.0-3
changelog:
  - Fix exit status when returning from calls to usage()
  Resolves: rhbz#2161423
  jiraProject == RHELPLAN-145250


author: John Kacur <jkacur@redhat.com> - 5.14.0-6
changelog:
  - Forward port the tests directory for ci testing
  Resolves: rhbz#2196611
  jiraProject == RHELPLAN-156801


author: John Kacur <jkacur@redhat.com> - 6.6.0-1
changelog:
  Update to rtla in linux-6.6.0
  - Add patch to use SYS_gettid and add -lpthread to the Makefile
  Resolves: RHEL-10081


author: Vít Ondruch <vondruch@redhat.com> - 2.7.1-133
changelog:
  - Fix `require` behavior allowing to load libraries multiple times.
    Resolves: rhbz#1842989
  - Add ruby-default-gems dependency on irb.


author: Pavel Valena <pvalena@redhat.com> - 2.7.3-136
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1947938
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1944227


author: Jarek Prokop <jprokop@redhat.com> - 3.0.1-138
changelog:
  - Upgrade to Ruby 3.0.1 by merging Fedora rawhide branch (commit: 6b2ff68).
    * Add missing `rubygem-` prefix for bundled provide of 'connection_pool'.
    * Pass ldflags to gem install via CONFIGURE_ARGS
    * Remove IRB dependency from rubygem-rdoc.
    * Fix flaky excon test suite.
    * Properly support DWARF5 debug information.
        Related: rhbz#1920533
    * Bundle OpenSSL into StdLib.
    * Fix SEGFAULT in rubygem-shoulda-matchers test suite.
    * Provide `gem.build_complete` file for binary gems.
    * Re-enable test suite.
    * ruby-default-gems have to depend on rubygem(io-console) due to reline.
    * Fix SEGFAULT preventing rubygem-unicode to build on armv7hl.
    * Add support for reworked RubyGems plugins.
    * Use proper path for plugin wrappers.
    * Extract RSS and REXML into separate subpackages, because they were moved from
       default gems to bundled gems.
    * Drop Net::Telnet and XMLRPC packages, because they were dropped from Ruby.
    Resolves: rhbz#1938942
  - Fix FTBFS due to an incompatible load directive.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-139
changelog:
  - Upgrade to Ruby 3.0.2.
    Related: rhbz#1938942
  - Fix command injection vulnerability in RDoc. (CVE-2021-31799)
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    (CVE-2021-31810)
  - Fix StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)
  - Fix dependencies of gems with explicit source installed from a
    different source. (CVE-2020-36327)
  - Pass ldflags to gem install via CONFIGURE_ARGS.
    The same comment on the changelog 3.0.1-138 was wrong.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-140
changelog:
  - Fix rubygem-irb upgrade not working due to directory -> symlink conversion.
    Resolves: rhbz#2010949


author: Jarek Prokop <jprokop@redhat.com> - 3.3.1-2
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-37446
  - Fix buffer overread vulnerability in StringIO.
    (CVE-2024-27280)
    Resolves: RHEL-37448
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    (CVE-2024-27281)
    Resolves: RHEL-37449
  - Fix Arbitrary memory address read vulnerability with Regex search.
    (CVE-2024-27282)
    Resolves: RHEL-37447


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-3
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-55409
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57049
    Resolves: RHEL-57054
    Resolves: RHEL-57069
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52783


author: Toru Hoshina <hoshina@best.com>
changelog:
  - Modified SPEC in order to install libruby.a so that it should be used by
    another ruby entention.
  - 2nd release.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/12/2000 CVS).
  - Added manuals and FAQs.
  - Split into ruby, ruby-devel, ruby-tcltk, ruby-docs, irb.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/20/2000 CVS).
  - Removed ruby-list.23190.patch(included into ruby_cvs.patch).
  - Added ruby-dev.10054.patch.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/22/2000 CVS).
  - Removed ruby-dev.10054.patch(included into ruby_cvs.patch).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.6.
  - removed ruby-dev.10123.patch(included into ruby-1.4.6).
  - Added ruby_cvs.2000082901.patch(upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Updated to upstream version 1.6.1.
  - Removed ruby_cvs.2000082901.patch and added ruby_cvs.2000092718.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000092718.patch and added ruby_cvs.2000100218.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100218.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000101117.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101117.patch and added ruby_cvs.2000101901.patch
    (upgraded ruby to latest cvs version).
  - Added ruby-dev.11262.patch.
  - Added ruby-dev.11265.patch.


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101901.patch, added ruby_cvs.2000121413.patch
    (upgraded ruby to latest cvs version).
  - Removed ruby-dev.11262.patch, ruby-dev.11265.patch,
    and ruby-dev.11268.patch (included into above patch).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000121413.patch, added ruby_cvs.2000122019.patch
    (upgraded ruby to latest cvs version).
  - new package: libruby


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000122019.patch, added ruby_cvs.2000122215.patch
    (upgraded ruby to latest cvs version, 1.6.2-preview4).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Applied patch: upgraded to cvs version (2001-01-15):
    fixed minor bugs(e.g. ruby makes extention librares too large...).


author: akira yamada <akira@vinelinux.org>
changelog:
  - fixed bad group for libruby.
  - Applied patch: upgraded to cvs version (2001-02-08):
    fixed minor bugs.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4-2
changelog:
  - Remove Japanese description and summaries; they belong in specspo and
    break rpm
  - Clean up specfile
  - Mark language specific files (README.jp) as such
  - bzip2 sources
  - rename the libruby package to ruby-libs for consistency
  - Exclude ia64 (doesn't build - the code doesn't seem to be 64-bit clean
    [has been excluded on alpha forever])


author: Akira TAGOH <tagoh@redhat.com> 1.6.6-1
changelog:
  - New upstream release.
  - Applied bug fix patches:
    - ruby-1.6.6-501-ruby-mode.patch: ruby-talk#30479: disables font-lock
      coloring.
    - ruby-1.6.6-100.patch: ruby-talk#30203: Ruby 1.6.6 bug and fix
                            ruby-list#33047: regex bug
                            PR#230: problem with -d in 1.6.6
  - Added ruby-mode and ruby-mode-xemacs packages.
  - Ruby works fine for ia64. so re-enable to build with ia64.
    (probably it should be worked for alpha)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-1
changelog:
  - New upstream release.
  - ruby-1.6.6-100.patch, ruby-1.6.6-501-ruby-mode.patch:
    removed. these patches no longer should be needed.
  - ruby-1.6.7-500-marshal-proc.patch: applied a fix patch.
    (ruby-dev#16178: Marshal::dump should call Proc#call.)
  - ruby-1.6.7-501-class-var.patch: applied a fix patch.
    (ruby-talk#35157: class vars broken in 1.6.7)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-2
changelog:
  - ruby-man-1.4.6-jp.tar.bz2: removed.
  - ruby-refm-rdp-1.4.7-ja-html.tar.bz2: uses it instead of.
  - ruby-1.6.7-500-marshal-proc.patch, ruby-1.6.7-501-class-var.patch:
    removed.
  - ruby-1.6.7-100.patch: applied a bug fix patch.
    (ruby-dev#16274: patch for 'wm state')
    (PR#206ja: SEGV handle EXIT)
  - ruby-1.6.7-101.patch: applied a bug fix patch.
    (ruby-list#34313: singleton should not be Marshal.dump'ed)
    (ruby-dev#16411: block local var)
  - ruby-1.6.7-102.patch: applied a bug fix patch.
    (handling multibyte chars is partially broken)
  - ruby-1.6.7-103.patch: applied a bug fix patch.
    (ruby-dev#16462: preserve reference for GC, but link should be cut)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-10
changelog:
  - moved sitedir to /usr/lib/ruby/site_ruby again according as our perl and
    python.
  - ruby-1.6.7-resolv1.patch, ruby-1.6.7-resolv2.patch: applied to fix 'Too many
    open files - "/etc/resolv.conf"' issue. (Bug#64830)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-11
changelog:
  - use %configure macro instead of configure script.
  - use the latest config.{sub,guess}.
  - get archname from rbconfig.rb for %dir
  - applied some patches from Debian:
    - 801_extmk.rb-shellwords.patch: use Shellwords
    - 801_mkmf.rb-shellwords.patch: mkmf.rb creates bad Makefile. the Makefile
      links libruby.a to the target.
    - 803_sample-fix-shbang.patch: all sample codes should be
      s|/usr/local/bin|/usr/bin|g
    - 804_parse.y-new-bison.patch: fix syntax warning.
    - 805_uri-bugfix.patch: uri.rb could not handle correctly broken mailto-uri.
  - add ExcludeArch x86_64 temporarily to fix Bug#74581. Right now ruby can't be
    built on x86_64.


author: Elliot Lee <sopwith@redhat.com> 1.6.7-13
changelog:
  - Remove ExcludeArch: x86_64
  - Fix x86_64 ruby with long2int.patch (ruby was assuming that sizeof(long)
    == sizeof(int). The patch does not fix the source of the problem, just
    makes it a non-issue.)
  - _smp_mflags


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-1
changelog:
  - New upstream release.
  - removed some patches. it's no longer needed.
    - ruby-1.6.7-100.patch
    - ruby-1.6.7-101.patch
    - ruby-1.6.7-102.patch
    - ruby-1.6.7-103.patch
    - 801_extmk.rb-shellwords.patch
    - 801_mkmf.rb-shellwords.patch
    - 804_parse.y-new-bison.patch
    - 805_uri-bugfix.patch
    - ruby-1.6.6-900_XXX_strtod.patch
    - ruby-1.6.7-sux0rs.patch
    - ruby-1.6.7-libobj.patch


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-2
changelog:
  - ruby-1.6.8-require.patch: applied to fix the search bug in require.
  - don't apply long2int patch to s390 and s390x. it doesn't work.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-7
changelog:
  - fix the gcc warnings. (#82192)
  - ruby-1.6.8-fix-x86_64.patch: correct a patch.
    NOTE: DON'T USE THIS PATCH FOR BIG ENDIAN ARCHITECTURE.
  - ruby-1.6.7-long2int.patch: removed.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-9
changelog:
  - ruby-1.6.8-castnode.patch: handling the nodes with correct cast.
    use this patch now instead of ruby-1.6.8-fix-x86_64.patch.


author: Akira TAGOH <tagoh@redhat.com> 1.8.1-1
changelog:
  - New upstream release.
  - don't use any optimization for ia64 to avoid the build failure.
  - ruby-1.8.1-ia64-stack-limit.patch: applied to fix SystemStackError when the optimization is disabled.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-9
changelog:
  - ruby-1.8.1-cgi-dos.patch: security fix [CAN-2004-0983]
  - ruby-1.8.1-cgi_session_perms.patch: security fix [CAN-2004-0755]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-1
changelog:
  - New upstream release.
  - ruby-1.8.1-ia64-stack-limit.patch: removed - it's no longer needed.
  - ruby-1.8.1-cgi_session_perms.patch: likewise.
  - ruby-1.8.1-cgi-dos.patch: likewise.
  - generated Ruby interactive documentation - senarated package.
    it's now provided as ri package. (#141806)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-7
changelog:
  - ruby-1.8.2-deadcode.patch: removed the dead code from the source. (#146108)
  - make sure that all documentation files in ruby-docs are the world-
    readable. (#147279)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-9
changelog:
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: fixed the arbitrary command execution
    on XMLRPC server. (#161096)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-1
changelog:
  - New upstream release.
  - Build-Requires xorg-x11-devel instead of XFree86-devel.
  - ruby-multilib.patch: applied for only 64-bit archs.
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: removed. it has already been in upstream.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-3
changelog:
  - fixed the wrong file list. the external library for tcl/tk was included
    in ruby-libs unexpectedly.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-4
changelog:
  - moved the documents from ruby-libs to ruby-docs, which contains the arch
    specific thing and to be multilib support. (#168826)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-0.4.preview2
changelog:
  - updates to 1.8.4-preview2.
  - renamed the packages to ruby-* (#175765)
    - irb  -> ruby-irb
    - rdoc -> ruby-rdoc
    - ri   -> ruby-ri
  - added tcl-devel and tk-devel into BuildRequires.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-1
changelog:
  - New upstream release.
    - fixed a missing return statement. (#140833)
    - fixed an use of uninitialized variable. (#144890)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-3
changelog:
  - ruby-1.8.4-no-eaccess.patch: backported from ruby CVS to avoid conflict
    between newer glibc. (#179835)


author: Akira TAGOH <tagoh@redhat.com>
changelog:
  - ruby-rubyprefix.patch: moved all arch-independent modules under /usr/lib/ruby
    and keep arch-dependent modules under /usr/lib64/ruby for 64bit archs.
    so 'rubylibdir', 'sitelibdir' and 'sitedir' in Config::CONFIG points to
    the kind of /usr/lib/ruby now. (#184199)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-6
changelog:
  - ruby-deprecated-search-path.patch: added the deprecated installation paths
    to the search path for the backward compatibility.
  - added a Provides: ruby(abi) to ruby-libs.
  - ruby-1.8.4-64bit-pack.patch: backport patch from upstream to fix unpack("l")
    not working on 64bit arch and integer overflow on template "w". (#189350)
  - updated License tag to be more comfortable, and with a pointer to get more
    details, like Python package does. (#179933)
  - clean up.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-7
changelog:
  - exclude ppc64 to make ruby-mode package. right now emacs.ppc64 isn't provided
    and buildsys became much stricter.
  - ruby-deprecated-sitelib-search-path.patch: applied to add more search path
    for backward compatiblity.
  - added byacc to BuildReq. (#194161)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-11
changelog:
  - security fixes [CVE-2006-3694]
    - ruby-1.8.4-fix-insecure-dir-operation.patch:
    - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure
      operations in the certain safe-level restrictions. (#199538)
    - ruby-1.8.4-fix-alias-safe-level.patch: fixed to not bypass the certain
      safe-level restrictions. (#199543)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-1
changelog:
  - New upstream release.
  - removed the unnecessary patches:
    - ruby-1.8.4-no-eaccess.patch
    - ruby-1.8.4-64bit-pack.patch
    - ruby-1.8.4-fix-insecure-dir-operation.patch
    - ruby-1.8.4-fix-insecure-regexp-modification.patch
    - ruby-1.8.4-fix-alias-safe-level.patch
  - build with --enable-pthread except on ppc.
  - ruby-1.8.5-hash-memory-leak.patch: backported from CVS to fix a memory leak
    on Hash. [ruby-talk:211233]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-4
changelog:
  - security fix release.
  - ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that
    causes the denial of service. (#212396)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.36-3
changelog:
  - ruby-r12567.patch: backport patch from upstream svn to get rid of
    the unnecessary declarations. (#245446)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.110-1
changelog:
  - New upstream release.
    - ruby-r12567.patch: removed.
  - ruby-1.8.6-CVE-2007-5162.patch: security fix for Net::HTTP that is
    insufficient verification of SSL certificate.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.110-2
changelog:
  - Enable pthread support for ppc too. (#201452)
  - Fix unexpected dependencies appears in ruby-libs. (#253325)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.111-1
changelog:
  - New upstream release.
  - ruby-1.8.6.111-CVE-2007-5162.patch: Update a bit with backporting the changes
     at trunk to enable the fix without any modifications on the users' scripts.
     Note that Net::HTTP#enable_post_connection_check isn't available anymore.
     If you want to disable this post-check, you should give OpenSSL::SSL::VERIFY_NONE
     to Net::HTTP#verify_mode= instead of.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.111-3
changelog:
  - Clean up the spec file.
  - Remove ruby-man-1.4.6 stuff. this is entirely the out-dated document.
    this could be replaced by ri.
  - Disable the static library building.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.114-1
changelog:
  - Security fix for CVE-2008-1145.
  - Improve a spec file. (#226381)
    - Correct License tag.
    - Fix a timestamp issue.
    - Own a arch-specific directory.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.230-1
changelog:
  - New upstream release.
  - Security fixes. (#452295)
    - CVE-2008-1891: WEBrick CGI source disclosure.
    - CVE-2008-2662: Integer overflow in rb_str_buf_append().
    - CVE-2008-2663: Integer overflow in rb_ary_store().
    - CVE-2008-2664: Unsafe use of alloca in rb_str_format().
    - CVE-2008-2725: Integer overflow in rb_ary_splice().
    - CVE-2008-2726: Integer overflow in rb_ary_splice().
  - ruby-1.8.6.111-CVE-2007-5162.patch: removed.
  - Build ruby-mode package for all archtectures.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.230-3
changelog:
  - Backported from upstream SVN to fix a segfault issue. (#452825)
  - Backported from upstream SVN to fix an integer overflow in rb_ary_fill.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.287-1
changelog:
  - New upstream release.
  - Security fixes.
    - CVE-2008-3655: Ruby does not properly restrict access to critical
                     variables and methods at various safe levels.
    - CVE-2008-3656: DoS vulnerability in WEBrick.
    - CVE-2008-3657: Lack of taintness check in dl.
    - CVE-2008-1447: DNS spoofing vulnerability in resolv.rb.
    - CVE-2008-3443: Memory allocation failure in Ruby regex engine.
  - Remove the unnecessary backported patches.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.383-4
changelog:
  - Use bison to regenerate parse.c to keep the original format of error
    messages (bug 530275 comment 4)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.383-5
changelog:
  - Change mkmf.rb to use LIBRUBYARG_SHARED so that have_library() works
    without libruby-static.a (bug 428384)
  - And move libruby-static.a to -static subpackage


author: Jeroen van Meeuwen <j.van.meeuwen@ogd.nl> - 1.8.6.388-8
changelog:
  - Backport openssl/digest functions providing digest and hexdigest functions
    directly in OpenSSL::Digest.methods
  - Make sure that Red Hat people version their changelog entries
  - This is actually release #1, but now needs to be release #7


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-2
changelog:
  - tcltk: Give up using potentially unmaintained ruby_1_8_6 branch
    and instead completely replace with ruby_1_8 branch head
    (at this time, using rev 27738)
    (seems to fix 560053, 590503)
  - Fix Japanese encoding strings under ruby-tcltk/ext/tk/sample/


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-3
changelog:
  - ruby-1.8.x-null-class-must-be-Qnil.patch (bug 530407)
  - Recreate some patches using upstream svn when available, and
    add some comments for patches


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-4
changelog:
  - Patch36 (ruby-1.8.x-RHASH_SIZE-rb_hash_lookup-def.patch)
    also backport rb_hash_lookup definition (bug 592936)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-5
changelog:
  - Retry for bug 559158, Simplify the OpenSSL::Digest class
    pull more change commits from ruby_1_8 branch


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.249-3
changelog:
  - Integrated Jim Meyering's feedback and changes in to:
  - remove trailing blanks
  - placate rpmlint
  - ruby_* definitions: do not use trailing slashes in directory names
  - _normalized_cpu: simplify definition


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-1
changelog:
  - integrate more of jmeyering's and mtaska's feedback
  - removed emacs bits that are now shipped with the emacs package
  - various patch and spec cleanup
  - rebased to ruby 1.8.7 patch 299, removed patches no longer needed:
     ruby-1.8.7-openssl-1.0.patch, ruby-1.8.7-rb_gc_guard_ptr-optimization.patch


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-2
changelog:
  - readded bits to pull tk package from upstream source branch
  - removed unecessary .tk.old dir
  - renamed macros which may cause confusion, removed unused ones


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-3
changelog:
  - updated packaged based on feedback (from mtasaka)
  - added comments to all patches / sources
  - obsoleted ruby-mode, as it's now provided by the emacs package itself
  - readded missing documentation
  - various small compatability/regression fixes


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.7.299-4
changelog:
  - Cleanup spec file
  - Make -irb, -rdoc subpackage noarch
  - Make dependencies between arch-dependent subpackages isa specific
  - Improve sample documentation gathering


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.7.302-1
changelog:
  - Update to 1.8.7.302
  - CVE-2010-0541 (bug 587731) is fixed in this version
  - Update ext/tk to the latest head


author: Mamoru Tasaka <mtasaka@fedoraproject.org> - 1.8.7.352-1
changelog:
  - Update to 1.8.7 p352
  - CVE-2011-2686 is fixed in this version (bug 722415)
  - Update ext/tk to the latest git
  - Remove duplicate path entry (bug 718695)


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-2
changelog:
  - Install RubyGems outside of Ruby directory structure.
  - RubyGems has not its own -devel subpackage.
  - Enhanced macros.ruby and macros.rubygems.
  - All tests are green now (bkabrda).


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-4
changelog:
  - Bundled gems moved into dedicated directories and subpackages.
  - Create and own RubyGems directories for binary extensions.
  - Fix build with GCC 4.7.


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-5
changelog:
  - Initial release of Ruby 1.9.3.
  - Add rubygems dependency on io-console for user interactions.
  - Gems license clarification.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.286-19
changelog:
  - Update to 1.9.3 p286
  - Don't create files when NUL-containing path name is passed
    (bug 865940, CVE-2012-4522)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.327-21
changelog:
  - Update to 1.9.3.327
  - Fix Hash-flooding DoS vulnerability on MurmurHash function
    (CVE-2012-5371)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.374-27
changelog:
  - Update to 1.9.3 p374
  - Fix provided variables in pkgconfig (bug 789532:
    Vít Ondruch <vondruch@redhat.com>)


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-0.1.r39387
changelog:
  - Upgrade to Ruby 2.0.0 (r39387).
  - Introduce %gem_install macro.
  - Build against libdb instead of libdb4 (rhbz#894022).
  - Move native extensions from exts to ruby directory.
  - Enable most of the PPC test suite.
  - Change ruby(abi) -> ruby(release).
  - Rename ruby executable to ruby-mri, to be prepared for RubyPick.
  - Add ruby(runtime_executable) virtual provide, which is later used
    by RubyPick.
  - RDoc now depends on JSON.
  - Try to make -doc subpackage noarch again, since the new RDoc should resolve
    the arch dependent issues (https://github.com/rdoc/rdoc/issues/71).
  - Enable SystemTap support.
  - Add TapSet for Ruby.
  - Split Psych into rubygem-psych subpackage.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-1
changelog:
  - Update to Ruby 2.0.0-p0.
  - Change %{ruby_extdir} to %{ruby_extdir_mri} in preparation for better
    JRuby support.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-3
changelog:
  - Avoid "method redefined;" warnings due to modified operating_system.rb.
  - Fix strange paths created during build of binary gems.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-7
changelog:
  - Macro definition moved into macros.ruby and macros.rubygems files.
  - Added filtering macros.
  - Filter automatically generated provides of private libraries (rhbz#947408).


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.195-8
changelog:
  - Update to Ruby 2.0.0-p195 (rhbz#917374).
  - Fix object taint bypassing in DL and Fiddle (CVE-2013-2065).
  - Fix build against OpenSSL with enabled ECC curves.
  - Add aarch64 support (rhbz#926463).


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-9
changelog:
  - Update to Ruby 2.0.0-p247 (rhbz#979605).
  - Fix CVE-2013-4073.
  - Fix for wrong makefiles created by mkmf (rhbz#921650).
  - Add support for ABRT autoloading.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-13
changelog:
  - Fixes multilib conlicts of .gemspec files.
  - Make symlinks for psych gem to ruby stdlib dirs (rhbz#979133).
  - Use system-wide cert.pem.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-14
changelog:
  - Add forgotten psych.rb link into rubygem-psych to fix "private method `load'
    called for Psych:Moduler" error (rhbz#979133).


author: Vít Ondruch <vondruch@redhat.com> - 2.1.0-17
changelog:
  - Upgrade to Ruby 2.1.0.
  - Move RPM macros into /usr/lib/rpm/macros.d directory.
  - Allow MD5 in OpenSSL for tests.


author: Vít Ondruch <vondruch@redhat.com> - 2.1.0-18
changelog:
  - Don't generate documentation on unexpected places.
  - Detect if rubygems are running under rpmbuild and install gem binary
    extensions into appropriate place.
  - Add support for ppc64le arch (rhbz#1053263).
  - Re-enable some test cases, which are passing now with Kernel 3.12.8+.
  - Backport fix for floating point issues on i686.


author: Vít Ondruch <vondruch@redhat.com> - 2.1.1-20
changelog:
  - Remove useless exclude (rhbz#1065897).
  - Extract load macro into external file and include it.
  - Kill bundled certificates.


author: Vít Ondruch <vondruch@redhat.com> - 2.1.4-24
changelog:
  - Update to Ruby 2.1.4.
  - Include only vendor directories, not their content (rhbz#1114071).
  - Fix "invalid regex" warning for non-rubygem packages (rhbz#1154067).
  - Use load macro introduced in RPM 4.12.


author: Vít Ondruch <vondruch@redhat.com> - 2.2.0-1
changelog:
  - Upgrade to Ruby 2.2.0.
  - Explicitly list RubyGems directories to avoid accidentaly packaged content.
  - Split test-unit and power_assert gems into separate sub-packages.
  - Drop libdb dependency in favor of gdbm.


author: Vít Ondruch <vondruch@redhat.com> - 2.2.2-40
changelog:
  - Fix upgrade path (rubygem-io-console's version was recently bumped in F21
    and makes the higher release to win).


author: Vít Ondruch <vondruch@redhat.com> - 2.3.0-50
changelog:
  - Upgrade to Ruby 2.3.0.
  - Move gemified net-telnet into subpackage.
  - Add did_you_mean subpackage.
  - Add virtual provides for CCAN copylibs.
  - Use weak dependencies.


author: Vít Ondruch <vondruch@redhat.com> - 2.3.1-59
changelog:
  - Continue to use OpenSSL 1.0 for the moment.
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Harden package.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.0-70
changelog:
  - Upgrade to Ruby 2.4.0.
  - Move gemified xmlrpc into subpackage.
  - Move gemified openssl into subpackage.
  - Tk is removed from stdlib.
  - Extend 'gem_' macros for pre-release version support.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.1-83
changelog:
  - Fix "IOError: stream closed" errors affecting Puma.
  - Temporary disable checksec on PPC64LE (rhbz#1479302).


author: Vít Ondruch <vondruch@redhat.com> - 2.5.0-89
changelog:
  - Drop obsolete ldconfig scriptlets.
  - Add GMP dependency.
  - Use 'with' operator in RPM dependency generator.
  - Add conflicts RPM generator.
  - Fix thread_safe test suite segfaults.
  - Fix invalid licenses.


author: Pavel Valena <pvalena@redhat.com> - 2.5.0-89
changelog:
  - Fix: Multiple vulnerabilities in RubyGems
    https://bugzilla.redhat.com/show_bug.cgi?id=1547431
    https://www.ruby-lang.org/en/news/2018/02/17/multiple-vulnerabilities-in-rubygems/


author: Florian Weimer <fweimer@redhat.com> - 2.5.0-89
changelog:
  - Rebuild with new LDFLAGS from redhat-rpm-config
  - Use --with-setjmp-type=setjmp on aarch64 to work around gcc issue (#1545239)


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-92
changelog:
  - Conflict requirement needs to generate dependency.
  - Stop using --with-setjmp-type=setjmp on aarch64 (rhbz#1545239).


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-97
changelog:
  - Fix TLS 1.3 issues.
    * ruby-2.6.0-fix-test-failure-with-TLS-1.3.patch
    * ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with-TLS-1.3.patch
    Related: rhbz#1616213


author: Jun Aruga <jaruga@redhat.com> - 2.5.1-99
changelog:
  - Fix generated rdoc template issues.
    * ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch
    Resolves: rhbz#1612026


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-99
changelog:
  - Additional OpenSSL 1.1.1 fixes.
    * ruby-2.6.0-fix-test-failure-with-TLS-1.3-maint.patch
    * ruby-2.6.0-config-support-include-directive.patch
    * ruby-2.6.0-use-larger-keys-for-SSL-tests.patch
    Related: rhbz#1616213


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-100
changelog:
  - Properly harden package using -fstack-protector-strong.
    * ruby-2.6.0-configure-fstack-protector-strong.patch
    Resolves: rhbz#1624168


author: Vít Ondruch <vondruch@redhat.com> - 2.5.5-104
changelog:
  - Update to Ruby 2.5.5.
    * Remove Patch25: ruby-2.6.0-Update-for-tzdata-2018f.patch; subsumed
    * Remove Patch11: ruby-2.6.0-Try-to-update-cert.patch; subsumed
    * Remove Patch19: ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with
        -TLS-1.3.patch; subsumed
    Resolves: rhbz#1688758
  - Don't ship .stp files when SystemTap support is disabled.
    Related: rhbz#1657915
  - Fix CovScan issues.
    Resolves: rhbz#1628592


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-105
changelog:
  - Update to Ruby 2.6.3 by merging Fedora master branch (commit: 1cc2a49)
    * Properly generate "ruby(rubygems)" versioned dependencies.
    * Extract composition of dependecy strings into helper.
    * Loosen RDoc dependency.
    * Upstream fix adding -C flag instead of changing directory for gem build.
    * Remove obsolete Group tag
    * Fix ".include =" support in openssl.cnf.
    * Link IRB back to StdLib.
    * Link IRB files instead of directories.
    * Exclude irb.rb from ruby-libs.
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-106
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 2.7.1-132
changelog:
  - Update to Ruby 2.7.1 by merging Fedora master branch (commit: 2981648)
    * Skip unstable tests on s390x.
    * Skip JIT tests in RHEL 8.
    Resolves: rhbz#1817135


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-4
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-68632
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Pavel Valena <pvalena@redhat.com> - 2.5.9-107
changelog:
  - Update to Ruby 2.5.9.
    * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
    Resolves: rhbz#1757844
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1950308


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-108
changelog:
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810


author: Jun Aruga <jaruga@redhat.com> - 2.5.9-110
changelog:
  - Fix FTBFS due to an incompatible load directive.
  - Fix a fiddle import test on an optimized glibc on Power 9.
  - Fix by adding length limit option for methods that parses date strings.
    Resolves: CVE-2021-41817
  - CGI::Cookie.parse no longer decodes cookie names to prevent spoofing security
    prefixes in cookie names.
    Resolves: CVE-2021-41819


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-111
changelog:
  - Fix HTTP response splitting in CGI.
    Resolves: CVE-2021-33621
  - Fix Buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739
  - Fix ReDoS vulnerability in URI.
    Resolves: CVE-2023-28755
  - Fix ReDoS vulnerability in Time.
    Resolves: CVE-2023-28756


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-112
changelog:
  - Fix ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755.
    (CVE-2023-36617)
    Resolves: RHEL-5614
  - Fix Buffer overread vulnerability in StringIO.
    (CVE-2024-27280)
    Resolves: RHEL-34125
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    (CVE-2024-27281)
    Resolves: RHEL-34117
  - Fix Arbitrary memory address read vulnerability with Regex search.
    (CVE-2024-27282)
    Resolves: RHEL-33867
  - Fix REXML DoS parsing an XML with many `<`s in an attribute value.
    (CVE-2024-35176)
    Resolves: RHEL-37877


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 2.5.9-113.0.1
changelog:
  - Fix FTBFS due to glibc 2.31.9000 implementing lchmod(2), compatible with glibc2.28 also
    * Patch: ruby-2.8.0-Brace-the-fact-that-lchmod-can-EOPNOTSUPP.patch
    * Patch: ruby-2.8.0-Moved-not-implemented-method-tests.patch
  - Avoid possible timeout errors in TestBugReporter#test_bug_reporter_add.
    * Patch: ruby-2.7.1-Timeout-the-test_bug_reporter_add-witout-raising-err.patch


author: Jun Aruga <jaruga@redhat.com> - 2.5.5-105
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1688758
  - Fix rdoc gzipped javascript pages are not the same across multilib.
    Resolves: rhbz#1719647


author: Vít Ondruch <vondruch@redhat.com> - 2.5.9-114
changelog:
  - Fix integer overflow in search_in_range function in regexec.c (CVE-2019-19012).
    Resolves: RHEL-87505


author: Jarek Prokop <jprokop@redhat.com> - 2.6.7-107
changelog:
  - Upgrade to Ruby 2.6.7.
    Resolves: rhbz#1757846
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address
    containing leading zero
    Resolves: rhbz#1950307
  - Fix: Rubygem-bundler: Don't use insecure tmp directory as home
    allows for execution of malicious code.
    Resolves: CVE-2019-3881


author: Jun Aruga <jaruga@redhat.com> - 2.6.9-108
changelog:
  - Upgrade to Ruby 2.6.9.
  - Skip JIT tests in RHEL 8.
  - Fix the issues required to start the "make test-bundler" itself.
  - Fix Bundler dependency confusion.
    Resolves: CVE-2020-36327


author: Vít Ondruch <vondruch@redhat.com> - 2.6.10-109
changelog:
  - Upgrade to Ruby 2.6.10.
    Resolves: rhbz#2088415
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739
  - Fix FTBFS due to an incompatible load directive.
  - Fix a fiddle import test on an optimized glibc on Power 9.


author: Jun Aruga <jaruga@redhat.com> - 2.7.4-137
changelog:
  - Upgrade to Ruby 2.7.4.
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810
  - Fix StartTLS stripping vulnerability in Net::IMAP.
    Resolves: CVE-2021-32066
  - Upgrade to Bundler 2.2.24.
    Resolves: CVE-2020-36327


author: Jarek Prokop <jprokop@redhat.com> - 2.7.6-138
changelog:
  - Upgrade to Ruby 2.7.6.
    Resolves: rhbz#2109424
  - Fix FTBFS due to an incompatible load directive.
    Related: rhbz#2109424
  - Fix a fiddle import test on an optimized glibc on Power 9.
    Related: rhbz#2109424
  - Fix regular Expression Denial of Service Vulnerability of Date Parsing Methods.
    Resolves: CVE-2021-41817
  - Fix cookie prefix spoofing in CGI::Cookie.parse.
    Resolves: CVE-2021-41819
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jarek Prokop <jprokop@redhat.com> - 3.0.4-141
changelog:
  - Upgrade to Ruby 3.0.4.
    Resolves: rhbz#2096346
    Resolves: rhbz#2000056
  - Fix double free in Regexp compilation.
    Resolves: CVE-2022-28738
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jun Aruga <jaruga@redhat.com> - 3.0.7-142
changelog:
  - Upgrade to Ruby 3.0.7.
    Resolves: RHEL-36189
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-36193
  - Fix ReDoS vulnerability in URI.
    Resolves: RHEL-36196
  - Fix ReDoS vulnerability in Time.
    Resolves: RHEL-36205
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-36198
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-36200
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-36203


author: Jun Aruga <jaruga@redhat.com> - 0.5.2-1
changelog:
  - New upstream release 0.5.2 by merging Fedora master branch (commit: cc15309)
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-1
changelog:
  - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
    Resolves: rhbz#1817135


author: Jarek Prokop <jprokop@redhat.com> 0.5.3-2
changelog:
  - Update by merging Fedora rawhide branch (commit: 81e2cc9)
  - Fix Mysql2::Result test for Ruby 3.1.
  - Remove gem_make.out and mkmf.log files from the binary RPM package.
  - Fix test assertion for mariadb-connector-c.
    Related: rhbz#2063772


author: lihaipeng <lihaipeng@openanolis.org> - 1.0.0-3.0.1
changelog:
  - Changed the way how/when parameters are interpret
  - Reference https://github.com/ged/ruby-pg/commit/73cd5e158ba4af73243c22f8918b1754256db17b


author: Jun Aruga <jaruga@redhat.com> - 1.1.4-1
changelog:
  - Update to pg 1.1.4 by merging Fedora master branch (commit: 397796e)
    * BuildRequires: s/postgresql-devel/libpq-devel/
    * Add marking lines at the start and end of the setup.log
    Resolves: rhbz#1672575


author: Dan Walsh <dwalsh@redhat.name> - 2:1.0.0-46.dev.gitb4e2ecb
changelog:
  - Add patch https://github.com/opencontainers/runc/pull/1807 to allow
  - runc and podman to work with sd_notify


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-55.rc5.dev.git2abd837
changelog:
  - Resolves: #1665770 - rootfs: umount all procfs and sysfs with --no-pivot
  - Resolves: CVE-2019-5736


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-68.rc92
changelog:
  - update to https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-73.rc95
changelog:
  - fix podman run --pid=host command causes OCI permission error
  - rc95 fixes CVE-2021-30465
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.12-1
changelog:
  - update to https://github.com/opencontainers/runc/releases/tag/v1.1.12
  - fixes CVE-2024-21626
  - Resolves: RHEL-23587


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.10-1
changelog:
  - update to https://github.com/opencontainers/runc/releases/tag/v1.1.10
  - require container-selinux >= 2.224.0 for dmz feature
  - Related: Jira:RHEL-2110


author: Matej Habrnal <mhabrnal@redhat.com> 0.21-1
changelog:
  - New upstream version
    - Introduce 'serial' field in uReport
    - normalization: actualize list of functions


author: Jakub Filak <jakub@thefilaks.net> 0.22-1
changelog:
  - New upstream version
    - Added support fof JavaScript (V8) stack traces
    - Most parts of the in-hook core unwinder callable under unprivileged user
    - GDB core unwinder limits number of unwound frames
    - Fixed a pair of compile warnings - Chris Redmon <credmonster@gmail.com>


author: Matej Habrnal <mhabrnal@redhat.com> 0.23-1
changelog:
  - New upstream version
    - Allow rpm to be optional at build time
    - Do not use deprecated fedorahosted.org


author: Julius Milan <jmilan@redhat.com> 0.24-1
changelog:
  - New upstream version
    - Allow to report unpackaged problems
    - apidoc: generate html docs using doxygen
    - Fix parsing of subset of arm kernel oopses


author: Martin Kutlak <mkutlak@redhat.com> 0.25-1
changelog:
  - New upstream version
   - Normalization: actualize list of functions
   - Fix some compilation warnings
   - Allow to build python3 for rhel8
   - Makefile: add make release-* subcommands
   - Elfutils: Add missing stubs from earlier commit


author: Matej Habrnal <mhabrnal@redhat.com> 0.26-1
changelog:
  - spec: fix Allow python2 to be optional at build time
  - Allow python2 to be optional at build time
  - normalization: actualize list of functions
  - Append Python interpreter as related package
  - makefile: create .tar.xz with make release


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-1
changelog:
  - rebase to upstream v1.4.2
  - make sbd default to do pacemakerd-api handshake
  - conflict with pacemaker-libs < 2.0.5-4 to assure pacemaker
    is defaulting to pacemakerd-api handshake

    Resolves: rhbz#1903730
    Resolves: rhbz#1873135


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-3
changelog:
  - change the default for SBD_WATCHDOG_TIMEOUT to 10s
    s390(x) stays at 15s as before

    Resolves: rhbz#1922143


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - reverted watchdog_timeout_default to 5s
    (slipped in via an unreleased change on 8.4.0 branch)

    Resolves: rhbz#1980797


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management

    Resolves: rhbz#2168567


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-2
changelog:
  - add required tests subdirectory in addition to gating.yaml
    that had already been brought over before

    Related: rhbz#2168567


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-10
changelog:
  - Fix docdir patch (patch Makefile.am, not Makefile.in)
  - Use correct short name for Eclipse Public License 1.0
  - Use %license
  - Add explicit dependencies for libraries in Makefile.am (fixes FTBFS)
    Resolves: #1606302


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions
    Resolves: #1776670


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.9-24
changelog:
  - Fix important coverity issues
    Resolves: #1989603
  - Fix incorrect use of temporary paths
    Resolves: #1989605


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.5.0-1
changelog:
  - Update to latest upstream version
  - Change license to Eclipse Public License 1.0
  - Use %license
  - Fix URL


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-10
changelog:
  - Fix null pointer (DoS) vulnerability via POST request to /cimom (CVE-2018-6644)
    (patch by Adam Majer)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-16
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Remove %defattr
    Resolves: #1638007


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-9
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Fix license tag
    Resolves: #1638015


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-2
changelog:
  - Optimize get_rpm_nvr_by_type by adding a cache (#1794807)
  - Stop building seappletlegacy (#1878792)
  - Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-1
changelog:
  - Revert "Replace pydbus with dasbus"
  - Fix typos in --help, man pages and developer's guide (#2028226)
  - Do not use Python slip package
  - Stop SetroubleshootFixit after 10 seconds of inactivity
  - Fix plugin exception reporting
  - export alert dbus signal
  - Make sure local_policy_package is not None
  - sealert: add "Last Seen" column to alert list


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-4
changelog:
  - Decrease setroubleshootd priority and limit RAM utilization to 1GB (#2064727)
  - doc: Document performance related changes


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-6
changelog:
  - Fix shebang of SetroubleshootPrivileged.py (#2231023)
  - Check that SELinux is enabled before running (#2178950)


author: Petr Pisar <ppisar@redhat.com> - 4.15.2-10
changelog:
  - License corrected to "GPLv3+ and (GPLv3+ and BSD) and (LGPLv3+ or BSD) and
    LGPLv2+ and Public Domain and GFDL"


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.31-7.git0144aa8
changelog:
  - build with %gobuild
  - use scl-ized go-toolset as dep
  - disable i686 builds temporarily because of go-toolset issues


author: Eduardo Santiago <santiago@redhat.com> - 1:0.1.41-3
changelog:
  - patch broken gating tests: improper 'jq' usage, and use 'registry:2.6'
    (instead of :2) to work around broken image pushed by docker


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-9
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/a05ddb8)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-10
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/6c0e35a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-11
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/b4210c0)
  - Resolves: #1914884


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-12
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/3abb778)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/e72dd9c)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-10
changelog:
  - update shortnames from Pyxis
  - sync with the vendored versions in 3.0-8.5.0
  - bump release to assure upgrade path from 3.0-8.4.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/9921983)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/7300333)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/540efb3)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/4336972)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/4414e52)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-4
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/f952195)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-5
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/c20c32d)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/2b16a1c)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-8
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179946
  - Resolves: #2187316
  - Resolves: #2187362
  - Resolves: #2203679
  - Resolves: #2207508


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-2
changelog:
  - CVE 2021-3480:  idm:DL1/slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
  - Resolves: rhbz#1944713


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-3
changelog:
  - Resolves: rhbz#1958909 - fix regression for scoped searches in compat tree
  - Resolves: rhbz#1978189 - better handle error response from libsss_nss_idmap


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - upstream release 0.60.0
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Resolves: rhbz#1984010
    Fix ID views integration
  - Fix base scope lookups
  - Resolves: rhbz#1784172
    Bump NIS max dgram size to 8KB by default instead of 1KB
  - Resolves: rhbz#2070575
    Allow to rebuild the compat tree


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog
  - Resolves: RHEL-11984


author: Jindrich Novy <jnovy@redhat.com> - 0.4.0-1
changelog:
  - update to v.0.4.0
  - sync with fedora spec
  - drop applied CVE-2019-14378 patch
  - Resolves: #1766774


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.2
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.3
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.4-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.4
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.6-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.6
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.7-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.8-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.1
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1.2.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 1.2.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
  - Related: Jira:RHEL-2110


author: Paul Wouters <pwouters@redhat.com> - 1.7.4.1-1
changelog:
  - Resolves: rhbz#1805132 socat does not recognize IP addresses of the SAN extensions in ssl mode
  - Resolves: rhbz#1870279 Transfer via socat fails with openssl enabled
  - Resolves: rhbz#1914989 Socat udp4-recvfrom cause endless loop error when target is not vaild


author: Paul Wouters <paul@xelerance.com> 1.5.0.0-4
changelog:
  - Some filesystem defines moved from their specific (ext2)
    filesystem defines into the generic <linux/fs.h>.


author: Caolán McNamara <caolanm@redhat.com> - 1.7.1.1-5
changelog:
  - recreate autoconf to get correct includes when determining type
    sizes in order to build correctly


author: Paul Wouters <paul@xelerance.com> - 1.7.1.2-1
changelog:
  - Upgraded to 1.7.1.2
  - Link against compat-readline5 for GPLv2 license (Miroslav Lichvar)
    (bz #511310)


author: Paul Wouters <paul@xelerance.com> - 1.7.1.3-1
changelog:
  - Upgrade to 1.7.1.3
  - Includes fix for CVE-2010-2799 Stack overflow by lexical scanning of nested
    character patterns
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=620430


author: Paul Wouters <paul@nohats.ca> - 1.7.2.0-1
changelog:
  - Upgraded to 1.7.2.0 which allows tun/tap interfaces without IP address
    and introduces options openssl-compress and max-children.


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.1-1
changelog:
  - Updated to 1.7.2.1 for CVE-2012-0219, rhbz#821553, rhbz#821688
  - Remove patch merged upstream
  - Remove --disable-fips from configure


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.2-2
changelog:
  - Added two patches that fixes some -Wformat warnings. these fix 2 of 3
    failing test cases from test.sh
  - Enabled hardening with full relro/pie
  - Switch from readline5 to readline(6)


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.4-1
changelog:
  - Updated to 1.7.2.4 which contains many bugfixes
  - Run tests in make check
  - Add build dependancies for make test


author: Paul Wouters <pwouters@redhat.com> - 1.7.3.2-1
changelog:
  - Resolves rhbz#1404290 socat build failure on rawhide
  - Resolves rhbz#1416597 socat-1.7.3.2 is available
  - Resolves rhbz#1417483 Failed DNS resolution causes SIGSEGV and endless loop
  - Removed obsoleted patch


author: Andreas Schneider <asn@redhat.com> - 1.1.8-1
changelog:
  - Update to version 1.1.8
    * Added support for openat()
    * Added support for open64() and fopen64()
    * Always enabled logging support
    * Increased maximum for wrapped interfaces to 64
    * Improved fd duplication code
    * Fixed strict-aliasing issues
    * Fixed some use after free issues
    * Fixed issues on ppc64le


author: Andreas Schneider <asn@redhat.com> - 1.2.0-1
changelog:
  - Update to vesrion 1.2.0
    * Added threading support
    * Moved to modern cmake
    * Several smaller bugfixes


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-1
changelog:
  - Fixes: rhbz#1818877 - rebase to softhsm 2.6.0+
  - Fixes: rhbz#1701233 - support setting supported signature methods on the token


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-3
changelog:
  - Fixes: rhbz#1834909 - softhsm use-after-free on process exit
  - Synchronize the final fix with Fedora


author: Hans de Goede <hdegoede@redhat.com> - 2.0.0-6
changelog:
  - The last round of security fixes also fixes CVE-2018-14044, CVE-2018-14045
    (rhbz#1601618, rhbz#1601620, rhbz#1601624, rhbz#1601625)


author: Sérgio Basto <sergio@serjux.com> - 2.1.1-1
changelog:
  - Update to 2.1.1
    Bugfixes: Fixed potential buffer overwrite bugs in WavFile routines. Replaced asserts with runtime exceptions.
    Android: Migrated the SoundTouch Android example to new Android Studio
    Automake: unset ACLOCAL in bootstrap script to avoid error in case earlier build script has set it


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-10
changelog:
  - Fixed CVE-2018-11805
  - Resolves: rhbz#1787514
  - Fixed CVE-2020-1930
  - Resolves: rhbz#1820649
  - Fixed CVE-2020-1931
  - Resolves: rhbz#1820650


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2.0-1
changelog:
  - update to 1.2.0
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - include soname in file list
  - use license macro


author: Uri Lublin <uril@redhat.com> - 0.21.0-2
changelog:
  - Build without pciaccess
    Resolves: rhbz#1964922
  - Fix g_memdup deprecation warning with glib >= 2.68


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-8
changelog:
  - Resolves: RHEL-18351 - squid:4/squid: Buffer over-read in the HTTP Message
    processing feature (CVE-2023-49285)
  - Resolves: RHEL-18342 - squid:4/squid: Incorrect Check of Function Return
    Value In Helper Process management (CVE-2023-49286)
  - Resolves: RHEL-18230 - squid:4/squid: Denial of Service in SSL Certificate
    validation (CVE-2023-46724)
  - Resolves: RHEL-15911 - squid:4/squid: NULL pointer dereference in the gopher
    protocol code (CVE-2023-46728)
  - Resolves: RHEL-18251 - squid crashes in assertion when a parent peer exists
  - Resolves: RHEL-14794 - squid: squid multiple issues in HTTP response caching
    (CVE-2023-5824)
  - Resolves: RHEL-14803 - squid: squid: Denial of Service in HTTP Digest
    Authentication (CVE-2023-46847)
  - Resolves: RHEL-14777 - squid: squid: Request/Response smuggling in HTTP/1.1
    and ICAP (CVE-2023-46846)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-9
changelog:
  - Resolves: RHEL-19552 - squid:4/squid: denial of service in HTTP request 
    parsing (CVE-2023-50269)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-10
changelog:
  - Resolves: RHEL-28529 - squid:4/squid: Denial of Service in HTTP Chunked
    Decoding (CVE-2024-25111)
  - Resolves: RHEL-26088 - squid:4/squid: denial of service in HTTP header
    parser (CVE-2024-25617)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-10.1
changelog:
  - Resolves: RHEL-56024 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-10.2
changelog:
  - Disable ESI support
  - Resolves: RHEL-65075 - CVE-2024-45802 squid:4/squid: Denial of Service
    processing ESI response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-10.3
changelog:
  - Resolves: RHEL-22593 - CVE-2024-23638 squid:4/squid: vulnerable to
    a Denial of Service attack against Cache Manager error responses


author: Fernando Pacheco <fpacheco@redhat.com> - 1.16-1
changelog:
  - stald/utils: Space, lines and voids clenaups
  - stalld: Add an option to easily set stalld as SCHED_DEADLINE
  - stalld: Comments cleanup
  - src/utils: Comments cleanup
  - src/throttling: Comments cleanup
  - src/stalld.h Comments cleanup
    Resolves: rhbz#2068549


author: Leah Leshchinsky <lleshchi@redhat.com> - 1.17.1-1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  Resolves: rhbz#2120800


author: Dennis Keefe <dkeefe@redhat.com> - 2.0.0-4
changelog:
  - Update to 2.0.0
  - Resolves: rhbz#1760906
  - Fix a bug where last update time for variable length metadata was not set
    properly on startup:
  - Resolves: rhbz#1720399
  - Specify path of PID file as "/run/stratisd.pid" instead of 
    "/var/run/stratisd.pid".
  - Resolves: rhbz#1754649
  - For a particular log entry, reduce log level from INFO to DEBUG and make the
    log message more detailed:
  - Resolves: rhbz#1680052


author: Dennis Keefe <dkeefe@redhat.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Resolves: rhbz#1791473
  - Update Stratis RPM Spec File
  - Resolves: rhbz#1828487
  - Support per-pool encryption of the devices that form a pool's data tier
  - Resolves: rhbz#1768580
  - Improve systemd unit file description
  - Resolves: rhbz#1756525


author: Dennis Keefe <dkeefe@redhat.com> - 2.3.0-2
changelog:
  - Update to 2.3.0
  - Resolves: rhbz#1885328
  - Stratis devices inhabit an existing root directory path
  - Resolves: rhbz#1798244
  - Add Clevis Support
  - Resolves: rhbz#1868100
  - Improve stratisd log levels
  - Resolves: rhbz#1757976


author: Bryan Gurney <bgurney@redhat.com> - 2.4.0-3
changelog:
  - Update to 2.4.0
  - Resolves: rhbz#1931671
  - Improve stratis by adding Multi-threading
  - Resolves: rhbz#1927485
  - Dump stratis configuration on demand or in debug
  - Resolves: rhbz#1735475
  - Add noalign option to XFS creation on MDV
  - Resolves: rhbz#1908318
  - Cap thinpool metadata device size at devicemapper-set limit
  - Resolves: rhbz#1707461


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1931671
  - Ensure that binaries are installed with proper features enabled
  - Split dracut modules out to subpackage
  - Add additional dependencies in dracut module


author: John Kacur <jkacur@redhat.com> - 0.15.00-1
changelog:
  - Rebase to upstream V0.15.00
  - Add the following upstream patches
  - stress-shm: move /dev/shm check to earlier in the setup phase
  - stress-shm: skip stressor if /dev/shm is not mounted with tmpfs on linux
  - stress-sysfs: check for zero sysfs entries after pruning the directory
  Resolves: rhbz#2144070


author: John Kacur <jkacur@redhat.com> - 0.17.08-1
changelog:
  - Rebase to upstream V0.17.08
  - ARM: Don't declare inlined yield helper if yield is not available
  Resolves: RHEL-33304


author: Michael Catanzaro <mcatanzaro@redhat.com> - 3.28.3-3
changelog:
  - Use autosetup so WebKitGTK patch actually gets applied, and rewrite the patch to work
    Resolves: RHEL-26699


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.0-2.20200828git0c238a2
changelog:
  - Backport fixes from 0.4.0 stable branch. Resolves: rhbz#1868375
    (fixes usage of swtpm-localca with passwords when signing keys)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.2-1.20201201git2df14e3
changelog:
  - Update to 0.4.2, to address potential symlink vulnerabilities (CVE-2020-28407).
    Resolves: rhbz#1906043


author: <msekleta@redhat.com> - 11.7.3-7
changelog:
  - Don't trigger autofs mounts when running sadc (#2000910)
  - sar: Add missing %gnice CPU value for tickless CPU (#2000916)
  - sadf: Fix seg fault on empty data files (#1910841)
  - sar: Fix typo in manual page (#1877836)


author: Pavel Šimovec <psimovec@redhat.com> - 11.7.3-11
changelog:
  - fix the arithmetic overflow in allocate_structures() that is still possible on some 32 bit systems (CVE-2023-33204)


author: Lukáš Zaoral <lzaoral@redhat.com> - 11.7.3-13
changelog:
  - fix memory allocation errors with malformed sa files (RHEL-35511)
  - reorder patches to prevent errors during their application


author: Stan Cox <scox@redhat.com> - 4.7-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 4.8-2
changelog:
  - rhbz2156092 = rhbz1997192
  - rhbz2145241 = rhbz2145242
  - rhbz2156093 = rhbz2149223
  - rhbz2156095 = rhbz2149666
  - rhbz2156094 = rhbz2154430


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-4
changelog:
  - Removing build-time dependency on sharutils(rhbz#1587877)
  - Changing git dependency to smaller git-core


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-6
changelog:
  - Resolves: #1715423 - tcpdump pre creates user and groups unconditionally
  - Resolves: #1655622 - CVE-2018-19519 Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.3-2
changelog:
  - Resolves: #1860216 - tcpdump can not parse mptcp options
  - Resolves: #1901635 - ppp decapsulator can be convinced to allocate a large amount of memory
  - Adding tedude test to gating


author: Hangbo Fan <fanhangbo.fhb@alibaba-inc.com> - 14:4.9.3-5.0.1
changelog:
  - Add doc sub package
  - cherry-pick `add sw patch #199f8102fc30b385b28c16494d2a683ecd265166`.(nijie@wuxiat.com)


author: Jan Macku <jamacku@redhat.com> - 6.22.03-1
changelog:
  - Update to tcsh-6.22.03
  - Drop tcsh-6.22.02-avoid-gcc-to-fail.patch                              - applied by upstream
  - Drop tcsh-6.22.02-call-seterror-consistently-and-abort-quickly.patch   - applied by upstream
  - Drop tcsh-6.22.02-avoid-crashing-when-loading-corrupted-history.patch  - applied by upstream


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-69
changelog:
  - Resolves: #1445259 - telnet won't build with latest gcc
  - added note about address resolution in manpage


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-73
changelog:
  - Resolves: #1602711 - Please review important issues found by covscan
  - Resolves: #1637085 - Option -i is missing in telnet in el8 but is available in el7


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 9:20200406-26.0.1
changelog:
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 build
  - anolis texlive add loongarch64(Yaxuan Liu)


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-25
changelog:
  - Fix inconsistent --map-file option spelling in manual (rhbz#2066853)
  - Fix memory corruption in tftpd when filename remapping with macro \x
    is used (rhbz#2066862)


author: Weitao Zhou <zhouwt@linux.alibaba.com> 5.2-27.0.1
changelog:
  - Make configure an order-only prerequisite of aconfig.h.in
  - remove autoreconf in %build to fix parallel build error
  - use extern in header files when declaring global variables for compatible gcc10 build
  - Add doc sub package


author: Martin Stransky <stransky@redhat.com> - 60.7.2-3
changelog:
  - Rebuild to fix rhbz#1725919 - Thunderbird fails to authenticate
    with gmail with ssl/tls and OAuth2.


author: Tomas Popela <tpopela@redhat.com> - 78.12.0-3
changelog:
  - Add script to process the official tarball to comply with PELC review
  - Fix the build with newer glibc


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-7
changelog:
  - Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
    Resolves: RHEL-20388
  - Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
    Resolves: RHEL-20382
  - Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
    Resolves: RHEL-20530
  - Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
    Resolves: RHEL-21214


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-9
changelog:
  - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
    Resolves: RHEL-30755
  - Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
    Resolves: RHEL-30767
  - Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
    Resolves: RHEL-30761


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-10
changelog:
  - Drop patches that are already part of xorg-x11-server
    Resolves: RHEL-30755
    Resolves: RHEL-30767
    Resolves: RHEL-30761


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-14
changelog:
  - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability
    Resolves: RHEL-61999


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-15
changelog:
  - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor
    Resolves: RHEL-79397
  - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
    Resolves: RHEL-79401
  - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
    Resolves: RHEL-79386
  - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
    Resolves: RHEL-79380
  - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
    Resolves: RHEL-79369
  - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
    Resolves: RHEL-79364
  - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()
    Resolves: RHEL-79360
  - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger()
    Resolves: RHEL-79348


author: Adam Tkac <atkac redhat com> 0.0.90-0.4.20090403svn3751
changelog:
  - update to r3751
  - patches merged
    - tigervnc-xclients.patch
    - tigervnc-clipboard.patch
    - tigervnc-rh212985.patch
  - basic RandR support in Xvnc (resize of the desktop)
  - use built-in libjpeg (SSE2/MMX accelerated encoding on x86 platform)
  - use Tight encoding by default
  - use TigerVNC icons


author: Adam Tkac <atkac redhat com> 0.0.90-0.6.20090427svn3789
changelog:
  - update to r3789
    - tigervnc-rh494801.patch merged
  - tigervnc-newfbsize.patch is no longer needed
  - fix problems when vncviewer and Xvnc run on different endianess (#496653)
  - UltraVNC and TightVNC clients work fine again (#496786)


author: Adam Tkac <atkac redhat com> 0.0.90-0.10
changelog:
  - rebuild against 1.6.1.901 X server (#497835)
  - disable i18n, vncviewer is not UTF-8 compatible (#501832)


author: Adam Tkac <atkac redhat com> 0.0.91-0.11
changelog:
  - update to 0.0.91 (1.0.0 RC1)
  - patches merged
    - tigervnc10-rh499401.patch
    - tigervnc10-rh497592.patch
    - tigervnc10-rh501832.patch
  - after discusion in upstream drop tigervnc-bounds.patch
  - configure flags cleanup


author: Adam Tkac <atkac redhat com> 0.0.91-0.13
changelog:
  - temporary use F11 Xserver base to make Xvnc compilable
  - BuildRequires: libXi-devel
  - don't ship tigervnc-server-module on s390/s390x


author: Adam Tkac <atkac redhat com> 1.0.0-2
changelog:
  - update underlying X source to 1.6.4-0.3.fc11
  - remove bogus '-nohttpd' parameter from /etc/sysconfig/vncservers (#525629)
  - initscript LSB compliance fixes (#523974)
  - improve -LowColorSwitch documentation and handling (#510185)
  - honor dotWhenNoCursor option (and it's changes) every time (#524340)


author: Adam Tkac <atkac redhat com> 1.0.90-0.1.20091221svn3929
changelog:
  - update to 1.0.90 snapshot
  - patches merged
    - tigervnc10-compat.patch
    - tigervnc10-rh510185.patch
    - tigervnc10-rh524340.patch
    - tigervnc10-rh516274.patch


author: Adam Tkac <atkac redhat com> 1.0.90-0.2.20091221svn3929
changelog:
  - add patch for upstream X.Org issue #25909
  - add libXdmcp-devel to build requires to build Xvnc with XDMCP support (#552322)


author: Adam Tkac <atkac redhat com> 1.0.90-0.4.20091221svn3929
changelog:
  - mark stack as non-executable in jpeg ASM code
  - add xorg-x11-xauth to Requires
  - add support for X.Org 1.8
  - drop shave sources, they are no longer needed


author: Adam Tkac <atkac redhat com> 1.0.90-0.6.20100219svn3993
changelog:
  - add mesa-dri-drivers and xkeyboard-config to -server Requires
  - update to r3993 1.0.90 snapshot
    - tigervnc11-noexecstack.patch merged
    - tigervnc11-xorg18.patch merged
    - xserver18.patch is no longer needed


author: Adam Tkac <atkac redhat com> 1.0.90-0.9.20100219svn3993
changelog:
  - add server-applet subpackage which contains Java vncviewer applet
  - fix Java applet; it didn't work when run from web browser
  - add xorg-x11-xkb-utils to server Requires


author: Adam Tkac <atkac redhat com> 1.0.90-0.10.20100420svn4030
changelog:
  - update to r4030 snapshot
  - patches merged to upstream
    - tigervnc11-rh522369.patch
    - tigervnc11-rh551262.patch
    - tigervnc11-r4002.patch
    - tigervnc11-r4014.patch


author: Adam Tkac <atkac redhat com> 1.0.90-0.11.20100420svn4030
changelog:
  - link libvnc.so "now" to catch "undefined symbol" errors during Xorg startup
  - use always XkbConvertCase instead of XConvertCase (#580159, #586406)
  - don't link libvnc.so against libXi.la, libdix.la and libxkb.la; use symbols
    from Xorg instead


author: Adam Tkac <atkac redhat com> 1.0.90-0.14.20100420svn4030
changelog:
  - fix memory leak in Xvnc input code (#597172)
  - don't crash when receive negative encoding (#600070)
  - explicitly disable udev configuration support
  - add gettext-autopoint to BR


author: Adam Tkac <atkac redhat com> 1.0.90-0.17.20100721svn4113
changelog:
  - update to r4113
  - patches merged
    - tigervnc11-rh586406.patch
    - tigervnc11-libvnc.patch
    - tigervnc11-rh597172.patch
    - tigervnc11-rh600070.patch
    - tigervnc11-options.patch
  - don't own %{_datadir}/icons directory (#614301)
  - minor improvements in the .desktop file (#616340)
  - bundled libjpeg configure requires nasm; is executed even if system-wide
    libjpeg is used


author: Adam Tkac <atkac redhat com> 1.0.90-0.19.20100813svn4123
changelog:
  - separate Xvnc, vncpasswd and vncconfig to -server-minimal subpkg (#626946)
  - move license to separate subpkg and Requires it from main subpkgs
  - Xvnc: handle situations when no modifiers exist well (#611677)


author: Adam Tkac <atkac redhat com> 1.0.90-0.20.20100813svn4123
changelog:
  - press fake modifiers correctly (#633931)
  - supress unneeded debug information emitted from initscript (#633645)


author: Adam Tkac <atkac redhat com> 1.0.90-0.24.20100813svn4123
changelog:
  - rebuild against xserver 1.10.X
  - 0001-Return-Success-from-generate_modkeymap-when-max_keys.patch merged


author: Adam Tkac <atkac redhat com> 1.0.90-0.25.20101208svn4225
changelog:
  - update to r4225
  - patches merged
    - tigervnc11-rh611677.patch
    - tigervnc11-rh633931.patch
    - tigervnc11-xorg1.10.patch
  - enable VeNCrypt and PAM support


author: Adam Tkac <atkac redhat com> - 1.0.90-3
changelog:
  - fix wrong usage of memcpy which caused screen artifacts (#652590)
  - don't point to inaccessible link in sysconfig/vncservers (#644975)


author: Adam Tkac <atkac redhat com> - 1.1.0-1
changelog:
  - update to 1.1.0
  - update the xorg11 patch
  - patches merged
    - tigervnc11-glx.patch
    - tigervnc11-CVE-2011-1775.patch
    - 0001-Use-memmove-instead-of-memcpy-in-fbblt.c-when-memory.patch


author: Adam Tkac <atkac redhat com> - 1.1.0-3
changelog:
  - don't build X.Org devel docs (#755782)
  - applet: BR generic java-devel instead of java-gcj-devel (#755783)
  - use runuser to start Xvnc in systemd service file (#754259)
  - don't attepmt to restart Xvnc session during update/erase (#753216)


author: Adam Tkac <atkac redhat com> - 1.1.0-5
changelog:
  - clean Xvnc's /tmp environment in service file before startup
  - fix building against the latest JAVA 7 and X.Org 1.12


author: Adam Tkac <atkac redhat com> 1.2.80-0.1.20120905svn4996
changelog:
  - update to 1.2.80
  - remove deprecated patches
    - tigervnc-102434.patch
    - tigervnc-viewer-reparent.patch
    - tigervnc11-java7.patch
  - patches merged
    - tigervnc11-xorg111.patch
    - tigervnc11-xorg112.patch


author: Adam Tkac <atkac redhat com> - 1.2.80-0.12.20130314svn5065
changelog:
  - include /etc/X11/xorg.conf.d/10-libvnc.conf sample configuration (#712482)
  - vncserver now honors specified -geometry parameter (#755947)


author: Tim Waugh <twaugh@redhat.com> 1.2.80-0.14.20130314svn5065
changelog:
  - Use systemd rpm macros (bug #850340).  Moved systemd requirements
    from main package to server sub-package.
  - Applied Debian patch to fix busy loop when run from inetd in nowait
    mode (bug #920373).
  - Added dependency on xorg-x11-xinit to server sub-package so that
    default window manager can be found (bug #896284, bug #923655).
  - Fixed bogus changelog date.


author: Tim Waugh <twaugh@redhat.com> 1.3.0-3
changelog:
  - Avoid PIDFile problems in systemd unit file (bug #983232).
  - libvnc.so: don't use unexported key_is_down function.
  - Don't use shebang in vncserver script.


author: Tim Waugh <twaugh@redhat.com> 1.3.0-15
changelog:
  - Disable dri3 to enable building (bug #1063392).
  - Fixed heap-based buffer overflow (CVE-2014-0011, bug #1050928).


author: Tim Waugh <twaugh@redhat.com> - 1.3.1-8
changelog:
  - Input reset fixes from upstream (bug #1116956).
  - No longer need ppc64le patch as it's now in xorg-x11-server.
  - Rebased xserver114.patch again.


author: Tim Waugh <twaugh@redhat.com> - 1.4.2-1
changelog:
  - Rebased xserver116.patch against xorg-x11-server-1.17.1.
  - Allow build against xorg-x11-server-1.17.
  - 1.4.2.


author: Jan Grulich <jgrulich@redhat.com> - 1.6.0-4
changelog:
  - Utilize system-wide crypto policies
    Resolves: bz#1179345
  - Try to disable patch4 as it was previously written to support an
    older version of a different client and breaks some other usage
    Resolves: bz#1280440


author: Jan Grulich <jgrulich@redhat.com> - 1.7.1-3
changelog:
  - Bug 1438704 - CVE-2017-7392 CVE-2017-7393 CVE-2017-7394
                  CVE-2017-7395 CVE-2017-7396 tigervnc: various flaws
    + other upstream related fixes


author: Jan Grulich <jgrulich@redhat.com> - 1.9.0-7
changelog:
  - Improve coverity scan fixes
    Resolves: bz#1602714

    Inform whether view-only password is used or not
    Resolves: bz#1639169

    Backport fixes from RHEL 7
    Resolves: bz#1651254


author: Jan Grulich <jgrulich@redhat.com> - 1.10.1-5
changelog:
  - Install the HOWTO file to correct location
  - Add /usr/bin/vncserver file informing users to read the HOWTO.md file
    Resolves: bz#1790443


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-1
changelog:
  - Update to 1.11.0
    Resolves: bz#1880985
  - Backport fix to allow Tigervnc use boolean values in config files
    Resolves: bz#1883415


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-2
changelog:
  - Revert removal of vncserver
    Resolves: bz#1897504
  - Correctly start vncsession as a daemon
    Resolves: bz#1897498


author: Jan Grulich <jgrulich@redhat.com> - 1.12.0-4
changelog:
  - Added vncsession-restore script for SELinux policy migration
    Fix SELinux context for root user
    Resolves: bz#2021892


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-1
changelog:
  - 1.13.1
    Resolves: bz#2175748
  - Restore "--fallbacktofreeport" option in the vncserver script
    Resolves: bz#2174398


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-2
changelog:
  - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege
    Escalation Vulnerability
    Resolves: bz#2180306


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-4
changelog:
  - Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
    Resolves: RHEL-15236

  - Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
    Resolves: RHEL-15230


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-5
changelog:
  - Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
    Resolves: RHEL-18410
  - Fix CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
    Resolves: RHEL-18422


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-4
changelog:
  - Add option "ApproveLoggedUserOnly" allowing to connect only the user
    owning the running session
    Resolves: RHEL-91104


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-6
changelog:
  - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
    Resolves: RHEL-97268
  - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
    Resolves: RHEL-97294
  - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
    Resolves: RHEL-97364
  - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
    Resolves: RHEL-97397
  - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
    Resolves: RHEL-97232


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-7
changelog:
  - Additional fix to CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
    Resolves: RHEL-97294


author: Justin Stephenson <jstephen@redhat.com> - 8-1
changelog:
  - Release v8
  - Spec file fixes for EL6
  - Spec file improvements for Debian/Ubuntu pkg-config
  - Tlog-play improve authentication options
  - Handle piped in I/O from stdin and improve the main recording transfer exit
    condition.
  - Use empty string on hostname resolution failure


author: Justin Stephenson <jstephen@redhat.com> - 9-1
changelog:
  - Release v9
  - Add libutempter support
  - Require journal match filter
  - Add file reader match functionality
  - Restore cursor visibility and color attributes on tlog-play exit
  - Add "time" real clock timestamp message field
  - Various upstream CI improvements


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Fire SIGCHLD after utempter_add_record since it probably eats it.
  - Correct suse rpmbuild
  - Update debbuild for travis CI


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Release v12
  - Prevent infinite transfer loop on GDM login.
  - tlog-play: add journal namespace support.
  - tlitest: extend delay for limit-action delay test.


author: Justin Stephenson <jstephen@redhat.com> - 12.1
changelog:
  - Exit transfer loop when output fd is closed
  - Revert "Prevent infinite transfer loop on GDM login"


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-3
changelog:
  - Rebuild for CVE-2022-41723, CVE-2023-24534, CVE-2023-24536 and
    CVE-2023-24538
  Resolves: #2187343, #2187363, #2203694


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-3
changelog:
  - Rebuild for CVE-2022-41723, CVE-2023-24534, CVE-2023-24536 and
    CVE-2023-24538
  Resolves: #2187345, #2187368, #2203690


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-7
changelog:
  - Rebuild for CVE-2023-29406, CVE-2023-39318 and CVE-2023-39319
  Resolves: RHEL-4231, RHEL-4475, RHEL-4502


author: Honggang Li <honli@redhat.com> - 4.2.10-25
changelog:
  - Rebase to latest Fedora release
  - Fix file conflicts in torque-devel multilib packages
  - Resolve: bz1853167


author: Kalev Lember <klember@redhat.com> - 3.38.2-2
changelog:
  - Use conflicts for totem-video-thumbnailer split instead of self-obsoletes
  - Resolves: rhbz#1949422


author: Wim Taymans <wtaymans@redhat.com> - 0.3.13-12
changelog:
  - Add explicit Requires for the -libs package.
  - Do NVR bump to move twolame-devel from buildroot to CRB
  - Resolves: rhbz#1843275


author: Nils Philippsen <nils@redhat.com> - 1.2.1-3
changelog:
  - drop requirements on cmake, pkgconfig and rather own the directories for the
    files augmenting these packages


author: Andreas Schneider <asn@redhat.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2:
    * Added support for fork'ed and then exec'ed processes
    * Added support for Alpha


author: Andreas Schneider <asn@redhat.com> - 1.2.4-1
changelog:
  - Update to version 1.2.4
    * Added deadlock workaround for glibc < 2.24
    * Fixed a possible deadlock bug if uid_wrapper is turned off
    * Logging is always turned on now
    * Fixed a memory leak
    * Limited number of groups during fork+exec


author: Attila Lakatos <alakatos@redhat.com> - 0.7.8-4
changelog:
  - RHEL 8.3.0 ERRATUM
  - Spec file clean up
  - Rebase to 0.7.8
  Resolves: rhbz#1738590
  - Added selinux subpackage
  Resolves: rhbz#1683567
  - Added notifier subpackage
  - Installing /etc/usbguard/rules.d/
  Resolves: rhbz#1667395
  - Fixed sigwaitinfo handling
  Resolves: rhbz#1835210


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-5
changelog:
  - RHEL 8.3.0 ERRATUM
  - Use old-fasioned forking style in unit file
  Resolves: rhbz#1846885
  - Allow usbguard to read /proc/cpuinfo
  Resolves: rhbz#1847870
  - Removed notifier's Requires for usbguard-devel
  Resolves: rhbz#1667395
  - Allow usbguard to read /dev/urandom
  Resolves: rhbz#1848618


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-6
changelog:
  - RHEL 8.3.0 ERRATUM
  - Removed execstack from .spec
  - Removed AuthorizedDefault=wired from the usbguard
  Resolves: rhbz#1852539
  - Missing error message on bad configuration
  Resolves: rhbz#1857299
  - /etc/usbguard/usbguard-daemon.conf file does not contain all default options
  Resolves: rhbz#1862907


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-1
changelog:
  - Rebase to 1.0.0
  Resolves: rhbz#1887448
  - Filtering rules by attribute
  Resolves: rhbz#1873953
  - Change device policy of multiple devices using rule instead of ID
  Resolves: rhbz#1852568


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-8
changelog:
  - change usbguard icon injection
  - fix DSP module definition in spec file
  Resolves: rhbz#2014441
  - add execstack to spec
  - remove IPAddressDeny from usbguard service
  Resolves: rhbz#1929364
  - fix file conflict when installing usbguard on rhel
  Resolves: rhbz#1963271
  - fix IPC access control files override
  Resolves: rhbz#2004511
  - validate ACL permission existence
  Resolves: rhbz#2005020
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2000000


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-8.2
changelog:
  - Fix unauthorized access via D-bus
  - Fix memory leak on D-bus connection failure
  Resolves: rhbz#2127848


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Rebase to latest upstream: 0.13.0
  - Keeps usbredirserver binary (removed upstream)
    Related: rhbz#2135760


author: Victor Toso <victortoso@redhat.com> - 0.13.0-2
changelog:
  - Fixes 100% CPU usage when usbredirect used as TCP server
    Related: rhbz#2157520
  - Fixes USB redirection of identical devices
    Resolves: rhbz#2157520


author: James Antill <james@fedoraproject.org> - 1.0.4-20
changelog:
  - Move doc/ustr-devel-<version> to doc/ustr-devel. BZ 993940.
  - Use -fgnu89-inline workaround for gcc5.


author: Mark Wielaard <mjw@redhat.com> - 3.21.0-2
changelog:
  - Upgrade to upstream 3.21.0
  - Remove upstreamed patches
  - Add valgrind-3.21.0-no-memcpy-replace-check.patch


author: Mark Wielaard <mjw@redhat.com> - 3.21.0-7
changelog:
  - Add valgrind-3.21.0-callgrind_control-no-strict.patch
  - Add valgrind-3.21.0-realloc-again.patch
  - Update valgrind-3.21.0-no-memcpy-replace-check.patch (memcpy_chk)
  - Add valgrind-3.21.0-vgm.patch and valgrind-3.21.0-vgm-tests.patch
  - Add valgrind-3.21.0-pgste.patch


author: Mark Wielaard <mjw@redhat.com> - 3.22.0-1
changelog:
  - Upstream 3.22.0 final
  - BuildRequires elfutils-debuginfod for testing
  - Remove all upstreamed patches
  - Adjust valgrind-3.16.0-some-stack-protector.patch
  - Adjust valgrind-3.16.0-some-Wl-z-now.patch
  - Add cachegrind.h to valgrind-devel package
  - Use %patch -Pn instead of deprecated %patchn


author: Binbin Zhou <zhoubinbin@loongson.cn> - 3.22.0-3
changelog:
  - Add valgrind-3.22.0-Add-LoongArch64-Linux-support.patch
  - Add valgrind-3.22.0-LoongArch64-Sync-kernel-4.19.patch


author: Lubos Uhliarik <luhliari@redhat.com> - 0.15.0-1
changelog:
  - updated to newer version (0.15.0)
  - Drop EPEL and older Fedora releases support
  - Drop broken manual ABI dependency to Varnish
  - Drop commented out references to past patches
  - Verbose test suite
  - Simplified configure step
  - Dependencies cleanup


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-22
changelog:
  - Rebuild due to new version of FreeRDP
  - Fix an issue when RDP connection shows just black screen
  - Resolves: #1839744


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-11
changelog:
  - v2v: windows: Allow qxldod.inf as synonym for qxl.inf
    resolves: rhbz#1926102
  - v2v: Increase required free space in Windows to 100 MB
    resolves: rhbz#1949147
  - docs: Document how to remove "Out of HTTP sessions" limit
  - v2v: Disable readahead for VMware curl sources too
    resolves: rhbz#1848862
  - v2v: Allow output to block devices
    resolves: rhbz#1868690
  - docs: -o openstack: Clarify name of file containing OpenStack auth
    resolves: rhbz#1871754
  - docs: UEFI guest conversion to -o openstack is supported
    resolves: rhbz#1872100
  - v2v: Turn pnp_wait.exe warning into a debug message
    resolves: rhbz#1903960
  - v2v: windows: Fix schtasks /SD parameter
    resolves: rhbz#1895323


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-13
changelog:
  - docs: Fix version of virt-v2v which added UEFI for OpenStack
    related: rhbz#1872100
  - v2v: Increase Linux minimum root filesystem to 100 MB
    resolves: rhbz#1764569


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-17
changelog:
  - Correct regexps used to fix schtasks command
  - Fix backing file specified without backing format
    resolves: rhbz#2023279, rhbz#2025769


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-21
changelog:
  - Fix assertion failure when parsing OVA dir with trailing slash
    resolves: rhbz#2028823
  - For -o rhv-upload wait for VM creation task
    resolves: rhbz#1985827
  - If listing RPM applications fails, rebuild DB and retry (2089623)
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2102720


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-22
changelog:
  - RHEL 8: If setfiles fails fall back to autorelabel
    resolves: rhbz#XXX
  - Reapply patches since we are using git format-patch --submodule=diff


author: Uri Lublin <uril@redhat.com> - 10.0-3
changelog:
  - Show OS-ID when running 'remote-viewer -V'
    Resolves: rhbz#1953282
  - Clear auth entry fields
    Resolves: rhbz#1953933


author: Daniel P. Berrangé <berrange@redhat.com> - 11.0-1
changelog:
  - Rebase to 11.0 release
  - Add missing dep on libvirt-client for bash completion
  - Resolves: rhbz#2028604, rhbz#2000528


author: Jiri Kucera <jkucera@redhat.com> - 0.3.11-4
changelog:
  - fixed License
  - Requires: /usr/bin/gpg2 in libs subpackage
  - Added support for opening all types of LUKS devices
    Resolves: #1626974


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-32
changelog:
  - Removed a hint about the ftp_home_dir SELinux boolean from the config file
  - Resolves: rhbz#1623424


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-34
changelog:
  - Enable support for wide-character strings in logs
  - Replace unprintables with HEX code, not question marks
  - Resolves: rhbz#1947900


author: José Expósito <jexposit@redhat.com> - 1.3.283.0-3
changelog:
  - Provides/Obsoletes vulkan-validation-layers-devel
    Resolves: https://issues.redhat.com/browse/RHEL-54290


author: Bo Ren <rb01097748@alibaba-inc.com> 2.46.6-2.0.1
changelog:
  - Exclude loongarch64
  - cherry-pick `add sw arch #ef8be098b07c4d8a9f809d32a607700f4a420676`. (nijie@wxiat.com)
  - Remove patches for cmake and gstreamer (wb-zh951434@alibaba-inc.com)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.30.2-2
changelog:
  - Try to fix coverity build by disabling docs (thanks to Kamil Dudka <kdudka@redhat.com>!)
  - Related: #1883304


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.36.1-1
changelog:
  - Update to 2.36.1
    Related: #2061994
  - Resolves: #2075492
  - Resolves: #2075494
  - Resolves: #2075496


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.38.5-1.4
changelog:
  - Add patch for CVE-2023-28204
    Resolves: #2209744
  - Add patch for CVE-2023-32373
    Resolves: #2209727


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.40.5-1
changelog:
  - Upgrade to 2.40.5. Also, disable JIT
    Resolves: #2176269
    Resolves: #2185742
    Resolves: #2209728
    Resolves: #2209745
    Resolves: #2218649
    Resolves: #2218651
    Resolves: #2224611


author: Bo Ren <rb01097748@alibaba-inc.com> 2.48.1-1.0.1
changelog:
  - Exclude loongarch64
  - cherry-pick `add sw arch #ef8be098b07c4d8a9f809d32a607700f4a420676`. (nijie@wxiat.com)
  - Remove patches for gstreamer (wb-zh951434@alibaba-inc.com)


author: Bo Ren <rb01097748@alibaba-inc.com> 2.48.2-1.0.1
changelog:
  - Exclude loongarch64
  - cherry-pick `add sw arch #ef8be098b07c4d8a9f809d32a607700f4a420676`. (nijie@wxiat.com)


author: Brian C. Lane <bcl@redhat.com> - 35.5-1
changelog:
  - New release: 35.5 (bcl)
    Resolves: rhbz#2052604
  - docs: Explain how to undo blueprints delete (bcl)
  - test: server status no longer returns devel (bcl)
  - Use GetFrozenBlueprintsTOML for blueprints freeze save (bcl)
  - Add a test for float uid/gid in frozen blueprint (bcl)
  - Use GetBlueprintsTOML for blueprints save (bcl)
  - test: Add a test for float uid/gid in saved blueprint (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 (49699333+dependabot[bot])
  - tests: trigger on push to main (jrusz)
  - build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - ci: add keystore for sonarqube (jrusz)
  - spec: Switch to using %gobuild macro on Fedora (bcl)
  - ci: change workflow name (jrusz)
  - ci: add gitlab-ci and sonarqube (jrusz)
  - doc: fix example links from the README (tdecacqu)
  - build(deps): bump actions/checkout from 2.3.4 to 2.4.0 (49699333+dependabot[bot])
  - ci: Enable Coverity Scan tool (atodorov)


author: Brian C. Lane <bcl@redhat.com> - 35.9-1
changelog:
  - Copy rhel-88.json test repository from osbuild-composer
  - Update osbuild-composer test repositories from osbuild-composer
  - New release: 35.9 (bcl)
    Resolves: rhbz#2168666
  - tests: Replace os.MkdirTemp with t.TempDir (bcl)
  - blueprint save: Allow overriding bad blueprint names (bcl)
  - tests: Clean up checking err in tests (bcl)
  - composer-cli: Implement blueprints diff (bcl)
  - saveBlueprint: Return the filename to the caller (bcl)
  - composer-cli: Add tests for using --commit with old servers (bcl)
  - weldr: Return error about the blueprints change route (bcl)
  - weldr: Save the http status code as part of APIResponse (bcl)
  - Add --commit support to blueprints save (bcl)
  - Add --commit to blueprints show (bcl)
  - gitleaks: Exclude the test password used in tests (bcl)
  - ci: add tags to AWS instances (tlavocat)
  - Update github.com/BurntSushi/toml to 1.2.1
  - Update github.com/stretchr/testify to 1.8.1
  - Update bump github.com/spf13/cobra to 1.6.1
  - New release: 35.8 (bcl)
  - completion: Remove providers from bash completion script (bcl)
  - completion: Filter out new headers from compose list (bcl)
  - docs: Remove unneeded Long descriptions (bcl)
  - docs: Use a custom help template (bcl)
  - docs: Add more command documentation (bcl)
  - cmdline: Add package glob support to modules list command (bcl)
  - workflow: Add govulncheck on go v1.18 (bcl)
  - tests: Update to use golangci-lint 1.49.0 (bcl)
  - New release: 35.7 (bcl)
  - spec: Move %gometa macro above %gourl (bcl)
  - weldr: When starting a compose pass size as bytes, not MiB (bcl)
  - tests: Use correct size value in bytes for test (bcl)
  - workflow: Add Go 1.18 to text matrix (bcl)
  - Replace deprecated ioutil functions (bcl)
  - New release: 35.6 (bcl)
  - tests: Update tests for osbuild-composer changes (bcl)
  - CMD: Compose status format (eloy.coto)
  - CMD: Compose list format (eloy.coto)
  - tests: Update tests to check for JSON list output (bcl)
  - composer-cli: Change JSON output to be a list of objects (bcl)
  - weldr: Simplify the old ComposeLog, etc. functions (bcl)
  - composer-cli: Add --filename to blueprints freeze save command (bcl)
  - composer-cli: Add --filename to blueprints save command (bcl)
  - composer-cli: Add --filename to compose logs command (bcl)
  - composer-cli: Add --filename to compose image command (bcl)
  - composer-cli: Add --filename to compose metadata command (bcl)
  - composer-cli: Add --filename to compose results command (bcl)
  - weldr: Add saving to a new filename to GetFilePath function (bcl)
  - github: Fix issue with codecov and forced pushes in PRs (bcl)
  - Use golangci-lint 1.45.2 in workflow (bcl)
  - Run workflow tests for go 1.16.x and 1.17.x (bcl)
  - Move go.mod to go 1.16 (bcl)
  - workflows/trigger-gitlab: run Gitlab CI in new image-builder project (jrusz)
  - Update GitHub actions/setup-go to 3
  - Update GitHub actions/checkout to 3


author: Brian C. Lane <bcl@redhat.com> - 35.12-1
changelog:
  - Copy rhel-8.10.json test repository from osbuild-composer
  - New release: 35.12 (bcl)
    Resolves: RHEL-1770
  - Add support for compose start warning messages (bcl)
  - Update documentation urls for new locations (bcl)
  - weldr: go fmt changes to a couple comments (bcl)
  - weldr: Update ostree test for parentid with no url (bcl)
  - Makefile: Turn off seccomp for build-in-podman (bcl)
  - composer-cli: Update doc links (simon.steinbeiss)
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)
  - spec: Require createrepo_c for weldr-client-tests package (bcl)
  - spec: migrate the license field to SPDX (ondrej)
  - Go: Switch to go 1.19 (bcl)
  - CI: Update terraform hash (bcl)
  - Actions: add workflow for marking and closing stale issues and PRs (thozza)
  - workflows: Stop using golint (bcl)
  - workflows: Add Go 1.21 and 1.22 to test matrix (bcl)
  - workflows: Update to golangci-lint 1.56.2 (bcl)
  - workflow: Ignore govulncheck failures (bcl)
  - workflow: Switch to testing on go 1.18, 1.19, 1.20 (bcl)
  - build(deps): bump actions/setup-go from 3 to 5 (49699333+dependabot[bot])
  - build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.8.0 (49699333+dependabot[bot])
  - build(deps): bump actions/checkout from 3 to 4 (49699333+dependabot[bot])
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (49699333+dependabot[bot])


author: Brian C. Lane <bcl@redhat.com> - 35.12-3
changelog:
  - Update test repository snapshot urls rhel 8.10 and remove cs8 repos
    The snapshots for cs8 have been removed from the service
  - Rebuild for CVE-2025-22871
    Resolves: RHEL-89289


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 1.19.5-12.0.1
changelog:
  - use extern in header files when declaring global variables for compatible gcc10 build
  - Add doc sub package(taifu.gc@alibaba-inc.com)


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-15
changelog:
  - Resolves: #2119126 - Wireshark source rpm fails to build due to looking for incorrect libssh header files


author: Tomas Popela <tpopela@redhat.com> - 1.6.0-5
changelog:
  - Drop PipeWire 0.2 requirement as Chrom[e|ium] 90 now depends on PipeWire 0.3
  - Resolves: rhbz#1949809


author: Debarshi Ray <rishi@fedoraproject.org> - 41.1-2
changelog:
  - Make the Supplements specific to Fedora to retain consistency with
    xdg-desktop-portal-gtk
  Resolves: #2051473


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.04-0.1
changelog:
  - disabled w3c-libwww because it does not exist anymore in FC5 and
    seems to be unmaintained upstream
  - added missing libxml2-devel
  - cleaned up list of %doc files
  - fixed gcc4.1 build issues
  - removed static libraries when there exists a corresponding dynamic one


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.04-1
changelog:
  - added libxml2-devel and openssl-devel Requires: for the -devel
    subpackage
  - ship doc/* instead of doc
  - initial Fedora Extras package (review 175840)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.06.11-2
changelog:
  - rediffed cmake patch against current version
  - made the xmlrpc-c-config compatible to the upstream version
  - added compatibility symlinks for some header files (thx to Robert de
    Vries for reporting these two issues)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.06.23-1
changelog:
  - use correct pkg-config script for 'xmlrpc-config abyss-server'
    output (#355411)
  - updated to 1.06.23 (#355411)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.13.07-2
changelog:
  - moved to advanced branched; rediffed/updated existing cmake patch
    and fixed other compilation issues (#369841)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.13.8-2
changelog:
  - fixed cmake quoting so that pkgconfig files get correct version number
  - fixed handling of 'server-util' and '--cflags' within xmlrpc-c-config


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.16.4.1567-2
changelog:
  - updated to 1.16.4
  - rediffed/updated patches
  - splitted some subpackages (c++, client) out of main package as they
    introduce additional dependencies (c++, curl)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.20.3-1.1841
changelog:
  - updated to rev1841
  - rediffed patches
  - added patch to fix handling of wrong certificates (Nikola Pajkovsky)
  - added support for $XMLRPC_TRACE_CURL env (John Dennis)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.21.00-1301.1851
changelog:
  - replaced .so symlinks by linker scripts which add all implicit
    dependencies in AS_NEEDED() commands (#564607, #565577)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.21.00-1401.1851
changelog:
  - require the various subpackages explicitly for -devel; the ld linker
    scripts broke rpm's autodetection (#567400)
  - removed -devel Requires: which are covered by pkgconfig autodeps
  - added %{?_isa} annotations


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.24.1-1500.svn1987
changelog:
  - updated to 1.24.1
  - set -Wno-uninitialized CFLAGS; code contains lot of constructs
    triggering this warning and the 'int a=a' defeaters have been
    removed in this version


author: Rob Crittenden <rcritten@redhat.com> - 1.51.0-7
changelog:
  - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827)
    (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602)
  - Prevent integer overflow on m_groupSize in doProlog
    (CVE-2021-46143) (#2058560)


author: Ondrej Vasik <ovasik@redhat.com> 0.0.27-1
changelog:
  - New version 0.0.27
  - remove several bashisms in scripts
  - add new option --profile for preprocessing documents
    with profiling stylesheet
  - fix several potential crashes in xmlif (found by static analysis)


author: Adam Jackson <ajax@redhat.com> - 7.7-21
changelog:
  - oclock 1.0.4
  - xeyes 1.1.2
  - xfontsel 1.0.6
  - xload 1.1.3
  - xmessage 1.0.5
  - xpr 1.0.5
  - xwd 1.0.7
  - xwud 1.0.5


author: Michel Dänzer <mdaenzer@redhat.com> - 19.1.0-1
changelog:
  - ati 19.1.0 (#1728818)
  - Drop patch 0001-Don-t-set-up-black-scanout-buffer-if-LeaveVT-is-call.patch,
    merged upstream
  - Add patches 0001-Handle-NULL-fb_ptr-in-pixmap_get_fb.patch &
    0002-Don-t-crash-X-server-if-GPU-acceleration-is-not-avai.patch from
    upstream Git master, fixing crashes with ShadowFB


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.1-2
changelog:
  - xf86-input-libinput 1.0.1 (#1951879)
  - Fix the upstream source URL
  - Use autosetup instead of manual patch handling


author: Peter Hutterer <peter.hutterer@redhat.com> 0.2.0-1
changelog:
  - Only match on specific device types, don't match on joysticks or tablets
  - libinput 0.2.0
  - switch to new fdo host


author: Peter Hutterer <peter.hutterer@redhat.com> 0.22.0-3
changelog:
  - Provide xorg-x11-drv-synaptics. The actual content is now provided by
    xorg-x11-drv-synaptics-legacy (#1394836). For details, see
    https://fedoraproject.org/wiki/Changes/RetireSynapticsDriver


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-2
changelog:
  - Ignore LED updates for disabled devices, avoids a null-pointer dereference
    when an AccessX timeout is set


author: Peter Hutterer <peter.hutterer@redhat.com> 0.25.1-2
changelog:
  - Add a new option to provide a workaround for the slow pointer movement on
    hidpi displays (#1413306) .
    That's a fedora-only patch for now, no idea what the permanent upstream
    solution will be here.


author: Hans de Goede <hdegoede@redhat.com> - 1.0.12-4
changelog:
  - Fix the crtc not being turned off, causing the dgpu to not suspend,
    after using a dgpu attached output


author: Christophe Fergeau <cfergeau@redhat.com> - 0.1.5-7
changelog:
  - Add upstream patches for Python 3 support
  - Validate RANDR output property atoms
  - Add patch fixing crash with multiple QXL devices
  - This syncs the RHEL branch with both current rawhide and RHEL 7.6


author: Adam Jackson <ajax@redhat.com> - 2.4.0-3
changelog:
  - Restore no-virt-shadowfb patch
  - Refuse to run if there's a UEFI framebuffer; use fbdev or a native driver


author: José Expósito <jexposit@redhat.com> - 1.20.11-20
changelog:
  - CVE fix for: CVE-2023-6377, CVE-2023-6478
    Resolves: https://issues.redhat.com/browse/RHEL-18321
    Resolves: https://issues.redhat.com/browse/RHEL-18327


author: José Expósito <jexposit@redhat.com> - 1.20.11-21
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409
    Resolves: https://issues.redhat.com/browse/RHEL-21207
    Resolves: https://issues.redhat.com/browse/RHEL-20528
    Resolves: https://issues.redhat.com/browse/RHEL-20378
    Resolves: https://issues.redhat.com/browse/RHEL-20384
    Resolves: https://issues.redhat.com/browse/RHEL-21191
    Resolves: https://issues.redhat.com/browse/RHEL-21198


author: José Expósito <jexposit@redhat.com> - 1.20.11-23
changelog:
  - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
    CVE-2024-31083
  - Add util-linux as a dependency of Xvfb
  - Fix compilation error on i686


author: Hangbo Fan <fanhangbo.fhb@alibaba-inc.com> - 1.20.11-25.0.1
changelog:
  - Add doc sub package
  - Fix doc package installation (wangkaiyuan@inspur.com)
  - cherry-pick `add sw arch #1ba6a0036d929c82c5516a18350d5c27cc28e210`. (nijie@wxiat.com)
  - cherry-pick: `add sw arch #3b1aa1ee2c00aeebe71a618589826c2d1cab136e`. (Weisson@linux.alibaba.com)
  - Fix the splash screen issue in the phytium S5000C (yuanxia2073@phytium.com.cn)


author: Hans de Goede <hdegoede@redhat.com> - 1.19.0-0.3.20161026
changelog:
  - Sync with upstream git, bringing in a bunch if bug-fixes
  - Add some extra fixes which are pending upstream
  - This also adds PointerWarping emulation to Xwayland, which should improve
    compatiblity with many games


author: Ben Crocker <bcrocker@redhat.com> - 1.19.0-0.6.20161028
changelog:
  - Fix Config record allocation during startup: if xorg.conf.d directory
  - was absent, a segfault resulted.


author: Hans de Goede <hdegoede@redhat.com> - 1.19.0-0.7.rc2
changelog:
  - Update to 1.19.0-rc2
  - Fix (hopefully) various crashes in FlushAllOutput() (rhbz#1382444)
  - Fix Xwayland crashing in glamor on non glamor capable hw (rhbz#1390018)


author: Olivier Fourdan <ofourdan@redhat.com> 1.19.0-1
changelog:
  - xserver 1.19.0
  - Fix use after free of cursors in Xwayland (rhbz#1385258)
  - Fix an issue where some monitors would show only black, or
    partially black when secondary GPU outputs are used


author: Hans de Goede <hdegoede@redhat.com> - 1.19.0-2
changelog:
  - Add some patches for better integration with the nvidia binary driver
  - Add a patch from upstream fixing a crash (rhbz#1389886)


author: Olivier Fourdan <ofourdan@redhat.com> 1.19.6-5
changelog:
  - xwayland: avoid race condition on new keymap
  - xwayland: Keep separate variables for pointer and tablet foci (rhbz#1519961)
  - xvfb-run now support command line option “--auto-display”


author: Olivier Fourdan <ofourdan@redhat.com> - 1.19.99.904-2
changelog:
  - Re-fix "use type instead of which in xvfb-run (rhbz#1443357)" which
    was overridden inadvertently


author: Adam Jackson <ajax@redhat.com> - 1.20.1-3
changelog:
  - Assorted RHEL mustard:
    - Don't probe for drivers we're not shipping
    - Enable PAM
    - Link Xorg with -z now
    - Nerf modesetting's atomic ioctl support
    - Don't autoconfigure vesa or fbdev from X -configure
    - Call LeaveVT on RANDR's CloseScreen path so we drop drm master
    - Try harder to get initial spanning desktop if the output's
      preferred mode was filtered away
  - Sync va_gl/vdpau patch from F29


author: Ben Crocker <bcrocker@redhat.com> - 1.20.3-5
changelog:
  - Add Eric Anholt's patch e50c85f4ebf559 from upstream:
  - Fix segfault on probing a non-PCI platform device on a system with PCI
  - NOTE: also pertains on a system with no PCI, e.g. s390x.
    Resolves: #1652013


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-3
changelog:
  - Downgrade modesetting "glamor initialization failed" X_ERROR → X_INFO
    Resolves: #1724573
  - Xwayland / Present leak fixes for #1728684


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-5
changelog:
  - xwayland: Hold a pixmap reference in struct xwl_present_event
    Related: #1728684
  - glamor: Fix glamor_poly_fill_rect_gl xRectangle::width/height handling
    Resolves: #1740250


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-8
changelog:
  - CVE fixes for: CVE-2020-14345 (#1872391), CVE-2020-14346 (#1872395),
    CVE-2020-14361 (#1872402), CVE-2020-14362 (#1872409)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-4
changelog:
  - CVE fix for: CVE-2021-4008 (#2030162), CVE-2021-4009 (#2030172),
    CVE-2021-4010 (#2030175), CVE-2021-4011 (#2030181)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-9
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2108156, rhbz#2108161


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.20.11-11
changelog:
  - CVE fix for: CVE-2022-4283 (#2151799), CVE-2022-46340 (#2151774),
    CVE-2022-46341 (#2151779), CVE-2022-46342 (#2151784),
    CVE-2022-46343 (#2151789), CVE-2022-46344 (#2151794)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-26
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97273), CVE-2025-49176 (RHEL-97329),
                 CVE-2025-49178 (RHEL-97369), CVE-2025-49179 (RHEL-97422),
                 CVE-2025-49180 (RHEL-97235)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.9-5
changelog:
  Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Olivier Fourdan <ofourdan@redhat.com> - 21.0.99.902-1
changelog:
  - xwayland 21.0.99.902
  - Remove xdmcp, udev, udev_kms build options
  - Stop overriding the vendor name, same as xorg-x11-server


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-2
changelog:
  - CVE fix for: CVE-2021-4008 (#2038067), CVE-2021-4009 (#2038070),
    CVE-2021-4010 (#2038072), CVE-2021-4011 (#2038074)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-3
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2110440, rhbz#2110433


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.3-5
changelog:
  - CVE fix for: CVE-2022-4283 (#2151803), CVE-2022-46340 (#2151778),
    CVE-2022-46341 (#2151783), CVE-2022-46342 (#2151786),
    CVE-2022-46343 (#2151793), CVE-2022-46344 (#2151796)


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-3
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187),
                 CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193),
                 CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202),
                 CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207)


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-3
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-79126), CVE-2025-26595 (RHEL-79130),
                 CVE-2025-26596 (RHEL-79134), CVE-2025-26597 (RHEL-79140),
                 CVE-2025-26598 (RHEL-79141), CVE-2025-26599 (RHEL-79146),
                 CVE-2025-26600 (RHEL-79154), CVE-2025-26601 (RHEL-79150)


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97341), CVE-2025-49176 (RHEL-97335),
                 CVE-2025-49177 (RHEL-97358), CVE-2025-49178 (RHEL-97395),
                 CVE-2025-49179 (RHEL-97405), CVE-2025-49180 (RHEL-97245)


author: Adam Jackson <ajax@redhat.com> - 7.7-25
changelog:
  - iceauth 1.0.8
  - xkill 1.0.5
  - xrdb 1.1.1
  - xrefresh 1.0.6
  - xset 1.2.4
  - xsetroot 1.1.2
  - HTTPS URLs


author: Adam Jackson <ajax@redhat.com> - 7.7-24
changelog:
  - Make -devel Require the base package, so the pc file will point to an
    xkbcomp that actually exists.


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.999-28
changelog:
  - remove dependency on ImageMagick and netpbm-progs, because they were needed for
    tests during %build phase, which were removed in commit SHA 0595c15da29


author: Ray Strode <rstrode@redhat.com> 2.9.3-6
changelog:
  - Disable man support
  - Disable info support
  - Don't try to install schemas during install (bug 154035)


author: David Malcolm <dmalcolm@redhat.com> - 2.13.2-2
changelog:
  - Patched to include DocBook mimetype in desktop file, and added preun and post
    hooks to update-desktop-database (#175880)
  - Patched to ensure that Yelp recognizes that it can handle the mimetype of the
    documentation as reported by gnomevfs (also #175880)


author: Matthew Barnes <mbarnes@redhat.com> - 2.15.1-2
changelog:
  - Add build requirements: startup-notification-devel
                            libgnomeprintui22-devel
                            libXt-devel


author: Matthew Barnes <mbarnes@redhat.com> - 2.19.1-1
changelog:
  - Update to 2.19.1
  - Adapt the "apropos" patch for 2.19.1.
  - The "posix-man" patch appears to no longer apply.
  - Update dependencies based on configure.ac.


author: Matthew Barnes <mbarnes@redhat.com> - 2.19.90-1
changelog:
  - Update to 2.19.90
  - Remove "info-gnutls" patch (fixed upstream).
  - Remove patch for GNOME bug #370167 (fixed upstream).
  - Remove patch for GNOME bug #430365 (fixed upstream).
  - Remove patch for GNOME bug #431078 (fixed upstream).


author: Kalev Lember <kalevlember@gmail.com> - 1:3.8.1-3
changelog:
  - Make yelp-libs dep arch-specific, thanks to Michael Schwendt (#967180)
  - Don't create empty /usr/share/gnome/help directory: this should be owned by
    individual packages that install files in there (#964421)
  - Use configure --disable-static instead of removing the static .a afterwards


author: Kalev Lember <klember@redhat.com> - 2:40~beta-2
changelog:
  - Drop libtool as-needed hack as as-needed is in default LDFLAGS now
  - Remove unneeded ldconfig_scriptlets macro call
  - Tighten soname globs


author: Matej Mužila <mmuzila@redhat.com> - 3:2.4-5
changelog:
  - Add "Wants" dependency on network-online.target
  - Remove "After" dependency on NetworkManager-wait-online.service


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-7
changelog:
  - Remove the doc/zzipdoc/{options,match}.py scritps from the original tar
  - Replace them with a current github version
  - The original version of the files contains autogenerated header with incompatible license
  - This build thus uses modified tar archive
  Resolves: rhbz#1982241


