# changelog

author: Tomas Orsava <torsava@redhat.com> - 3.6.6-11
changelog:
  - Implement `alternatives` for chosing /usr/bin/python
  - Provide the default `no-python` alternative
  - Resolves: rhbz#1632625


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-12
changelog:
  - Rename the python3-debug subpackage to platform-python-debug
  - Provide the `python3-debug` name for backwards compatibility until it's taken
    over by the python36 component
  - Rename the python3-libs-devel subpackage to platform-python-devel for
    symmetry with the `platform-python` and `platform-python-debug` package
  - Add symlink /usr/libexec/platform-python-debug that was mistakenly omitted
  - Related: rhbz#1619153


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-13
changelog:
  - Stop providing the `python3` and `python3-debug` names from the
    platform-python/-debug subpackages
  - The `python3` and `python3-debug` names are now provided from the python36
    component
  - Conflict with older versions of `python3` and `python3-debug`
  - Related: rhbz#1619153


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.7-1
changelog:
  - Update to 3.6.7 (rhbz#1627739)
  - Re-enable test_gdb (rhbz#1639536)
  - Re-enable test_faulthandler (rhbz#1640147)


author: Tomas Orsava <torsava@redhat.com> - 3.6.7-2
changelog:
  - Switch to requiring platform-python-pip/setuptools instead of the python3-
    versions
  - Resolves: rhbz#1638836


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-7
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1704365 and rhbz#1703531


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.8-9
changelog:
  - Reduced default build flags used to build extension modules
    https://fedoraproject.org/wiki/Changes/Python_Extension_Flags
  Resolves: rhbz#1634784


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.8-12
changelog:
  - Use RPM built wheels of pip and setuptools in ensurepip instead of our rewheel patch
  - Require platform-python-setuptools from platform-python-devel to prevent packaging errors
  Resolves: rhbz#1701286


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-13
changelog:
  - Do not set PHA verify flag on client side (rhbz#1725721)
  - Enable TLS 1.3 post-handshake authentication in http.client (rhbz#1671353)


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-14
changelog:
  - Adding a new patch 329 that adds support for OpenSSL FIPS mode
  - Explicitly listing man pages in files section to fix an RPM warning
  Resolves: rhbz#1731424


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-15
changelog:
  - Patch 329 that adds support for OpenSSL FIPS mode has been improved and
    bugfixed
  Resolves: rhbz#1744670 rhbz#1745499 rhbz#1745685


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-16
changelog:
  - Properly pass the -Og optimization flag to the debug build
  Resolves: rhbz#1712977 and rhbz#1714733


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-18
changelog:
  - Reduce the number of tests running during the profile guided optimizations build
  - Enable profile guided optimizations for all the supported architectures
  Resolves: rhbz#1749576


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-19
changelog:
  - Skip windows specific test_get_exe_bytes test case and enable test_distutils
  Resolves: rhbz#1754040


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-21
changelog:
  - Patch 329 (FIPS) modified: Added workaround for mod_ssl:
    Skip error checking in _Py_hashlib_fips_error
  Resolves: rhbz#1760106


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-22
changelog:
  - Changed Requires into Recommends for python3-pip to allow a lower RHEL8
    footprint for containers and other minimal environments
  Resolves: rhbz#1756217


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-23
changelog:
  - Modify the test suite to better handle disabled SSL/TLS versions and FIPS mode
  - Use OpenSSL's DRBG and disable os.getrandom() function in FIPS mode
  Resolves: rhbz#1754028, rhbz#1754027, rhbz#1754026, rhbz#1774471


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-24
changelog:
  - Build Python with -fno-semantic-interposition for better performance
  - https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSpeedup
  - Also fix test_gdb failures with Link Time Optimizations
  Resolves: rhbz#1724996


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-26
changelog:
  - Skip test_startup_imports from test_site if we have a .pth file in sys.path
  Resolves: rhbz#1814392


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-27
changelog:
  - Add a sentinel value on the Hmac_members table of the fips compliant hmac module
  Resolves: rhbz#1800512


author: Victor Stinner <vstinner@python.org> - 3.6.8-30
changelog:
  - Remove downstream 00178-dont-duplicate-flags-in-sysconfig.patch which
    introduced a bug on distutils.sysconfig.get_config_var('LIBPL')
    (rhbz#1851090).


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-31
changelog:
  - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
  Resolves: rhbz#1856481
  - Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
  Resolves: rhbz#1854926


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-32
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in http.client
  Resolves: rhbz#1883257


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-33
changelog:
  - Add support for upstream architecture names
  https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names
  Resolves: rhbz#1868003


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-34
changelog:
  - Security fix for CVE-2020-27619: eval() call on content received via HTTP in the CJK codec tests
  Resolves: rhbz#1890237


author: Victor Stinner <vstinner@redhat.com> - 3.6.8-39
changelog:
  - Fix reentrant call to threading.enumerate() (rhbz#1959459)
  - Don't exit Python with abort() when a thread exit and there is no available
    file descriptor to load dynamically the libgcc_s.so.1 library (rhbz#1972293)


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-41
changelog:
  - Security fix for CVE-2021-3733: Denial of service when identifying crafted invalid RFCs
  Resolves: rhbz#1995234


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-43
changelog:
  - Change shouldRollover() methods of logging.handlers to only rollover regular files
  Resolves: rhbz#2009200


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-44
changelog:
  - Use the monotonic clock for theading.Condition
  - Use the monotonic clock for the global interpreter lock
  Resolves: rhbz#2003758


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-46
changelog:
  - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2047376, rhbz#2060435


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-50
changelog:
  - Security fix for CVE-2022-45061
  - Strip the LTO bytecode from python.o
  Resolves: rhbz#2144072, rhbz#2137707


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-58
changelog:
  - Security fix for CVE-2022-48564
  Resolves: RHEL-16674
  - Skip tests failing on s390x
  Resolves: RHEL-19252


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-70
changelog:
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189


author: zhangbinchen <zhangbinchen@openanolis.org> - 3.6.8-70.0.1
changelog:
  - Add Anolis platform
  - Support Loongarch for python3 (songmingliang@uniontech.com)
  - Fix testcase fails on loongarch64 (geliwei@openanolis.org)
  - cherry-pick `add sw patch #1182efa2f05c5804a55d35d45a9d72f97b64a9b2`. (Weisson@linux.alibaba.com)
    cherry-pick `sw use python of wordsize 64 #862dabb407d3f98c64f3a9d2675fcd3a6300a21f`.


author: Brian C. Lane <bcl@redhat.com> - 1.2.2-5
changelog:
  - Avoid printing TypeError traceback
  - gevent.pywsgi: Much improved handling of chunk trailers
    Backport fix for CVE-2023-41419
    Resolves: RHEL-17078


author: Lubos Uhliarik <luhliari@redhat.com> - 4.6.4-4
changelog:
  - Resolves: #1779705 - python3-mod_wsgi: Remove the Provides and Obsoletes for
    the name `mod_wsgi`


author: Tomas Orsava <torsava@redhat.com> - 1:1.14.3-5
changelog:
  - Switch runtime dependency of the python3-numpy-f2py package from
    python3-devel (that's now buildroot-only) to python3-libs-devel
  Resolves: rhbz#1610863


author: Tomas Orsava <torsava@redhat.com> - 2.7.4-3
changelog:
  - Revert switching Python 3 subpackages to the python3X- prefix
  - Switch only the requires for python3-devel/debug to the python36-prefix:
    the rest of the packages in the python36 collection will have the python3
    prefix to be unified with the Python 3 packages for Platform-Python


author: Mahailiang <mahailiang@openanolis.org> - 2.7.5-7.0.1
changelog:
  - Fix test_external_close_async check error
  - Sync from https://github.com/psycopg/psycopg2 (version 2.8)


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0-15
changelog:
  - enable vsftpd-based tests
  - run the test-suite for Python 3 only
  - do not disable TLS-SRP test because it is now supported by OpenSSL in Fedora


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0.2-4
changelog:
  - fix populating list of decoded strings (#1792213)
  - fix programming mistakes detected by static analyzers (#1666003)


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.10-16
changelog:
  - Subpackage python2-pyodbc has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.3-13
changelog:
  - Python 2 binary package renamed to python2-pyxattr
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Marek Kasik <mkasik@redhat.com> - 3.4.0-9
changelog:
  - Do not evaluate unichar element
  - Replace an invalid char with a correct one (rpminspect)
  - Resolves: RHEL-7010


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018.2-7
changelog:
  - Selectively build python2 or python3 based on current version.
  - Don't use pathfix.py as it fails prep on RHEL when building on systems
    do not have python installled.


author: Owen Taylor <otaylor@redhat.com> - 2018.2-9
changelog:
  - Fix build directory referenced in python2 build
  - Move some python3 code that escaped back into a conditional
    (BZ #1907561)


author: Petr Menšík <pemensik@redhat.com> - 1.16.0-1
changelog:
  - Upgrade to 9.16.0 (#2027735)
  - Update to recent version with compatibility with RHEL8 (#2027735)
  - Ensure also source level compatibility with previous version


author: Kaiqiang Wang <wangkaiqiang@inspur.com> - 1.16.2-6
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868


author: Paul Wouters <paul@xelerance.com> - 1.0.2-4
changelog:
  - Fix CFLAGS getting lost in build
  - Don't enable interface-automatic:yes because that
    causes unbound to listen on 0.0.0.0 instead of 127.0.0.1


author: Paul Wouters <paul@xelerance.com> - 1.0.2-5
changelog:
  - Only call ldconfig in -libs package
  - Move configure into build section
  - devel subpackage should only depend on libs subpackage


author: Paul Wouters <paul@xelerance.com> - 1.1.0-1
changelog:
  - Updated to version 1.1.0
  - Updated unbound.conf's statistics options and remote-control
    to work properly for munin
  - Added unbound-munin package
  - Generate unbound remote-control  key/certs on first startup
  - Required ldns is now 1.4.0


author: Adam Tkac <atkac redhat com> - 1.1.0-2
changelog:
  - unbound-1.1.0-log_open.patch
    - make sure log is opened before chroot call
    - tracked as http://www.nlnetlabs.nl/bugs/show_bug.cgi?id=219
  - removed /dev/log and /var/run/unbound and /etc/resolv.conf from
    chroot, not needed
  - don't mount files in chroot, it causes problems during updates
  - fixed typo in default config file


author: Paul Wouters <paul@xelerance.com> - 1.1.0-3
changelog:
  - Remove the chroot, obsoleted by SElinux
  - Add additional munin plugin links supported by unbound plugin
  - Move configuration directory from /var/lib/unbound to /etc/unbound
  - Modified unbound.init and unbound.conf to account for chroot changes
  - Updated unbound.conf with new available options
  - Enabled dns-0x20 protection per default


author: Paul Wouters <paul@xelerance.com> - 1.1.1-6
changelog:
  - Added scandir patch for trusted-keys-file: option, which
    is used to load multiple dnssec keys in bind file format


author: Paul Wouters <paul@xelerance.com> - 1.1.1-7
changelog:
  - Modified scandir patch to silently fail when wildcard matches nothing
  - Patch to allow unbound-checkconf to find empty wildcard matches


author: Paul Wouters <paul@xelerance.com - 1.2.0-1
changelog:
  - Updated to 1.2.0
  - Added dependancy on minimum SSL for CVE-2008-5077
  - Added dependancy on bc for unbound-munin
  - Added minimum requirement of libevent 1.4.5. Crashes with older versions
    (note: libevent is stale in EL-4 and not in EL-5, needs fixing there)
  - Removed dependancy on selinux-policy (will get used when available)
  - Enable options as per draft-wijngaards-dnsext-resolver-side-mitigation-00.txt
  - Enable unwanted-reply-threshold to mitigate against a Kaminsky attack
  - Enable val-clean-additional to drop addition unsigned data from signed
    response.
  - Removed patches (got merged into upstream)


author: Paul Wouters <paul@xelerance.com> - 1.3.0-1
changelog:
  - Updated to 1.3.0
  - Added unbound-python sub package. disabled for now
  - Patch from svn to fix DLV lookups
  - Patches from svn to detect wrong truncated response from BIND 9.6.1 with
    minimal-responses)
  - Added Default-Start and Default-Stop to unbound.init
  - Re-enabled --enable-sha2
  - Re-enabled glob.patch


author: Paul Wouters <paul@xelerance.com> - 1.4.1-2
changelog:
  - Removed dependancy for dnssec-conf
  - Added ISC DLV key (formerly in dnssec-conf)
  - Fixup old DLV locations in unbound.conf file via %post
  - Fix parent child disagreement handling and no-ipv6 present [svn r1953]


author: Paul Wouters <paul@xelerance.com> - 1.4.2-1
changelog:
  - Updated to 1.4.2 
  - Updated unbound.conf with new options
  - Enabled pre-fetching DNSKEY records (DNSSEC speedup)
  - Enabled re-fetching popular records before they expire
  - Enabled logging of DNSSEC validation errors


author: Paul Wouters <paul@xelerance.com> - 1.4.5-3
changelog:
  - Disable do-ipv6 per default - causes severe degradation on non-ipv6 machines
    (see comments in inbound.conf)


author: Paul Wouters <paul@xelerance.com> - 1.4.8-1
changelog:
  - Updated to 1.4.8
  - Enable root key for DNSSEC
  - Fix unbound-munin to use proper file (could cause excessive logging)
  - Build unbound-python per default
  - Disable gost as Fedora/EPEL does not allow ECC and has mangled openssl


author: Paul Wouters <paul@xelerance.com> - 1.4.11-1
changelog:
  - Updated to 1.4.11
  - removed integrated CVE patch
  - updated stock unbound.conf for new options introduced


author: Paul Wouters <paul@xelerance.com> - 1.4.12-2
changelog:
  - Fix for python module load in the server (Tom Hendrikx)
  - No longer enable --enable-debug as it causes degraded  performance
    under load.


author: Paul Wouters <paul@xelerance.com> - 1.4.13-1
changelog:
  - Upgraded to 1.4.13
  - Removed merged in pythonmod patch
  - Added EDNS1480 patch to fix unbound on broken EDNS/UDP networks
  - Fix python to go into sitearch instead of sitelib


author: Paul Wouters <paul@cypherpunks.ca> - 1.4.14-1
changelog:
  - Upgraded to 1.4.14 for CVE-2011-4528 / VU#209659
  - SSL-wrapped query support for dnssec-trigger
  - EDNS handling changes
  - Removed integrated EDNS patches
  - Disabled use-caps-for-id, GoDaddy domains now break on it
  - Enabled new harden-below-nxdomain


author: Paul Wouters <pwouters@redhat.com> - 1.4.16-2
changelog:
  - Don't ghost the directory (rhbz#788805)
  - Patch for unbound to support unbound-control forward_zone
    (needed for openswan in XAUTH mode)


author: Paul Wouters <pwouters@redhat.com> - 1.4.16-3
changelog:
  - Since the daemon links to the libs staticly, add Requires:
    (this is rhbz#745288)
  - Package up streamtcp as unbound-streamtcp (for monitoring)


author: Paul Wouters <pwouters@redhat.com> - 1.4.17-5
changelog:
  - Fix for unbound crasher (upstream bug #452)
  - Support libunbound functions in man pages and place in -devel


author: Paul Wouters <pwouters@redhat.com> - 1.4.18-1
changelog:
  - Updated to 1.4.18 (FIPS related fixes mostly)
  - Removed patches that were merged in upstream
  - Added comment to root.key


author: Paul Wouters <pwouters@redhat.com> - 1.4.18-5
changelog:
  - Patch to allow wildcards in include: statements
  - Add directories /etc/unbound/keys.d,conf.d,local.d with
    example entries
  - Added /etc/unbound/root.anchor, maintained by unbound-anchor
    which is installed as monthly cron and PreExec in systemd config
    (root.key is unused, but left installed in case people depend on it)
  - Native systemd (simple) and /etc/sysconfig/unbound support
  - Run unbound-checkconf in PreExec
  - Moved trust anchor related files to unbound-libs, as they can
    be used without the daemon.
  - sub packages now depends on base package of same arch
  - Build munin package as noarch
  - unbound-anchor moved to unbound-libs package. It is needed
    to update the root.anchor key file.


author: Paul Wouters <pwouters@redhat.com> - 1.4.18-6
changelog:
  - Patch to ensure stube-zone's aren't lost when using dnssec-triggerd
  - added unbound-munin.README file


author: Paul Wouters <pwouters@redhat.com> - 1.4.20-4
changelog:
  - Updated to 1.4.20
  - Build with full RELRO (not use -z,relro but with -z,relo,-z,now)
  - Fixup man page for unbound-control-setup
  - unbound.service should start before nss-lookup.target (rhbz#919955)
  - Removed patch for rhbz#888759 merged in upstream
  - Move root.anchor to /var/lib/unbound to make selinux policy easier for updating (rhbz#896599/rhbz#891008)
  - Move cronjob for root.anchor from unbound to unbound-libs, require crontabs
  - /etc/unbound (and all) should be owned by unbound-libs (rhbz#909691)
  - Remove Obsolete/Provides for dnssec-conf which was last seen in f13
  - Ensure any unbound-anchor failure in post is ignored


author: Paul Wouters <pwouters@redhat.com> - 1.4.20-5
changelog:
  - Fix cron job syntax (rhbz#951725)
  - Use install -p to prevent .rpmnew files that are identical to originals


author: Paul Wouters <pwouters@redhat.com> - 1.4.20-12
changelog:
  - Enable round-robin (with noths() patch)
  - Change cron and systemd service to use root.key, not root.anchor


author: Tomas Hozza <thozza@redhat.com> - 1.4.20-14
changelog:
  - remove missing unbound-rootkey.service from post/preun/postun sections
  - don't hardcode hardening flags, let hardened build macro handles it


author: Paul Wouters <pwouters@redhat.com> - 1.4.21-1
changelog:
  - Updated to 1.4.21, 
  - Enabled new max-udp-size: 3072 (so ANY isc.org won't fit)
  - Removed patched merged in by upstream
  - Enable statistics-cumulative for munin-plugin
  - Added outgoing-port-avoid: 0-32767 conformant to SElinux restrictions
  - Updated unbound.conf


author: Paul Wouters <pwouters@redhat.com> - 1.5.1-1
changelog:
  - Update to 1.5.1 for CVE-2014-8602 (rhbz#1172066)
  - Removed unbound-aarch64.patch which was merged upstream
  - Don't require autotools for non snapshots or run autoreconf


author: Paul Wouters <pwouters@redhat.com> - 1.5.3-1
changelog:
  - Updated to 1.5.3 which is a bugfix on 1.5.2 for sighup handling
  - Updated to 1.5.2 which fixes DNSSEC validation with different
    trust anchors upstream, local-zone has a new keyword 'inform'


author: Tomas Hozza <thozza@redhat.com> - 1.5.3-2
changelog:
  - Fix FTBFS (#1206129)
  - Build python3-unbound and python-unbound bindings for Python 3 and 2 (#1188080)


author: Tomas Hozza <thozza@redhat.com> - 1.5.3-3
changelog:
  - migrate cronjob to systemd timer unit (#1177285)
  - change the period for unbound-anchor from monthly to daily (#1180267)
  - Thanks to Tomasz Torcz <ttorcz@fedoraproject.org> for the initial patch


author: Paul Wouters <pwouters@redhat.com> - 1.5.3-4
changelog:
  - Fixup scriptlets causing systemctl: command not found
  - Resolves rhbz#1219587 Error in PREIN scriptlet in rpm package unbound-libs


author: Tomas Hozza <thozza@redhat.com> - 1.5.3-5
changelog:
  - unbound.service now Wants unbound-anchor.timer
  - unbound-anchor man page moved to the unbound-libs


author: Tomas Hozza <thozza@redhat.com> - 1.5.3-7
changelog:
  - Add option for maximum negative cache TTL (#1229599)
  - Use low maximum negative cache TTL (5 sec) (#1229596)


author: Tomas Hozza <thozza@redhat.com> - 1.5.4-2
changelog:
  - Start unbound-anchor.timer only on new installations
  - Rename root.anchor to root.key in %post section


author: Tomas Hozza <thozza@redhat.com> - 1.5.4-3
changelog:
  - Added ExecReload section to unbound.service (#1195785)
  - Removed After syslog.target since it is not needed any more


author: Tomas Hozza <thozza@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5 (#1269137)
  - Removed the anchor update from %post section of -libs subpackage (#1269137#c2)


author: Paul Wouters <pwouters@redhat.com> - 1.5.7-1
changelog:
  - Update to 1.5.7
  - Enable query minimalization for enhanced DNS query privacy
  - Enable nxdomain hardening to assist with query minimalization and SBLs
  - Updated default unbound.conf for new features from upstream.


author: Paul Wouters <pwouters@redhat.com> - 1.5.8-1
changelog:
  - Update to 1.5.8 (rhbz#1313831) which incorporates rhbz#1294339 patch
  - Updated unbound.conf with new upstream options
  - Enabled ip-transparent: yes (see rhbz#1291449)


author: Paul Wouters <pwouters@redhat.com> - 1.5.10-1
changelog:
  - Updated to 1.5.10 (better TCP handling, bugfixes)
  - Install pkgconfig file in -devel package
  - Updated unbound.conf


author: Paul Wouters <pwouters@redhat.com> - 1.6.4-1
changelog:
  - Updated to 1.6.4 full release, patch to allow missing ipsechook
  - Resolves rhbz#1465575 unbound fails to start up, complains about missing ipsecmod-hook


author: Paul Wouters <pwouters@redhat.com> - 1.6.4-4
changelog:
  - Rebuilt with KSK2017 added to root.key and root.anchor
  - Remove noreplace for root key files. We can only improve these files over local copies


author: Paul Wouters <pwouters@redhat.com> - 1.6.6-1
changelog:
  - Resolves: rhbz#1483572 unbound-1.6.6 is available
  - Resolves: rhbz#1465575 unbound fails to start up, complains about missing ipsecmod-hook (edit)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.6.7-2
changelog:
  - Python 2 binary package renamed to python2-unbound
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Paul Wouters <pwouters@redhat.com> - 1.6.8-1
changelog:
  - Resolves rhbz#1483572 unbound-1.6.8 is available
  - Resolves rhbz#1507049 CVE-2017-15105 unbound: Improper validation of wildcard synthesized NSEC records
  - Resolves rhbz#1536518 CVE-2017-15105 unbound: Improper validation of wildcard synthesized NSEC records [fedora-all]


author: Petr Menšík <pemensik@redhat.com> - 1.7.0-5
changelog:
  - Require gcc and make on build
  - Remove group, simplify systemd requires
  - Simplify building with single python version, make python3 primary


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-12
changelog:
  - Remove KSK-2010 from configuration files
  - Resolves: rhbz#1665502
  - Replace legacy directory /var/run/ with /run
  - Resolves: rhbz#1766463
  - Resolves: rhbz#1805978
  - Fix memory leak when DNS over TLS forwarding is configured
  - Resolves: rhbz#1819870


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-13
changelog:
  - Fix two previous patches and add missing patch lines to %prep
  - Fix amplifying an incoming query into a large number of queries directed to a target
  - Resolves: rhbz#1839178 (CVE-2020-12662)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-14
changelog:
  - Fix unbound-1.7.3-amplifying-an-incoming-query.patch patch
  - Resolves: rhbz#1839178 (CVE-2020-12662)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-15
changelog:
  - Fix SPEC file to not check md5 mtime and size of /var/lib/unbound/root.key
  - Resolves: rhbz#1714175
  - Use system-wide crypto policy setting (PROFILE=SYSTEM) instead of custom setting
  - Resolves: rhbz#1842837
  - Enable additional logging in unbound
  - Resolves: rhbz#1850460
  - security hardening from x41 report
  - Resolves: rhbz#1859933
  - symbolic link traversal when writing PID file
  - Resolves: rhbz#1899058


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-16
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1922448


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-17
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1830625


author: Richard Lescak <rlescak@gmail.com> - 1.7.3-18
changelog:
  - Change file mode before owner when configuring remote control unix socket to avoid AVC denials
  - Resolves: rhbz#2038251


author: Charalampos Stratakis <cstratak@redhat.com> - 1.15.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Joel Capitao <jcapitao@redhat.com>
        John Dulaney <jdulaney@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Parag Nemade <pnemade@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 37.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.9-1
changelog:
  - Rebase to 3.11.9
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix expat tests for the latest expat security release
  Resolves: RHEL-33672, RHEL-33684


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <marcel.plch@protonmail.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@gmail.com>
        Sahana Prasad <sahana@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Till Maas <opensource@till.name>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Victor Stinner <vstinner@python.org>
        Ville Skyttä <ville.skytta@iki.fi>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomas Orsava <torsava@redhat.com> - 3.11.4-4
changelog:
  - Add the import_all_modules_py3_11.py file for the python3.11-rpm-macros subpackage
  Resolves: rhbz#2207631


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.5-1
changelog:
  - Rebase to 3.11.5
  - Security fixes for CVE-2023-40217 and CVE-2023-41105
  Resolves: RHEL-3047, RHEL-3267


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-1
changelog:
  - Update to 3.11.13
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98037, RHEL-98006, RHEL-98223, RHEL-98114, RHEL-98200


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <fale@redhat.com>
        Igor Raits <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jcollie@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomas Orsava <torsava@redhat.com> - 4.9.2-4
changelog:
  - Bring back the isoschematron submodule,
    but without the validation of the schema file itself
  - Resolves: RHEL-5569


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <sharkcz@fedoraproject.org>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <limburgher@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 6.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <ausil@fedoraproject.org>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.8.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.13-1
changelog:
  - Rebase to 3.8.13
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.14-1
changelog:
  - Rebase to 3.8.14
  - Security fixes for CVE-2020-10735 and CVE-2021-28861
  Resolves: rhbz#1834423, rhbz#2120642


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.17-1
changelog:
  - Update to 3.8.17
  - Security fix for CVE-2023-24329
  - Add filters for tarfile extraction (CVE-2007-4559, PEP-706)
  Resolves: rhbz#2173917, rhbz#263261


author: Petr Viktorin <pviktori@redhat.com> - 1.2.1-6
changelog:
  - Remove build dependency on python2-pytest-xdist and python2-pytest-timeout
  - Enable parallel tests in Python 3 %check
  - Use macros for Python interpreter in tests


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.1-1
changelog:
  - Update to 1.3.1 (#1674101)
  - Drop Python 2 packages (not supported by SciPy >= 1.3)
  - Backported upstream patch for cKDTree (fixes FTBFS)


author: Lumír Balhar <lbalhar@redhat.com> - 1.3.1-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983


author: DengXiewei <dengxiewei@linux.alibaba.com> - 1.3.1-5.0.1
changelog:
  - Adding -fallow-argument-mismatch workaround for build failure with gfortran 10
  - Change -fallow-argument-mismatch flag condition for build failure


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33676, RHEL-33688


author: Miro Hrončok <mhroncok@redhat.com> - 3.8.0~a1-3
changelog:
  - Reduced default build flags used to build extension modules
    https://fedoraproject.org/wiki/Changes/Python_Extension_Flags


author: Miro Hrončok <mhroncok@redhat.com> - 3.8.0~a4-2
changelog:
  - Remove a faulty patch that resulted in invalid value of
    distutils.sysconfig.get_config_var('LIBPL') (#1710767)


author: Miro Hrončok <mhroncok@redhat.com> - 3.8.0~b4-1
changelog:
  - Rebased to Python 3.8.0b4
  - Enable Profile-guided optimization for all arches, not just x86 (#1741015)


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0~a1-3
changelog:
  - Build Python with -fno-semantic-interposition for better performance
  - https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSpeedup


author: Marcel Plch <mplch@redhat.com> - 3.9.0~b4-2
changelog:
  - Remove large, autogenerated Python sources and redundant pycache levels to reduce filesystem footprint


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0~rc2-2
changelog:
  - Use upstream architecture names on Fedora 34+
  - https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.6-1
changelog:
  - Update to 3.9.6
  - Fix CVE-2021-29921: Improper input validation of octal strings in the ipaddress module
  Resolves: rhbz#1957458


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.13-1
changelog:
  - Update to 3.9.13
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.14-1
changelog:
  - Update to 3.9.14
  - Security fixes for CVE-2020-10735 and CVE-2021-28861
  Resolves: rhbz#1834423, rhbz#2120642


author: Lumír Balhar <lbalhar@redhat.com> - 3.9.25-2
changelog:
  - Add explicit BR: libxcrypt-devel
  - Properly apply exported CFLAGS for dtrace/systemtap builds
  - Update to Python 3.9.25
  - Move _sysconfigdata_d_linux*.py to the debug subpackage
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
  Resolves: RHEL-128539


author: Nikola Forró <nforro@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - Increase test timeout, 300 seconds is not always enough
    for test_logpdf_overflow on s390x
    resolves: #1894887


author: Tomas Orsava <torsava@redhat.com> - 1.5.4-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983 rhbz#1877430


author: Danilo de Paula <ddepaula@redhat.com> - 2.12.0-11.el8
changelog:
  - Resolves: bz#1574406
    ([RHEL 8][qemu-kvm] Failed to find romfile "efi-virtio.rom")
  - Resolves: bz#1569675
    (Backwards compatibility of pc-*-rhel7.5.0 and older machine-types)
  - Resolves: bz#1576045
    (Fix build issue by using python3)
  - Resolves: bz#1571145
    (qemu-kvm segfaults on RHEL 8 when run guestfsd under TCG)


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 2.12.0-13.el8
changelog:
  - Resolves: bz#1508137
    ([IBM 8.0 FEAT] KVM: Interactive Bootloader (qemu))
  - Resolves: bz#1513558
    (Remove RHEL6 machine types)
  - Resolves: bz#1568600
    (pc-i440fx-rhel7.6.0 and pc-q35-rhel7.6.0 machine types (x86))
  - Resolves: bz#1570029
    ([IBM 8.0 FEAT] KVM: 3270 Connectivity - qemu part)
  - Resolves: bz#1578855
    (Enable Native Ceph support on non x86_64 CPUs)
  - Resolves: bz#1585651
    (RHEL 7.6 new pseries machine type (ppc64le))
  - Resolves: bz#1592337
    ([IBM 8.0 FEAT] KVM: CPU Model z14 ZR1 (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-14.el8
changelog:
  - kvm-vfio-pci-Default-display-option-to-off.patch [bz#1590511]
  - kvm-python-futurize-f-libfuturize.fixes.fix_print_with_i.patch [bz#1571533]
  - kvm-python-futurize-f-lib2to3.fixes.fix_except.patch [bz#1571533]
  - kvm-Revert-Defining-a-shebang-for-python-scripts.patch [bz#1571533]
  - kvm-spec-Fix-ambiguous-python-interpreter-name.patch [bz#1571533]
  - kvm-qemu-ga-blacklisting-guest-exec-and-guest-exec-statu.patch [bz#1518132]
  - kvm-redhat-rewrap-build_configure.sh-cmdline-for-the-rh-.patch []
  - kvm-redhat-remove-the-VTD-LIVE_BLOCK_OPS-and-RHV-options.patch []
  - kvm-redhat-fix-the-rh-env-prep-target-s-dependency-on-th.patch []
  - kvm-redhat-remove-dead-code-related-to-s390-not-s390x.patch []
  - kvm-redhat-sync-compiler-flags-from-the-spec-file-to-rh-.patch []
  - kvm-redhat-sync-guest-agent-enablement-and-tcmalloc-usag.patch []
  - kvm-redhat-fix-up-Python-3-dependency-for-building-QEMU.patch []
  - kvm-redhat-fix-up-Python-dependency-for-SRPM-generation.patch []
  - kvm-redhat-disable-glusterfs-dependency-support-temporar.patch []
  - Resolves: bz#1518132
    (Ensure file access RPCs are disabled by default)
  - Resolves: bz#1571533
    (Convert qemu-kvm python scripts to python3)
  - Resolves: bz#1590511
    (Fails to start guest with Intel vGPU device)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-15.el8
changelog:
  - kvm-spapr-Add-ibm-max-associativity-domains-property.patch [bz#1599593]
  - kvm-Revert-spapr-Don-t-allow-memory-hotplug-to-memory-le.patch [bz#1599593]
  - kvm-simpletrace-Convert-name-from-mapping-record-to-str.patch [bz#1594969]
  - kvm-tests-fix-TLS-handshake-failure-with-TLS-1.3.patch [bz#1602403]
  - Resolves: bz#1594969
    (simpletrace.py fails when running with Python 3)
  - Resolves: bz#1599593
    (User can't hotplug memory to less memory numa node on rhel8)
  - Resolves: bz#1602403
    (test-crypto-tlssession unit test fails with assertions)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-16.el8
changelog:
  - kvm-spapr-Correct-inverted-test-in-spapr_pc_dimm_node.patch [bz#1601671]
  - kvm-osdep-powerpc64-align-memory-to-allow-2MB-radix-THP-.patch [bz#1601317]
  - kvm-RHEL-8.0-Add-pseries-rhel7.6.0-sxxm-machine-type.patch [bz#1595501]
  - kvm-i386-Helpers-to-encode-cache-information-consistentl.patch [bz#1597739]
  - kvm-i386-Add-cache-information-in-X86CPUDefinition.patch [bz#1597739]
  - kvm-i386-Initialize-cache-information-for-EPYC-family-pr.patch [bz#1597739]
  - kvm-i386-Add-new-property-to-control-cache-info.patch [bz#1597739]
  - kvm-i386-Clean-up-cache-CPUID-code.patch [bz#1597739]
  - kvm-i386-Populate-AMD-Processor-Cache-Information-for-cp.patch [bz#1597739]
  - kvm-i386-Add-support-for-CPUID_8000_001E-for-AMD.patch [bz#1597739]
  - kvm-i386-Fix-up-the-Node-id-for-CPUID_8000_001E.patch [bz#1597739]
  - kvm-i386-Enable-TOPOEXT-feature-on-AMD-EPYC-CPU.patch [bz#1597739]
  - kvm-i386-Remove-generic-SMT-thread-check.patch [bz#1597739]
  - kvm-i386-Allow-TOPOEXT-to-be-enabled-on-older-kernels.patch [bz#1597739]
  - Resolves: bz#1595501
    (Create pseries-rhel7.6.0-sxxm machine type)
  - Resolves: bz#1597739
    (AMD EPYC/Zen SMT support for KVM / QEMU guest (qemu-kvm))
  - Resolves: bz#1601317
    (RHEL8.0 - qemu patch to align memory to allow 2MB THP)
  - Resolves: bz#1601671
    (After rebooting guest,all the hot plug memory will be assigned to the 1st numa node.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-17.el8
changelog:
  - kvm-linux-headers-Update-to-include-KVM_CAP_S390_HPAGE_1.patch [bz#1610906]
  - kvm-s390x-Enable-KVM-huge-page-backing-support.patch [bz#1610906]
  - kvm-redhat-s390x-add-hpage-1-to-kvm.conf.patch [bz#1610906]
  - Resolves: bz#1610906
    ([IBM 8.0 FEAT] KVM: Huge Pages - libhugetlbfs Enablement - qemu-kvm part)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-18.el8
changelog:
  Mass import from RHEL 7.6 qemu-kvm-rhev, including fixes to the following BZs:

  - kvm-AArch64-Add-virt-rhel7.6-machine-type.patch [bz#1558723]
  - kvm-cpus-Fix-event-order-on-resume-of-stopped-guest.patch [bz#1566153]
  - kvm-qemu-img-Check-post-truncation-size.patch [bz#1523065]
  - kvm-vga-catch-depth-0.patch [bz#1575541]
  - kvm-Fix-x-hv-max-vps-compat-value-for-7.4-machine-type.patch [bz#1583959]
  - kvm-ccid-card-passthru-fix-regression-in-realize.patch [bz#1584984]
  - kvm-Use-4-MB-vram-for-cirrus.patch [bz#1542080]
  - kvm-spapr_pci-Remove-unhelpful-pagesize-warning.patch [bz#1505664]
  - kvm-rpm-Add-nvme-VFIO-driver-to-rw-whitelist.patch [bz#1416180]
  - kvm-qobject-Use-qobject_to-instead-of-type-cast.patch [bz#1557995]
  - kvm-qobject-Ensure-base-is-at-offset-0.patch [bz#1557995]
  - kvm-qobject-use-a-QObjectBase_-struct.patch [bz#1557995]
  - kvm-qobject-Replace-qobject_incref-QINCREF-qobject_decre.patch [bz#1557995]
  - kvm-qobject-Modify-qobject_ref-to-return-obj.patch [bz#1557995]
  - kvm-rbd-Drop-deprecated-drive-parameter-filename.patch [bz#1557995]
  - kvm-iscsi-Drop-deprecated-drive-parameter-filename.patch [bz#1557995]
  - kvm-block-Add-block-specific-QDict-header.patch [bz#1557995]
  - kvm-qobject-Move-block-specific-qdict-code-to-block-qdic.patch [bz#1557995]
  - kvm-block-Fix-blockdev-for-certain-non-string-scalars.patch [bz#1557995]
  - kvm-block-Fix-drive-for-certain-non-string-scalars.patch [bz#1557995]
  - kvm-block-Clean-up-a-misuse-of-qobject_to-in-.bdrv_co_cr.patch [bz#1557995]
  - kvm-block-Factor-out-qobject_input_visitor_new_flat_conf.patch [bz#1557995]
  - kvm-block-Make-remaining-uses-of-qobject-input-visitor-m.patch [bz#1557995]
  - kvm-block-qdict-Simplify-qdict_flatten_qdict.patch [bz#1557995]
  - kvm-block-qdict-Tweak-qdict_flatten_qdict-qdict_flatten_.patch [bz#1557995]
  - kvm-block-qdict-Clean-up-qdict_crumple-a-bit.patch [bz#1557995]
  - kvm-block-qdict-Simplify-qdict_is_list-some.patch [bz#1557995]
  - kvm-check-block-qdict-Rename-qdict_flatten-s-variables-f.patch [bz#1557995]
  - kvm-check-block-qdict-Cover-flattening-of-empty-lists-an.patch [bz#1557995]
  - kvm-block-Fix-blockdev-blockdev-add-for-empty-objects-an.patch [bz#1557995]
  - kvm-rbd-New-parameter-auth-client-required.patch [bz#1557995]
  - kvm-rbd-New-parameter-key-secret.patch [bz#1557995]
  - kvm-block-mirror-honor-ratelimit-again.patch [bz#1572856]
  - kvm-block-mirror-Make-cancel-always-cancel-pre-READY.patch [bz#1572856]
  - kvm-iotests-Add-test-for-cancelling-a-mirror-job.patch [bz#1572856]
  - kvm-iotests-Split-214-off-of-122.patch [bz#1518738]
  - kvm-block-Add-COR-filter-driver.patch [bz#1518738]
  - kvm-block-BLK_PERM_WRITE-includes-._UNCHANGED.patch [bz#1518738]
  - kvm-block-Add-BDRV_REQ_WRITE_UNCHANGED-flag.patch [bz#1518738]
  - kvm-block-Set-BDRV_REQ_WRITE_UNCHANGED-for-COR-writes.patch [bz#1518738]
  - kvm-block-quorum-Support-BDRV_REQ_WRITE_UNCHANGED.patch [bz#1518738]
  - kvm-block-Support-BDRV_REQ_WRITE_UNCHANGED-in-filters.patch [bz#1518738]
  - kvm-iotests-Clean-up-wrap-image-in-197.patch [bz#1518738]
  - kvm-iotests-Copy-197-for-COR-filter-driver.patch [bz#1518738]
  - kvm-iotests-Add-test-for-COR-across-nodes.patch [bz#1518738]
  - kvm-qemu-io-Use-purely-string-blockdev-options.patch [bz#1576598]
  - kvm-qemu-img-Use-only-string-options-in-img_open_opts.patch [bz#1576598]
  - kvm-iotests-Add-test-for-U-force-share-conflicts.patch [bz#1576598]
  - kvm-qemu-io-Drop-command-functions-return-values.patch [bz#1519617]
  - kvm-qemu-io-Let-command-functions-return-error-code.patch [bz#1519617]
  - kvm-qemu-io-Exit-with-error-when-a-command-failed.patch [bz#1519617]
  - kvm-iotests.py-Add-qemu_io_silent.patch [bz#1519617]
  - kvm-iotests-Let-216-make-use-of-qemu-io-s-exit-code.patch [bz#1519617]
  - kvm-qcow2-Repair-OFLAG_COPIED-when-fixing-leaks.patch [bz#1527085]
  - kvm-iotests-Repairing-error-during-snapshot-deletion.patch [bz#1527085]
  - kvm-block-Make-bdrv_is_writable-public.patch [bz#1588039]
  - kvm-qcow2-Do-not-mark-inactive-images-corrupt.patch [bz#1588039]
  - kvm-iotests-Add-case-for-a-corrupted-inactive-image.patch [bz#1588039]
  - kvm-main-loop-drop-spin_counter.patch [bz#1168213]
  - kvm-target-ppc-Factor-out-the-parsing-in-kvmppc_get_cpu_.patch [bz#1560847]
  - kvm-target-ppc-Don-t-require-private-l1d-cache-on-POWER8.patch [bz#1560847]
  - kvm-ppc-spapr_caps-Don-t-disable-cap_cfpc-on-POWER8-by-d.patch [bz#1560847]
  - kvm-qxl-fix-local-renderer-crash.patch [bz#1567733]
  - kvm-qemu-img-Amendment-support-implies-create_opts.patch [bz#1537956]
  - kvm-block-Add-Error-parameter-to-bdrv_amend_options.patch [bz#1537956]
  - kvm-qemu-option-Pull-out-Supported-options-print.patch [bz#1537956]
  - kvm-qemu-img-Add-print_amend_option_help.patch [bz#1537956]
  - kvm-qemu-img-Recognize-no-creation-support-in-o-help.patch [bz#1537956]
  - kvm-iotests-Test-help-option-for-unsupporting-formats.patch [bz#1537956]
  - kvm-iotests-Rework-113.patch [bz#1537956]
  - kvm-qemu-img-Resolve-relative-backing-paths-in-rebase.patch [bz#1569835]
  - kvm-iotests-Add-test-for-rebasing-with-relative-paths.patch [bz#1569835]
  - kvm-qemu-img-Special-post-backing-convert-handling.patch [bz#1527898]
  - kvm-iotests-Test-post-backing-convert-target-behavior.patch [bz#1527898]
  - kvm-migration-calculate-expected_downtime-with-ram_bytes.patch [bz#1564576]
  - kvm-sheepdog-Fix-sd_co_create_opts-memory-leaks.patch [bz#1513543]
  - kvm-qemu-iotests-reduce-chance-of-races-in-185.patch [bz#1513543]
  - kvm-blockjob-do-not-cancel-timer-in-resume.patch [bz#1513543]
  - kvm-nfs-Fix-error-path-in-nfs_options_qdict_to_qapi.patch [bz#1513543]
  - kvm-nfs-Remove-processed-options-from-QDict.patch [bz#1513543]
  - kvm-blockjob-drop-block_job_pause-resume_all.patch [bz#1513543]
  - kvm-blockjob-expose-error-string-via-query.patch [bz#1513543]
  - kvm-blockjob-Fix-assertion-in-block_job_finalize.patch [bz#1513543]
  - kvm-blockjob-Wrappers-for-progress-counter-access.patch [bz#1513543]
  - kvm-blockjob-Move-RateLimit-to-BlockJob.patch [bz#1513543]
  - kvm-blockjob-Implement-block_job_set_speed-centrally.patch [bz#1513543]
  - kvm-blockjob-Introduce-block_job_ratelimit_get_delay.patch [bz#1513543]
  - kvm-blockjob-Add-block_job_driver.patch [bz#1513543]
  - kvm-blockjob-Update-block-job-pause-resume-documentation.patch [bz#1513543]
  - kvm-blockjob-Improve-BlockJobInfo.offset-len-documentati.patch [bz#1513543]
  - kvm-job-Create-Job-JobDriver-and-job_create.patch [bz#1513543]
  - kvm-job-Rename-BlockJobType-into-JobType.patch [bz#1513543]
  - kvm-job-Add-JobDriver.job_type.patch [bz#1513543]
  - kvm-job-Add-job_delete.patch [bz#1513543]
  - kvm-job-Maintain-a-list-of-all-jobs.patch [bz#1513543]
  - kvm-job-Move-state-transitions-to-Job.patch [bz#1513543]
  - kvm-job-Add-reference-counting.patch [bz#1513543]
  - kvm-job-Move-cancelled-to-Job.patch [bz#1513543]
  - kvm-job-Add-Job.aio_context.patch [bz#1513543]
  - kvm-job-Move-defer_to_main_loop-to-Job.patch [bz#1513543]
  - kvm-job-Move-coroutine-and-related-code-to-Job.patch [bz#1513543]
  - kvm-job-Add-job_sleep_ns.patch [bz#1513543]
  - kvm-job-Move-pause-resume-functions-to-Job.patch [bz#1513543]
  - kvm-job-Replace-BlockJob.completed-with-job_is_completed.patch [bz#1513543]
  - kvm-job-Move-BlockJobCreateFlags-to-Job.patch [bz#1513543]
  - kvm-blockjob-Split-block_job_event_pending.patch [bz#1513543]
  - kvm-job-Add-job_event_.patch [bz#1513543]
  - kvm-job-Move-single-job-finalisation-to-Job.patch [bz#1513543]
  - kvm-job-Convert-block_job_cancel_async-to-Job.patch [bz#1513543]
  - kvm-job-Add-job_drain.patch [bz#1513543]
  - kvm-job-Move-.complete-callback-to-Job.patch [bz#1513543]
  - kvm-job-Move-job_finish_sync-to-Job.patch [bz#1513543]
  - kvm-job-Switch-transactions-to-JobTxn.patch [bz#1513543]
  - kvm-job-Move-transactions-to-Job.patch [bz#1513543]
  - kvm-job-Move-completion-and-cancellation-to-Job.patch [bz#1513543]
  - kvm-block-Cancel-job-in-bdrv_close_all-callers.patch [bz#1513543]
  - kvm-job-Add-job_yield.patch [bz#1513543]
  - kvm-job-Add-job_dismiss.patch [bz#1513543]
  - kvm-job-Add-job_is_ready.patch [bz#1513543]
  - kvm-job-Add-job_transition_to_ready.patch [bz#1513543]
  - kvm-job-Move-progress-fields-to-Job.patch [bz#1513543]
  - kvm-job-Introduce-qapi-job.json.patch [bz#1513543]
  - kvm-job-Add-JOB_STATUS_CHANGE-QMP-event.patch [bz#1513543]
  - kvm-job-Add-lifecycle-QMP-commands.patch [bz#1513543]
  - kvm-job-Add-query-jobs-QMP-command.patch [bz#1513543]
  - kvm-blockjob-Remove-BlockJob.driver.patch [bz#1513543]
  - kvm-iotests-Move-qmp_to_opts-to-VM.patch [bz#1513543]
  - kvm-qemu-iotests-Test-job-with-block-jobs.patch [bz#1513543]
  - kvm-vdi-Fix-vdi_co_do_create-return-value.patch [bz#1513543]
  - kvm-vhdx-Fix-vhdx_co_create-return-value.patch [bz#1513543]
  - kvm-job-Add-error-message-for-failing-jobs.patch [bz#1513543]
  - kvm-block-create-Make-x-blockdev-create-a-job.patch [bz#1513543]
  - kvm-qemu-iotests-Add-VM.get_qmp_events_filtered.patch [bz#1513543]
  - kvm-qemu-iotests-Add-VM.qmp_log.patch [bz#1513543]
  - kvm-qemu-iotests-Add-iotests.img_info_log.patch [bz#1513543]
  - kvm-qemu-iotests-Add-VM.run_job.patch [bz#1513543]
  - kvm-qemu-iotests-iotests.py-helper-for-non-file-protocol.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-206-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-207-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-210-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-211-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-212-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-213-for-blockdev-create-job.patch [bz#1513543]
  - kvm-block-create-Mark-blockdev-create-stable.patch [bz#1513543]
  - kvm-jobs-fix-stale-wording.patch [bz#1513543]
  - kvm-jobs-fix-verb-references-in-docs.patch [bz#1513543]
  - kvm-iotests-Fix-219-s-timing.patch [bz#1513543]
  - kvm-iotests-improve-pause_job.patch [bz#1513543]
  - kvm-rpm-Whitelist-copy-on-read-block-driver.patch [bz#1518738]
  - kvm-rpm-add-throttle-driver-to-rw-whitelist.patch [bz#1591076]
  - kvm-usb-host-skip-open-on-pending-postload-bh.patch [bz#1572851]
  - kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1574216]
  - kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1574216]
  - kvm-block-file-posix-Pass-FD-to-locking-helpers.patch [bz#1519144]
  - kvm-block-file-posix-File-locking-during-creation.patch [bz#1519144]
  - kvm-iotests-Add-creation-test-to-153.patch [bz#1519144]
  - kvm-vhost-user-add-Net-prefix-to-internal-state-structur.patch [bz#1526645]
  - kvm-virtio-support-setting-memory-region-based-host-noti.patch [bz#1526645]
  - kvm-vhost-user-support-receiving-file-descriptors-in-sla.patch [bz#1526645]
  - kvm-osdep-add-wait.h-compat-macros.patch [bz#1526645]
  - kvm-vhost-user-bridge-support-host-notifier.patch [bz#1526645]
  - kvm-vhost-allow-backends-to-filter-memory-sections.patch [bz#1526645]
  - kvm-vhost-user-allow-slave-to-send-fds-via-slave-channel.patch [bz#1526645]
  - kvm-vhost-user-introduce-shared-vhost-user-state.patch [bz#1526645]
  - kvm-vhost-user-support-registering-external-host-notifie.patch [bz#1526645]
  - kvm-libvhost-user-support-host-notifier.patch [bz#1526645]
  - kvm-block-Introduce-API-for-copy-offloading.patch [bz#1482537]
  - kvm-raw-Check-byte-range-uniformly.patch [bz#1482537]
  - kvm-raw-Implement-copy-offloading.patch [bz#1482537]
  - kvm-qcow2-Implement-copy-offloading.patch [bz#1482537]
  - kvm-file-posix-Implement-bdrv_co_copy_range.patch [bz#1482537]
  - kvm-iscsi-Query-and-save-device-designator-when-opening.patch [bz#1482537]
  - kvm-iscsi-Create-and-use-iscsi_co_wait_for_task.patch [bz#1482537]
  - kvm-iscsi-Implement-copy-offloading.patch [bz#1482537]
  - kvm-block-backend-Add-blk_co_copy_range.patch [bz#1482537]
  - kvm-qemu-img-Convert-with-copy-offloading.patch [bz#1482537]
  - kvm-qcow2-Fix-src_offset-in-copy-offloading.patch [bz#1482537]
  - kvm-iscsi-Don-t-blindly-use-designator-length-in-respons.patch [bz#1482537]
  - kvm-file-posix-Fix-EINTR-handling.patch [bz#1482537]
  - kvm-usb-storage-Add-rerror-werror-properties.patch [bz#1595180]
  - kvm-numa-clarify-error-message-when-node-index-is-out-of.patch [bz#1578381]
  - kvm-qemu-iotests-Update-026.out.nocache-reference-output.patch [bz#1528541]
  - kvm-qcow2-Free-allocated-clusters-on-write-error.patch [bz#1528541]
  - kvm-qemu-iotests-Test-qcow2-not-leaking-clusters-on-writ.patch [bz#1528541]
  - kvm-qemu-options-Add-missing-newline-to-accel-help-text.patch [bz#1586313]
  - kvm-xhci-fix-guest-triggerable-assert.patch [bz#1594135]
  - kvm-virtio-gpu-tweak-scanout-disable.patch [bz#1589634]
  - kvm-virtio-gpu-update-old-resource-too.patch [bz#1589634]
  - kvm-virtio-gpu-disable-scanout-when-backing-resource-is-.patch [bz#1589634]
  - kvm-block-Don-t-silently-truncate-node-names.patch [bz#1549654]
  - kvm-pr-helper-fix-socket-path-default-in-help.patch [bz#1533158]
  - kvm-pr-helper-fix-assertion-failure-on-failed-multipath-.patch [bz#1533158]
  - kvm-pr-manager-helper-avoid-SIGSEGV-when-writing-to-the-.patch [bz#1533158]
  - kvm-pr-manager-put-stubs-in-.c-file.patch [bz#1533158]
  - kvm-pr-manager-add-query-pr-managers-QMP-command.patch [bz#1533158]
  - kvm-pr-manager-helper-report-event-on-connection-disconn.patch [bz#1533158]
  - kvm-pr-helper-avoid-error-on-PR-IN-command-with-zero-req.patch [bz#1533158]
  - kvm-pr-helper-Rework-socket-path-handling.patch [bz#1533158]
  - kvm-pr-manager-helper-fix-memory-leak-on-event.patch [bz#1533158]
  - kvm-object-fix-OBJ_PROP_LINK_UNREF_ON_RELEASE-ambivalenc.patch [bz#1556678]
  - kvm-usb-hcd-xhci-test-add-a-test-for-ccid-hotplug.patch [bz#1556678]
  - kvm-Revert-usb-release-the-created-buses.patch [bz#1556678]
  - kvm-file-posix-Fix-creation-locking.patch [bz#1599335]
  - kvm-file-posix-Unlock-FD-after-creation.patch [bz#1599335]
  - kvm-ahci-trim-signatures-on-raise-lower.patch [bz#1584914]
  - kvm-ahci-fix-PxCI-register-race.patch [bz#1584914]
  - kvm-ahci-don-t-schedule-unnecessary-BH.patch [bz#1584914]
  - kvm-qcow2-Fix-qcow2_truncate-error-return-value.patch [bz#1595173]
  - kvm-block-Convert-.bdrv_truncate-callback-to-coroutine_f.patch [bz#1595173]
  - kvm-qcow2-Remove-coroutine-trampoline-for-preallocate_co.patch [bz#1595173]
  - kvm-block-Move-bdrv_truncate-implementation-to-io.c.patch [bz#1595173]
  - kvm-block-Use-tracked-request-for-truncate.patch [bz#1595173]
  - kvm-file-posix-Make-.bdrv_co_truncate-asynchronous.patch [bz#1595173]
  - kvm-block-Fix-copy-on-read-crash-with-partial-final-clus.patch [bz#1590640]
  - kvm-block-fix-QEMU-crash-with-scsi-hd-and-drive_del.patch [bz#1599515]
  - kvm-virtio-rng-process-pending-requests-on-DRIVER_OK.patch [bz#1576743]
  - kvm-file-posix-specify-expected-filetypes.patch [bz#1525829]
  - kvm-iotests-add-test-226-for-file-driver-types.patch [bz#1525829]
  - kvm-block-dirty-bitmap-add-lock-to-bdrv_enable-disable_d.patch [bz#1207657]
  - kvm-qapi-add-x-block-dirty-bitmap-enable-disable.patch [bz#1207657]
  - kvm-qmp-transaction-support-for-x-block-dirty-bitmap-ena.patch [bz#1207657]
  - kvm-qapi-add-x-block-dirty-bitmap-merge.patch [bz#1207657]
  - kvm-qapi-add-disabled-parameter-to-block-dirty-bitmap-ad.patch [bz#1207657]
  - kvm-block-dirty-bitmap-add-bdrv_enable_dirty_bitmap_lock.patch [bz#1207657]
  - kvm-dirty-bitmap-fix-double-lock-on-bitmap-enabling.patch [bz#1207657]
  - kvm-block-qcow2-bitmap-fix-free_bitmap_clusters.patch [bz#1207657]
  - kvm-qcow2-add-overlap-check-for-bitmap-directory.patch [bz#1207657]
  - kvm-blockdev-enable-non-root-nodes-for-backup-source.patch [bz#1207657]
  - kvm-iotests-add-222-to-test-basic-fleecing.patch [bz#1207657]
  - kvm-qcow2-Remove-dead-check-on-ret.patch [bz#1207657]
  - kvm-block-Move-request-tracking-to-children-in-copy-offl.patch [bz#1207657]
  - kvm-block-Fix-parameter-checking-in-bdrv_co_copy_range_i.patch [bz#1207657]
  - kvm-block-Honour-BDRV_REQ_NO_SERIALISING-in-copy-range.patch [bz#1207657]
  - kvm-backup-Use-copy-offloading.patch [bz#1207657]
  - kvm-block-backup-disable-copy-offloading-for-backup.patch [bz#1207657]
  - kvm-iotests-222-Don-t-run-with-luks.patch [bz#1207657]
  - kvm-block-io-fix-copy_range.patch [bz#1207657]
  - kvm-block-split-flags-in-copy_range.patch [bz#1207657]
  - kvm-block-add-BDRV_REQ_SERIALISING-flag.patch [bz#1207657]
  - kvm-block-backup-fix-fleecing-scheme-use-serialized-writ.patch [bz#1207657]
  - kvm-nbd-server-Reject-0-length-block-status-request.patch [bz#1207657]
  - kvm-nbd-server-fix-trace.patch [bz#1207657]
  - kvm-nbd-server-refactor-NBDExportMetaContexts.patch [bz#1207657]
  - kvm-nbd-server-add-nbd_meta_empty_or_pattern-helper.patch [bz#1207657]
  - kvm-nbd-server-implement-dirty-bitmap-export.patch [bz#1207657]
  - kvm-qapi-new-qmp-command-nbd-server-add-bitmap.patch [bz#1207657]
  - kvm-docs-interop-add-nbd.txt.patch [bz#1207657]
  - kvm-nbd-server-introduce-NBD_CMD_CACHE.patch [bz#1207657]
  - kvm-nbd-server-Silence-gcc-false-positive.patch [bz#1207657]
  - kvm-nbd-server-Fix-dirty-bitmap-logic-regression.patch [bz#1207657]
  - kvm-nbd-server-fix-nbd_co_send_block_status.patch [bz#1207657]
  - kvm-nbd-client-Add-x-dirty-bitmap-to-query-bitmap-from-s.patch [bz#1207657]
  - kvm-iotests-New-test-223-for-exporting-dirty-bitmap-over.patch [bz#1207657]
  - kvm-hw-char-serial-Only-retry-if-qemu_chr_fe_write-retur.patch [bz#1592817]
  - kvm-hw-char-serial-retry-write-if-EAGAIN.patch [bz#1592817]
  - kvm-throttle-groups-fix-hang-when-group-member-leaves.patch [bz#1535914]
  - kvm-Disable-aarch64-devices-reappeared-after-2.12-rebase.patch [bz#1586357]
  - kvm-Disable-split-irq-device.patch [bz#1586357]
  - kvm-Disable-AT24Cx-i2c-eeprom.patch [bz#1586357]
  - kvm-Disable-CAN-bus-devices.patch [bz#1586357]
  - kvm-Disable-new-superio-devices.patch [bz#1586357]
  - kvm-Disable-new-pvrdma-device.patch [bz#1586357]
  - kvm-qdev-add-HotplugHandler-post_plug-callback.patch [bz#1607891]
  - kvm-virtio-scsi-fix-hotplug-reset-vs-event-race.patch [bz#1607891]
  - kvm-e1000-Fix-tso_props-compat-for-82540em.patch [bz#1608778]
  - kvm-slirp-correct-size-computation-while-concatenating-m.patch [bz#1586255]
  - kvm-s390x-sclp-fix-maxram-calculation.patch [bz#1595740]
  - kvm-redhat-Make-gitpublish-profile-the-default-one.patch [bz#1425820]
  - Resolves: bz#1168213
    (main-loop: WARNING: I/O thread spun for 1000 iterations while doing stream block device.)
  - Resolves: bz#1207657
    (RFE: QEMU Incremental live backup - push and pull modes)
  - Resolves: bz#1416180
    (QEMU VFIO based block driver for NVMe devices)
  - Resolves: bz#1425820
    (Improve QEMU packaging layout with modularization of the block layer)
  - Resolves: bz#1482537
    ([RFE] qemu-img copy-offloading (convert command))
  - Resolves: bz#1505664
    ("qemu-kvm: System page size 0x1000000 is not enabled in page_size_mask (0x11000). Performance may be slow" show up while using hugepage as guest's memory)
  - Resolves: bz#1513543
    ([RFE] Add block job to create format on a storage device)
  - Resolves: bz#1518738
    (Add 'copy-on-read' filter driver for use with blockdev-add)
  - Resolves: bz#1519144
    (qemu-img: image locking doesn't cover image creation)
  - Resolves: bz#1519617
    (The exit code should be non-zero when qemu-io reports an error)
  - Resolves: bz#1523065
    ("qemu-img resize" should fail to decrease the size of logical partition/lvm/iSCSI image with raw format)
  - Resolves: bz#1525829
    (can not boot up a scsi-block passthrough disk via -blockdev with error "cannot get SG_IO version number: Operation not supported.  Is this a SCSI device?")
  - Resolves: bz#1526645
    ([Intel 7.6 FEAT] vHost Data Plane Acceleration (vDPA) - vhost user client - qemu-kvm-rhev)
  - Resolves: bz#1527085
    (The copied flag should be updated during  '-r leaks')
  - Resolves: bz#1527898
    ([RFE] qemu-img should leave cluster unallocated if it's read as zero throughout the backing chain)
  - Resolves: bz#1528541
    (qemu-img check reports tons of leaked clusters after re-start nfs service to resume writing data in guest)
  - Resolves: bz#1533158
    (QEMU support for libvirtd restarting qemu-pr-helper)
  - Resolves: bz#1535914
    (Disable io throttling for one member disk of a group during io will induce the other one hang with io)
  - Resolves: bz#1537956
    (RFE: qemu-img amend should list the true supported options)
  - Resolves: bz#1542080
    (Qemu core dump at cirrus_invalidate_region)
  - Resolves: bz#1549654
    (Reject node-names which would be truncated by the block layer commands)
  - Resolves: bz#1556678
    (Hot plug usb-ccid for the 2nd time with the same ID as the 1st time failed)
  - Resolves: bz#1557995
    (QAPI schema for RBD storage misses the 'password-secret' option)
  - Resolves: bz#1558723
    (Create RHEL-7.6 QEMU machine type for AArch64)
  - Resolves: bz#1560847
    ([Power8][FW b0320a_1812.861][rhel7.5rc2 3.10.0-861.el7.ppc64le][qemu-kvm-{ma,rhev}-2.10.0-21.el7_5.1.ppc64le] KVM guest does not default to ori type flush even with pseries-rhel7.5.0-sxxm)
  - Resolves: bz#1564576
    (Pegas 1.1 - Require to backport qemu-kvm patch that fixes expected_downtime calculation during migration)
  - Resolves: bz#1566153
    (IOERROR pause code lost after resuming a VM while I/O error is still present)
  - Resolves: bz#1567733
    (qemu abort when migrate during guest reboot)
  - Resolves: bz#1569835
    (qemu-img get wrong backing file path after rebasing image with relative path)
  - Resolves: bz#1572851
    (Core dumped after migration when with usb-host)
  - Resolves: bz#1572856
    ('block-job-cancel' can not cancel a "drive-mirror" job)
  - Resolves: bz#1574216
    (CVE-2018-3639 qemu-kvm-rhev: hw: cpu: speculative store bypass [rhel-7.6])
  - Resolves: bz#1575541
    (qemu core dump while installing win10 guest)
  - Resolves: bz#1576598
    (Segfault in qemu-io and qemu-img with -U --image-opts force-share=off)
  - Resolves: bz#1576743
    (virtio-rng hangs when running on recent (2.x) QEMU versions)
  - Resolves: bz#1578381
    (Error message need update when specify numa distance with node index >=128)
  - Resolves: bz#1583959
    (Incorrect vcpu count limit for 7.4 machine types for windows guests)
  - Resolves: bz#1584914
    (SATA emulator lags and hangs)
  - Resolves: bz#1584984
    (Vm starts failed with 'passthrough' smartcard)
  - Resolves: bz#1586255
    (CVE-2018-11806 qemu-kvm-rhev: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])
  - Resolves: bz#1586313
    (-smp option is not easily found in the output of qemu help)
  - Resolves: bz#1586357
    (Disable new devices in 2.12)
  - Resolves: bz#1588039
    (Possible assertion failure in qemu when a corrupted image is used during an incoming migration)
  - Resolves: bz#1589634
    (Migration failed when rebooting guest with multiple virtio videos)
  - Resolves: bz#1590640
    (qemu-kvm: block/io.c:1098: bdrv_co_do_copy_on_readv: Assertion `skip_bytes < pnum' failed.)
  - Resolves: bz#1591076
    (The driver of 'throttle' is not whitelisted)
  - Resolves: bz#1592817
    (Retrying on serial_xmit if the pipe is broken may compromise the Guest)
  - Resolves: bz#1594135
    (system_reset many times linux guests cause qemu process Aborted)
  - Resolves: bz#1595173
    (blockdev-create is blocking)
  - Resolves: bz#1595180
    (Can't set rerror/werror with usb-storage)
  - Resolves: bz#1595740
    (RHEL-Alt-7.6 - qemu has error during migration of larger guests)
  - Resolves: bz#1599335
    (Image creation locking is too tight and is not properly released)
  - Resolves: bz#1599515
    (qemu core-dump with aio_read via hmp (util/qemu-thread-posix.c:64: qemu_mutex_lock_impl: Assertion `mutex->initialized' failed))
  - Resolves: bz#1607891
    (Hotplug events are sometimes lost with virtio-scsi + iothread)
  - Resolves: bz#1608778
    (qemu/migration: migrate failed from RHEL.7.6 to RHEL.7.5 with e1000-82540em)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-20.el8
changelog:
  - kvm-migration-stop-compressing-page-in-migration-thread.patch [bz#1594384]
  - kvm-migration-stop-compression-to-allocate-and-free-memo.patch [bz#1594384]
  - kvm-migration-stop-decompression-to-allocate-and-free-me.patch [bz#1594384]
  - kvm-migration-detect-compression-and-decompression-error.patch [bz#1594384]
  - kvm-migration-introduce-control_save_page.patch [bz#1594384]
  - kvm-migration-move-some-code-to-ram_save_host_page.patch [bz#1594384]
  - kvm-migration-move-calling-control_save_page-to-the-comm.patch [bz#1594384]
  - kvm-migration-move-calling-save_zero_page-to-the-common-.patch [bz#1594384]
  - kvm-migration-introduce-save_normal_page.patch [bz#1594384]
  - kvm-migration-remove-ram_save_compressed_page.patch [bz#1594384]
  - kvm-migration-block-dirty-bitmap-fix-memory-leak-in-dirt.patch [bz#1594384]
  - kvm-migration-fix-saving-normal-page-even-if-it-s-been-c.patch [bz#1594384]
  - kvm-migration-update-index-field-when-delete-or-qsort-RD.patch [bz#1594384]
  - kvm-migration-introduce-decompress-error-check.patch [bz#1594384]
  - kvm-migration-Don-t-activate-block-devices-if-using-S.patch [bz#1594384]
  - kvm-migration-not-wait-RDMA_CM_EVENT_DISCONNECTED-event-.patch [bz#1594384]
  - kvm-migration-block-dirty-bitmap-fix-dirty_bitmap_load.patch [bz#1594384]
  - kvm-s390x-add-RHEL-7.6-machine-type-for-ccw.patch [bz#1595718]
  - kvm-s390x-cpumodel-default-enable-bpb-and-ppa15-for-z196.patch [bz#1595718]
  - kvm-linux-headers-asm-s390-kvm.h-header-sync.patch [bz#1612938]
  - kvm-s390x-kvm-add-etoken-facility.patch [bz#1612938]
  - Resolves: bz#1594384
    (2.12 migration fixes)
  - Resolves: bz#1595718
    (Add ppa15/bpb to the default cpu model for z196 and higher in the 7.6 s390-ccw-virtio machine)
  - Resolves: bz#1612938
    (Add etoken support to qemu-kvm for s390x KVM guests)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-22.el8
changelog:
  - Fix an issue with the build_configure script.
  - Resolves: bz#1425820
    (Improve QEMU packaging layout with modularization of the block layer)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-24.el8
changelog:
  - kvm-Add-qemu-keymap-to-qemu-kvm-common.patch [bz#1593117]
  - Resolves: bz#1593117
    (add qemu-keymap utility)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-25.el8
changelog:
  - kvm-Migration-TLS-Fix-crash-due-to-double-cleanup.patch [bz#1594384]
  - Resolves: bz#1594384
    (2.12 migration fixes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-26.el8
changelog:
  - kvm-redhat-remove-extra-in-rhel_rhev_conflicts-macro.patch [bz#1618752]
  - Resolves: bz#1618752
    (qemu-kvm can't be installed in RHEL-8 as it Conflicts with itself.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-27.el8
changelog:
  - kvm-Fix-libusb-1.0.22-deprecated-libusb_set_debug-with-l.patch [bz#1622656]
  - Resolves: bz#1622656
    (qemu-kvm fails to build due to libusb_set_debug being deprecated)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-29.el8
changelog:
  - kvm-target-i386-sev-fix-memory-leaks.patch [bz#1615717]
  - kvm-i386-Fix-arch_query_cpu_model_expansion-leak.patch [bz#1615717]
  - kvm-redhat-Update-build-configuration.patch [bz#1573156]
  - Resolves: bz#1573156
    (Update build configure for QEMU 2.12.0)
  - Resolves: bz#1615717
    (Memory leaks)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-30.el8
changelog:
  - kvm-redhat-Disable-vhost-crypto.patch [bz#1625668]
  - Resolves: bz#1625668
    (Decide if we should disable 'vhost-crypto' or not)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-31.el8
changelog:
  - kvm-i386-Disable-TOPOEXT-by-default-on-cpu-host.patch [bz#1619804]
  - kvm-redhat-enable-opengl-add-build-and-runtime-deps.patch [bz#1618412]
  - Resolves: bz#1618412
    (Enable opengl (for intel vgpu display))
  - Resolves: bz#1619804
    (kernel panic in init_amd_cacheinfo)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-32.el8
changelog:
  - kvm-Re-enable-disabled-Hyper-V-enlightenments.patch [bz#1625185]
  - kvm-Fix-annocheck-issues.patch [bz#1624164]
  - kvm-exec-check-that-alignment-is-a-power-of-two.patch [bz#1630746]
  - kvm-curl-Make-sslverify-off-disable-host-as-well-as-peer.patch [bz#1575925]
  - Resolves: bz#1575925
    ("SSL: no alternative certificate subject name matches target host name" error even though sslverify = off)
  - Resolves: bz#1624164
    (Review annocheck distro flag failures in qemu-kvm)
  - Resolves: bz#1625185
    (Re-enable disabled Hyper-V enlightenments)
  - Resolves: bz#1630746
    (qemu_ram_mmap: Assertion `is_power_of_2(align)' failed)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-33.el8
changelog:
  - kvm-migration-postcopy-Clear-have_listen_thread.patch [bz#1608765]
  - kvm-migration-cleanup-in-error-paths-in-loadvm.patch [bz#1608765]
  - kvm-jobs-change-start-callback-to-run-callback.patch [bz#1632939]
  - kvm-jobs-canonize-Error-object.patch [bz#1632939]
  - kvm-jobs-add-exit-shim.patch [bz#1632939]
  - kvm-block-commit-utilize-job_exit-shim.patch [bz#1632939]
  - kvm-block-mirror-utilize-job_exit-shim.patch [bz#1632939]
  - kvm-jobs-utilize-job_exit-shim.patch [bz#1632939]
  - kvm-block-backup-make-function-variables-consistently-na.patch [bz#1632939]
  - kvm-jobs-remove-ret-argument-to-job_completed-privatize-.patch [bz#1632939]
  - kvm-jobs-remove-job_defer_to_main_loop.patch [bz#1632939]
  - kvm-block-commit-add-block-job-creation-flags.patch [bz#1632939]
  - kvm-block-mirror-add-block-job-creation-flags.patch [bz#1632939]
  - kvm-block-stream-add-block-job-creation-flags.patch [bz#1632939]
  - kvm-block-commit-refactor-commit-to-use-job-callbacks.patch [bz#1632939]
  - kvm-block-mirror-don-t-install-backing-chain-on-abort.patch [bz#1632939]
  - kvm-block-mirror-conservative-mirror_exit-refactor.patch [bz#1632939]
  - kvm-block-stream-refactor-stream-to-use-job-callbacks.patch [bz#1632939]
  - kvm-tests-blockjob-replace-Blockjob-with-Job.patch [bz#1632939]
  - kvm-tests-test-blockjob-remove-exit-callback.patch [bz#1632939]
  - kvm-tests-test-blockjob-txn-move-.exit-to-.clean.patch [bz#1632939]
  - kvm-jobs-remove-.exit-callback.patch [bz#1632939]
  - kvm-qapi-block-commit-expose-new-job-properties.patch [bz#1632939]
  - kvm-qapi-block-mirror-expose-new-job-properties.patch [bz#1632939]
  - kvm-qapi-block-stream-expose-new-job-properties.patch [bz#1632939]
  - kvm-block-backup-qapi-documentation-fixup.patch [bz#1632939]
  - kvm-blockdev-document-transactional-shortcomings.patch [bz#1632939]
  - Resolves: bz#1608765
    (After postcopy migration,  do savevm and loadvm, guest hang and call trace)
  - Resolves: bz#1632939
    (qemu blockjobs other than backup do not support job-finalize or job-dismiss)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-34.el8
changelog:
  - kvm-seccomp-allow-sched_setscheduler-with-SCHED_IDLE-pol.patch [bz#1618356]
  - kvm-seccomp-use-SIGSYS-signal-instead-of-killing-the-thr.patch [bz#1618356]
  - kvm-seccomp-prefer-SCMP_ACT_KILL_PROCESS-if-available.patch [bz#1618356]
  - kvm-configure-require-libseccomp-2.2.0.patch [bz#1618356]
  - kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618356]
  - kvm-memory-cleanup-side-effects-of-memory_region_init_fo.patch [bz#1600365]
  - Resolves: bz#1600365
    (QEMU core dumped when hotplug memory exceeding host hugepages and with discard-data=yes)
  - Resolves: bz#1618356
    (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-35.el8
changelog:
  - kvm-redhat-make-the-plugins-executable.patch [bz#1638304]
  - Resolves: bz#1638304
    (the driver packages lack all the library Requires)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-36
changelog:
  - kvm-check-Only-test-ivshm-when-it-is-compiled-in.patch [bz#1621817]
  - kvm-Disable-ivshmem.patch [bz#1621817]
  - kvm-mirror-Fail-gracefully-for-source-target.patch [bz#1637963]
  - kvm-commit-Add-top-node-base-node-options.patch [bz#1637970]
  - kvm-qemu-iotests-Test-commit-with-top-node-base-node.patch [bz#1637970]
  - Resolves: bz#1621817
    (Disable IVSHMEM in RHEL 8)
  - Resolves: bz#1637963
    (Segfault on 'blockdev-mirror' with same node as source and target)
  - Resolves: bz#1637970
    (allow using node-names with block-commit)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-37.el8
changelog:
  - kvm-block-for-jobs-do-not-clear-user_paused-until-after-.patch [bz#1635583]
  - kvm-iotests-Add-failure-matching-to-common.qemu.patch [bz#1635583]
  - kvm-block-iotest-to-catch-abort-on-forced-blockjob-cance.patch [bz#1635583]
  - Resolves: bz#1635583
    (Quitting VM causes qemu core dump once the block mirror job paused for no enough target space)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-38.el8
changelog:
  - kvm-Revert-hw-acpi-build-build-SRAT-memory-affinity-stru.patch [bz#1609235]
  - kvm-add-udev-kvm-check.patch [bz#1552663]
  - kvm-aio-posix-Don-t-count-ctx-notifier-as-progress-when-.patch [bz#1623085]
  - kvm-aio-Do-aio_notify_accept-only-during-blocking-aio_po.patch [bz#1623085]
  - kvm-aio-posix-fix-concurrent-access-to-poll_disable_cnt.patch [bz#1632622]
  - kvm-aio-posix-compute-timeout-before-polling.patch [bz#1632622]
  - kvm-aio-posix-do-skip-system-call-if-ctx-notifier-pollin.patch [bz#1632622]
  - kvm-intel-iommu-send-PSI-always-even-if-across-PDEs.patch [bz#1450712]
  - kvm-intel-iommu-remove-IntelIOMMUNotifierNode.patch [bz#1450712]
  - kvm-intel-iommu-add-iommu-lock.patch [bz#1450712]
  - kvm-intel-iommu-only-do-page-walk-for-MAP-notifiers.patch [bz#1450712]
  - kvm-intel-iommu-introduce-vtd_page_walk_info.patch [bz#1450712]
  - kvm-intel-iommu-pass-in-address-space-when-page-walk.patch [bz#1450712]
  - kvm-intel-iommu-trace-domain-id-during-page-walk.patch [bz#1450712]
  - kvm-util-implement-simple-iova-tree.patch [bz#1450712]
  - kvm-intel-iommu-rework-the-page-walk-logic.patch [bz#1450712]
  - kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1633928]
  - Resolves: bz#1450712
    (Booting nested guest with vIOMMU, the assigned network devices can not receive packets (qemu))
  - Resolves: bz#1552663
    (81-kvm-rhel.rules is no longer part of initscripts)
  - Resolves: bz#1609235
    (Win2016 guest can't recognize pc-dimm hotplugged to node 0)
  - Resolves: bz#1623085
    (VM doesn't boot from HD)
  - Resolves: bz#1632622
    (~40% virtio_blk disk performance drop for win2012r2 guest when comparing qemu-kvm-rhev-2.12.0-9 with qemu-kvm-rhev-2.12.0-12)
  - Resolves: bz#1633928
    (CVE-2018-3639 qemu-kvm: hw: cpu: speculative store bypass [rhel-8.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> -
changelog:
  - kvm-linux-headers-update.patch [bz#1508142]
  - kvm-s390x-cpumodel-Set-up-CPU-model-for-AP-device-suppor.patch [bz#1508142]
  - kvm-s390x-kvm-enable-AP-instruction-interpretation-for-g.patch [bz#1508142]
  - kvm-s390x-ap-base-Adjunct-Processor-AP-object-model.patch [bz#1508142]
  - kvm-s390x-vfio-ap-Introduce-VFIO-AP-device.patch [bz#1508142]
  - kvm-s390-doc-detailed-specifications-for-AP-virtualizati.patch [bz#1508142]
  - Resolves: bz#1508142
    ([IBM 8.0 FEAT] KVM: Guest-dedicated Crypto Adapters - qemu part)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-40.el8
changelog:
  - kvm-vnc-call-sasl_server_init-only-when-required.patch [bz#1609327]
  - kvm-nbd-server-fix-NBD_CMD_CACHE.patch [bz#1636142]
  - kvm-nbd-fix-NBD_FLAG_SEND_CACHE-value.patch [bz#1636142]
  - kvm-test-bdrv-drain-bdrv_drain-works-with-cross-AioConte.patch [bz#1637976]
  - kvm-block-Use-bdrv_do_drain_begin-end-in-bdrv_drain_all.patch [bz#1637976]
  - kvm-block-Remove-recursive-parameter-from-bdrv_drain_inv.patch [bz#1637976]
  - kvm-block-Don-t-manually-poll-in-bdrv_drain_all.patch [bz#1637976]
  - kvm-tests-test-bdrv-drain-bdrv_drain_all-works-in-corout.patch [bz#1637976]
  - kvm-block-Avoid-unnecessary-aio_poll-in-AIO_WAIT_WHILE.patch [bz#1637976]
  - kvm-block-Really-pause-block-jobs-on-drain.patch [bz#1637976]
  - kvm-block-Remove-bdrv_drain_recurse.patch [bz#1637976]
  - kvm-test-bdrv-drain-Add-test-for-node-deletion.patch [bz#1637976]
  - kvm-block-Drain-recursively-with-a-single-BDRV_POLL_WHIL.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-node-deletion-in-subtree-recurs.patch [bz#1637976]
  - kvm-block-Don-t-poll-in-parent-drain-callbacks.patch [bz#1637976]
  - kvm-test-bdrv-drain-Graph-change-through-parent-callback.patch [bz#1637976]
  - kvm-block-Defer-.bdrv_drain_begin-callback-to-polling-ph.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-that-bdrv_drain_invoke-doesn-t-.patch [bz#1637976]
  - kvm-block-Allow-AIO_WAIT_WHILE-with-NULL-ctx.patch [bz#1637976]
  - kvm-block-Move-bdrv_drain_all_begin-out-of-coroutine-con.patch [bz#1637976]
  - kvm-block-ignore_bds_parents-parameter-for-drain-functio.patch [bz#1637976]
  - kvm-block-Allow-graph-changes-in-bdrv_drain_all_begin-en.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-graph-changes-in-drain_all-sect.patch [bz#1637976]
  - kvm-block-Poll-after-drain-on-attaching-a-node.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-bdrv_append-to-drained-node.patch [bz#1637976]
  - kvm-block-linux-aio-acquire-AioContext-before-qemu_laio_.patch [bz#1637976]
  - kvm-util-async-use-qemu_aio_coroutine_enter-in-co_schedu.patch [bz#1637976]
  - kvm-job-Fix-nested-aio_poll-hanging-in-job_txn_apply.patch [bz#1637976]
  - kvm-job-Fix-missing-locking-due-to-mismerge.patch [bz#1637976]
  - kvm-blockjob-Wake-up-BDS-when-job-becomes-idle.patch [bz#1637976]
  - kvm-aio-wait-Increase-num_waiters-even-in-home-thread.patch [bz#1637976]
  - kvm-test-bdrv-drain-Drain-with-block-jobs-in-an-I-O-thre.patch [bz#1637976]
  - kvm-test-blockjob-Acquire-AioContext-around-job_cancel_s.patch [bz#1637976]
  - kvm-job-Use-AIO_WAIT_WHILE-in-job_finish_sync.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-AIO_WAIT_WHILE-in-completion-ca.patch [bz#1637976]
  - kvm-block-Add-missing-locking-in-bdrv_co_drain_bh_cb.patch [bz#1637976]
  - kvm-block-backend-Add-.drained_poll-callback.patch [bz#1637976]
  - kvm-block-backend-Fix-potential-double-blk_delete.patch [bz#1637976]
  - kvm-block-backend-Decrease-in_flight-only-after-callback.patch [bz#1637976]
  - kvm-blockjob-Lie-better-in-child_job_drained_poll.patch [bz#1637976]
  - kvm-block-Remove-aio_poll-in-bdrv_drain_poll-variants.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-nested-poll-in-bdrv_drain_poll_.patch [bz#1637976]
  - kvm-job-Avoid-deadlocks-in-job_completed_txn_abort.patch [bz#1637976]
  - kvm-test-bdrv-drain-AIO_WAIT_WHILE-in-job-.commit-.abort.patch [bz#1637976]
  - kvm-test-bdrv-drain-Fix-outdated-comments.patch [bz#1637976]
  - kvm-block-Use-a-single-global-AioWait.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-draining-job-source-child-and-p.patch [bz#1637976]
  - kvm-qemu-img-Fix-assert-when-mapping-unaligned-raw-file.patch [bz#1639374]
  - kvm-iotests-Add-test-221-to-catch-qemu-img-map-regressio.patch [bz#1639374]
  - Resolves: bz#1609327
    (qemu-kvm[37046]: Could not find keytab file: /etc/qemu/krb5.tab: Unknown error 49408)
  - Resolves: bz#1636142
    (qemu NBD_CMD_CACHE flaws impacting non-qemu NBD clients)
  - Resolves: bz#1637976
    (Crashes and hangs with iothreads vs. block jobs)
  - Resolves: bz#1639374
    (qemu-img map 'Aborted (core dumped)' when specifying a plain file)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-41.el8
changelog:
  - kvm-block-rbd-pull-out-qemu_rbd_convert_options.patch [bz#1635585]
  - kvm-block-rbd-Attempt-to-parse-legacy-filenames.patch [bz#1635585]
  - kvm-block-rbd-add-deprecation-documentation-for-filename.patch [bz#1635585]
  - kvm-block-rbd-add-iotest-for-rbd-legacy-keyvalue-filenam.patch [bz#1635585]
  - Resolves: bz#1635585
    (rbd json format of 7.6 is incompatible with 7.5)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-42.el8
changelog:
  - kvm-luks-Allow-share-rw-on.patch [bz#1629701]
  - kvm-redhat-reenable-gluster-support.patch [bz#1599340]
  - kvm-redhat-bump-libusb-requirement.patch [bz#1627970]
  - Resolves: bz#1599340
    (Reenable glusterfs in qemu-kvm once BZ#1567292 gets fixed)
  - Resolves: bz#1627970
    (symbol lookup error: /usr/libexec/qemu-kvm: undefined symbol: libusb_set_option)
  - Resolves: bz#1629701
    ("share-rw=on" does not work for luks format image - Fast Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-43
changelog:
  - kvm-configure-add-test-for-libudev.patch [bz#1636185]
  - kvm-qga-linux-report-disk-serial-number.patch [bz#1636185]
  - kvm-qga-linux-return-disk-device-in-guest-get-fsinfo.patch [bz#1636185]
  - kvm-qemu-error-introduce-error-warn-_report_once.patch [bz#1625173]
  - kvm-intel-iommu-start-to-use-error_report_once.patch [bz#1625173]
  - kvm-intel-iommu-replace-more-vtd_err_-traces.patch [bz#1625173]
  - kvm-intel_iommu-introduce-vtd_reset_caches.patch [bz#1625173]
  - kvm-intel_iommu-better-handling-of-dmar-state-switch.patch [bz#1625173]
  - kvm-intel_iommu-move-ce-fetching-out-when-sync-shadow.patch [bz#1625173 bz#1629616]
  - kvm-intel_iommu-handle-invalid-ce-for-shadow-sync.patch [bz#1625173 bz#1629616]
  - kvm-block-remove-bdrv_dirty_bitmap_make_anon.patch [bz#1518989]
  - kvm-block-simplify-code-around-releasing-bitmaps.patch [bz#1518989]
  - kvm-hbitmap-Add-advance-param-to-hbitmap_iter_next.patch [bz#1518989]
  - kvm-test-hbitmap-Add-non-advancing-iter_next-tests.patch [bz#1518989]
  - kvm-block-dirty-bitmap-Add-bdrv_dirty_iter_next_area.patch [bz#1518989]
  - kvm-blockdev-backup-add-bitmap-argument.patch [bz#1518989]
  - kvm-dirty-bitmap-switch-assert-fails-to-errors-in-bdrv_m.patch [bz#1518989]
  - kvm-dirty-bitmap-rename-bdrv_undo_clear_dirty_bitmap.patch [bz#1518989]
  - kvm-dirty-bitmap-make-it-possible-to-restore-bitmap-afte.patch [bz#1518989]
  - kvm-blockdev-rename-block-dirty-bitmap-clear-transaction.patch [bz#1518989]
  - kvm-qapi-add-transaction-support-for-x-block-dirty-bitma.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-add-user_locked-status-checker.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-fix-merge-permissions.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-allow-clear-on-disabled-bitmaps.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-prohibit-enable-disable-on-locke.patch [bz#1518989]
  - kvm-block-backup-prohibit-backup-from-using-in-use-bitma.patch [bz#1518989]
  - kvm-nbd-forbid-use-of-frozen-bitmaps.patch [bz#1518989]
  - kvm-bitmap-Update-count-after-a-merge.patch [bz#1518989]
  - kvm-iotests-169-drop-deprecated-autoload-parameter.patch [bz#1518989]
  - kvm-block-qcow2-improve-error-message-in-qcow2_inactivat.patch [bz#1518989]
  - kvm-bloc-qcow2-drop-dirty_bitmaps_loaded-state-variable.patch [bz#1518989]
  - kvm-dirty-bitmaps-clean-up-bitmaps-loading-and-migration.patch [bz#1518989]
  - kvm-iotests-improve-169.patch [bz#1518989]
  - kvm-iotests-169-add-cases-for-source-vm-resuming.patch [bz#1518989]
  - kvm-pc-dimm-turn-alignment-assert-into-check.patch [bz#1630116]
  - Resolves: bz#1518989
    (RFE: QEMU Incremental live backup)
  - Resolves: bz#1625173
    ([NVMe Device Assignment] Guest could not boot up with q35+iommu)
  - Resolves: bz#1629616
    (boot guest with q35+vIOMMU+ device assignment, qemu terminal shows "qemu-kvm: VFIO_UNMAP_DMA: -22" when return assigned network devices from vfio driver to ixgbe in guest)
  - Resolves: bz#1630116
    (pc_dimm_get_free_addr: assertion failed: (QEMU_ALIGN_UP(address_space_start, align) == address_space_start))
  - Resolves: bz#1636185
    ([RFE] Report disk device name and serial number (qemu-guest-agent on Linux))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-43
changelog:
  - kvm-block-Make-more-block-drivers-compile-time-configura.patch [bz#1598842 bz#1598842]
  - kvm-RHEL8-Add-disable-configure-options-to-qemu-spec-fil.patch [bz#1598842]
  - Resolves: bz#1598842
    (Compile out unused block drivers)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-45
changelog:
  - kvm-target-ppc-add-basic-support-for-PTCR-on-POWER9.patch [bz#1639069]
  - kvm-linux-headers-Update-for-nested-KVM-HV-downstream-on.patch [bz#1639069]
  - kvm-target-ppc-Add-one-reg-id-for-ptcr.patch [bz#1639069]
  - kvm-ppc-spapr_caps-Add-SPAPR_CAP_NESTED_KVM_HV.patch [bz#1639069]
  - kvm-Re-enable-CONFIG_HYPERV_TESTDEV.patch [bz#1651195]
  - kvm-qxl-use-guest_monitor_config-for-local-renderer.patch [bz#1610163]
  - kvm-Declare-cirrus-vga-as-deprecated.patch [bz#1651994]
  - kvm-Do-not-build-bluetooth-support.patch [bz#1654651]
  - kvm-vfio-helpers-Fix-qemu_vfio_open_pci-crash.patch [bz#1645840]
  - kvm-balloon-Allow-multiple-inhibit-users.patch [bz#1650272]
  - kvm-Use-inhibit-to-prevent-ballooning-without-synchr.patch [bz#1650272]
  - kvm-vfio-Inhibit-ballooning-based-on-group-attachment-to.patch [bz#1650272]
  - kvm-vfio-ccw-pci-Allow-devices-to-opt-in-for-ballooning.patch [bz#1650272]
  - kvm-vfio-pci-Handle-subsystem-realpath-returning-NULL.patch [bz#1650272]
  - kvm-vfio-pci-Fix-failure-to-close-file-descriptor-on-err.patch [bz#1650272]
  - kvm-postcopy-Synchronize-usage-of-the-balloon-inhibitor.patch [bz#1650272]
  - Resolves: bz#1610163
    (guest shows border blurred screen with some resolutions when qemu boot with -device qxl-vga ,and guest on rhel7.6 has no  such question)
  - Resolves: bz#1639069
    ([IBM 8.0 FEAT] POWER9 - Nested virtualization in RHEL8.0 KVM for ppc64le - qemu-kvm side)
  - Resolves: bz#1645840
    (Qemu core dump when hotplug nvme:// drive via -blockdev)
  - Resolves: bz#1650272
    (Ballooning is incompatible with vfio assigned devices, but not prevented)
  - Resolves: bz#1651195
    (Re-enable hyperv-testdev device)
  - Resolves: bz#1651994
    (Declare the "Cirrus VGA" device emulation of QEMU as deprecated in RHEL8)
  - Resolves: bz#1654651
    (Qemu: hw: bt: keep bt/* objects from building [rhel-8.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-46
changelog:
  - kvm-qcow2-Give-the-refcount-cache-the-minimum-possible-s.patch [bz#1656507]
  - kvm-docs-Document-the-new-default-sizes-of-the-qcow2-cac.patch [bz#1656507]
  - kvm-qcow2-Fix-Coverity-warning-when-calculating-the-refc.patch [bz#1656507]
  - kvm-include-Add-IEC-binary-prefixes-in-qemu-units.h.patch [bz#1656507]
  - kvm-qcow2-Options-documentation-fixes.patch [bz#1656507]
  - kvm-include-Add-a-lookup-table-of-sizes.patch [bz#1656507]
  - kvm-qcow2-Make-sizes-more-humanly-readable.patch [bz#1656507]
  - kvm-qcow2-Avoid-duplication-in-setting-the-refcount-cach.patch [bz#1656507]
  - kvm-qcow2-Assign-the-L2-cache-relatively-to-the-image-si.patch [bz#1656507]
  - kvm-qcow2-Increase-the-default-upper-limit-on-the-L2-cac.patch [bz#1656507]
  - kvm-qcow2-Resize-the-cache-upon-image-resizing.patch [bz#1656507]
  - kvm-qcow2-Set-the-default-cache-clean-interval-to-10-min.patch [bz#1656507]
  - kvm-qcow2-Explicit-number-replaced-by-a-constant.patch [bz#1656507]
  - kvm-block-backend-Set-werror-rerror-defaults-in-blk_new.patch [bz#1657637]
  - kvm-qcow2-Fix-cache-clean-interval-documentation.patch [bz#1656507]
  - Resolves: bz#1656507
    ([RHEL.8] qcow2 cache is too small)
  - Resolves: bz#1657637
    (Wrong werror default for -device drive=<node-name>)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-47
changelog:
  - kvm-Disable-CONFIG_IPMI-and-CONFIG_I2C-for-ppc64.patch [bz#1640044]
  - kvm-Disable-CONFIG_CAN_BUS-and-CONFIG_CAN_SJA1000.patch [bz#1640042]
  - Resolves: bz#1640042
    (Disable CONFIG_CAN_BUS and CONFIG_CAN_SJA1000 config switches)
  - Resolves: bz#1640044
    (Disable CONFIG_I2C and CONFIG_IPMI in default-configs/ppc64-softmmu.mak)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-2.el8
changelog:
  - kvm-pc-7.5-compat-entries.patch [bz#1655820]
  - kvm-compat-Generic-HW_COMPAT_RHEL7_6.patch [bz#1655820]
  - kvm-pc-PC_RHEL7_6_COMPAT.patch [bz#1655820]
  - kvm-pc-Add-compat-for-pc-i440fx-rhel7.6.0-machine-type.patch [bz#1655820]
  - kvm-pc-Add-pc-q35-8.0.0-machine-type.patch [bz#1655820]
  - kvm-pc-Add-x-migrate-smi-count-off-to-PC_RHEL7_6_COMPAT.patch [bz#1655820]
  - kvm-clear-out-KVM_ASYNC_PF_DELIVERY_AS_PF_VMEXIT-for.patch [bz#1659604]
  - kvm-Add-edk2-Requires-to-qemu-kvm.patch [bz#1660208]
  - Resolves: bz#1655820
    (Can't migarate between rhel8 and rhel7 when guest has device "video")
  - Resolves: bz#1659604
    (8->7 migration failed: qemu-kvm: error: failed to set MSR 0x4b564d02 to 0x27fc13285)
  - Resolves: bz#1660208
    (qemu-kvm: Should depend on the architecture-appropriate guest firmware)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-3.el8
changelog:
  - kvm-redhat-define-pseries-rhel8.0.0-machine-type.patch [bz#1656508]
  - Resolves: bz#1656508
    (Machine types for qemu-kvm based on rebase to qemu-3.1 (ppc64le))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-4.el8
changelog:
  - kvm-hw-s390x-s390-virtio-ccw-Add-machine-types-for-RHEL8.patch [bz#1656510]
  - kvm-spapr-Add-H-Call-H_HOME_NODE_ASSOCIATIVITY.patch [bz#1661967]
  - kvm-redhat-Fixing-.gitpublish-to-include-AV-information.patch []
  - Resolves: bz#1656510
    (Machine types for qemu-kvm based on rebase to qemu-3.1 (s390x))
  - Resolves: bz#1661967
    (Kernel prints the message "VPHN is not supported. Disabling polling...")


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-5.el8
changelog:
  - kvm-virtio-Helper-for-registering-virtio-device-types.patch [bz#1648023]
  - kvm-virtio-Provide-version-specific-variants-of-virtio-P.patch [bz#1648023]
  - kvm-globals-Allow-global-properties-to-be-optional.patch [bz#1648023]
  - kvm-virtio-Make-disable-legacy-disable-modern-compat-pro.patch [bz#1648023]
  - kvm-aarch64-Add-virt-rhel8.0.0-machine-type-for-ARM.patch [bz#1656504]
  - kvm-aarch64-Set-virt-rhel8.0.0-max_cpus-to-512.patch [bz#1656504]
  - kvm-aarch64-Use-256MB-ECAM-region-by-default.patch [bz#1656504]
  - Resolves: bz#1648023
    (Provide separate device types for transitional virtio PCI devices - Fast Train)
  - Resolves: bz#1656504
    (Machine types for qemu-kvm based on rebase to qemu-3.1 (aarch64))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-6.el8
changelog:
  - kvm-spapr-Fix-ibm-max-associativity-domains-property-num.patch [bz#1653114]
  - kvm-cpus-ignore-ESRCH-in-qemu_cpu_kick_thread.patch [bz#1668205]
  - Resolves: bz#1653114
    (Incorrect NUMA nodes passed to qemu-kvm guest in ibm,max-associativity-domains property)
  - Resolves: bz#1668205
    (Guest quit with error when hotunplug cpu)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-7.el8
changelog:
  - kvm-i386-kvm-expose-HV_CPUID_ENLIGHTMENT_INFO.EAX-and-HV.patch [bz#1653511]
  - kvm-i386-kvm-add-a-comment-explaining-why-.feat_names-ar.patch [bz#1653511]
  - Resolves: bz#1653511
    (qemu doesn't report all support cpu features which cause libvirt cannot get the support status of hv_tlbflush)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-9.el8
changelog:
  - kvm-migration-rdma-unregister-fd-handler.patch [bz#1666601]
  - kvm-s390x-tod-Properly-stop-the-KVM-TOD-while-the-guest-.patch [bz#1659127]
  - kvm-hw-s390x-Fix-bad-mask-in-time2tod.patch [bz#1659127]
  - Resolves: bz#1659127
    (Stress guest and stop it, then do live migration, guest hit call trace on destination end)
  - Resolves: bz#1666601
    ([q35] dst qemu core dumped when do rdma migration with Mellanox IB QDR card)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-10.el8
changelog:
  - kvm-throttle-groups-fix-restart-coroutine-iothread-race.patch [bz#1655947]
  - kvm-iotests-add-238-for-throttling-tgm-unregister-iothre.patch [bz#1655947]
  - Resolves: bz#1655947
    (qemu-kvm core dumped after unplug the device which was set io throttling parameters)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-11.el8
changelog:
  - kvm-Fix-fsfreeze-hook-path-in-the-man-page.patch [bz#1644985]
  - kvm-json-Fix-handling-when-not-interpolating.patch [bz#1668244]
  - Resolves: bz#1644985
    (The "fsfreeze-hook" script path shown by command "qemu-ga --help" or "man qemu-ga" is wrong - Fast Train)
  - Resolves: bz#1668244
    (qemu-img: /var/tmp/v2vovl9951f8.qcow2: CURL: Error opening file: The requested URL returned error: 404 Not Found)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-12.el8
changelog:
  - kvm-io-ensure-UNIX-client-doesn-t-unlink-server-socket.patch [bz#1665896]
  - kvm-scsi-disk-Don-t-use-empty-string-as-device-id.patch [bz#1668248]
  - kvm-scsi-disk-Add-device_id-property.patch [bz#1668248]
  - Resolves: bz#1665896
    (VNC unix listener socket is deleted after first client quits)
  - Resolves: bz#1668248
    ("An unknown error has occurred" when using cdrom to install the system with two blockdev disks.(when choose installation destination))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-13.el8
changelog:
  - kvm-Acceptance-tests-add-Linux-initrd-checking-test.patch [bz#1669922]
  - kvm-mmap-alloc-unfold-qemu_ram_mmap.patch [bz#1671519]
  - kvm-mmap-alloc-fix-hugetlbfs-misaligned-length-in-ppc64.patch [bz#1671519]
  - kvm-BZ1653590-Require-at-least-64kiB-pages-for-downstrea.patch [bz#1653590]
  - kvm-block-Fix-invalidate_cache-error-path-for-parent-act.patch [bz#1673014]
  - kvm-virtio-scsi-Move-BlockBackend-back-to-the-main-AioCo.patch [bz#1656276 bz#1662508]
  - kvm-scsi-disk-Acquire-the-AioContext-in-scsi_-_realize.patch [bz#1656276 bz#1662508]
  - kvm-virtio-scsi-Forbid-devices-with-different-iothreads-.patch [bz#1656276 bz#1662508]
  - Resolves: bz#1653590
    ([Fast train]had better stop qemu immediately while guest was making use of an improper page size)
  - Resolves: bz#1656276
    (qemu-kvm core dumped after hotplug the deleted disk with iothread parameter)
  - Resolves: bz#1662508
    (Qemu core dump when start guest with two disks using same drive)
  - Resolves: bz#1669922
    (Backport avocado-qemu tests for QEMU 3.1)
  - Resolves: bz#1671519
    (RHEL8.0 Snapshot3 - qemu doesn't free up hugepage memory when hotplug/hotunplug using memory-backend-file (qemu-kvm))
  - Resolves: bz#1673014
    (Local VM and migrated VM on the same host can run with same RAW file as visual disk source while without shareable configured or lock manager enabled)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-14.el8
changelog:
  - kvm-doc-fix-the-configuration-path.patch [bz#1644985]
  - Resolves: bz#1644985
    (The "fsfreeze-hook" script path shown by command "qemu-ga --help" or "man qemu-ga" is wrong - Fast Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-15.el8
changelog:
  - kvm-Add-raw-qcow2-nbd-and-luks-iotests-to-run-during-the.patch [bz#1664855]
  - kvm-Introduce-the-qemu-kvm-tests-rpm.patch [bz#1669924]
  - Resolves: bz#1664855
    (Run iotests in qemu-kvm build %check phase)
  - Resolves: bz#1669924
    (qemu-kvm packaging: Package the avocado_qemu tests and qemu-iotests in a new rpm)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-16.el8
changelog:
  - kvm-fdc-Revert-downstream-disablement-of-device-floppy.patch [bz#1664997]
  - kvm-fdc-Restrict-floppy-controllers-to-RHEL-7-machine-ty.patch [bz#1664997]
  - Resolves: bz#1664997
    (Restrict floppy device to RHEL-7 machine types)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-17.el8
changelog:
  - kvm-block-Apply-auto-read-only-for-ro-whitelist-drivers.patch [bz#1678968]
  - Resolves: bz#1678968
    (-blockdev: auto-read-only is ineffective for drivers on read-only whitelist)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-18.el8
changelog:
  - kvm-target-i386-Disable-MPX-support-on-named-CPU-models.patch [bz#1661030]
  - kvm-i386-remove-the-new-CPUID-PCONFIG-from-Icelake-Serve.patch [bz#1661515]
  - kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-named-CPU-mo.patch [bz#1661515]
  - kvm-Revert-i386-Add-CPUID-bit-for-PCONFIG.patch [bz#1661515]
  - Resolves: bz#1661030
    (Remove MPX support from 8.0 machine types)
  - Resolves: bz#1661515
    (Remove PCONFIG and INTEL_PT from Icelake-* CPU models)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-19.el8
changelog:
  - kvm-migration-Fix-cancel-state.patch [bz#1608649]
  - kvm-migration-rdma-Fix-qemu_rdma_cleanup-null-check.patch [bz#1608649]
  - Resolves: bz#1608649
    (Query-migrate get "failed" status after migrate-cancel)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-20.el8
changelog:
  - kvm-i386-Add-stibp-flag-name.patch [bz#1686260]
  - Resolves: bz#1686260
    (stibp is missing on qemu 3.0 and qemu 3.1)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-21.el8
changelog:
  - kvm-Remove-7-qcow2-and-luks-iotests-that-are-taking-25-s.patch [bz#1683473]
  - kvm-spapr-fix-out-of-bounds-write-in-spapr_populate_drme.patch [bz#1674438]
  - kvm-qcow2-include-LUKS-payload-overhead-in-qemu-img-meas.patch [bz#1655065]
  - kvm-iotests-add-LUKS-payload-overhead-to-178-qemu-img-me.patch [bz#1655065]
  - kvm-vnc-detect-and-optimize-pageflips.patch [bz#1666206]
  - kvm-Load-kvm-module-during-boot.patch [bz#1676907 bz#1685995]
  - kvm-hostmem-file-reject-invalid-pmem-file-sizes.patch [bz#1669053]
  - kvm-iotests-Fix-test-200-on-s390x-without-virtio-pci.patch [bz#1687582]
  - kvm-block-file-posix-do-not-fail-on-unlock-bytes.patch [bz#1652572]
  - Resolves: bz#1652572
    (QEMU core dumped if stop nfs service during migration)
  - Resolves: bz#1655065
    ([rhel.8.0][fast train]'qemu-img measure' size does not match the real allocated size for luks-inside-qcow2 image)
  - Resolves: bz#1666206
    (vnc server should detect page-flips and avoid sending fullscreen updates then.)
  - Resolves: bz#1669053
    (Guest call trace when boot with nvdimm device backed by /dev/dax)
  - Resolves: bz#1674438
    (RHEL8.0 - Guest reboot fails after memory hotplug multiple times (kvm))
  - Resolves: bz#1676907
    (/dev/kvm device exists but kernel module is not loaded on boot up causing VM start to fail in libvirt)
  - Resolves: bz#1683473
    (Remove 7 qcow2 & luks iotests from rhel8 fast train build %check phase)
  - Resolves: bz#1685995
    (/dev/kvm device exists but kernel module is not loaded on boot up causing VM start to fail in libvirt)
  - Resolves: bz#1687582
    (QEMU IOTEST 200 fails with 'virtio-scsi-pci is not a valid device model name')


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-22.el8
changelog:
  - kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1687578]
  - kvm-i386-Make-arch_capabilities-migratable.patch [bz#1687578]
  - Resolves: bz#1687578
    (Incorrect CVE vulnerabilities reported on Cascade Lake cpus)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-23.el8
changelog:
  - kvm-device_tree-Fix-integer-overflowing-in-load_device_t.patch [bz#1693173]
  - Resolves: bz#1693173
    (CVE-2018-20815 qemu-kvm: QEMU: device_tree: heap buffer overflow while loading device tree blob [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-24.el8
changelog:
  - kvm-x86-host-phys-bits-limit-option.patch [bz#1688915]
  - kvm-rhel-Set-host-phys-bits-limit-48-on-rhel-machine-typ.patch [bz#1688915]
  - Resolves: bz#1688915
    ([Intel 8.0 Alpha] physical bits should  <= 48  when host with 5level paging &EPT5 and qemu command with "-cpu qemu64" parameters.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-25.el8
changelog:
  - kvm-redhat-enable-tpmdev-passthrough.patch [bz#1688312]
  - kvm-exec-Only-count-mapped-memory-backends-for-qemu_getr.patch [bz#1680492]
  - kvm-Enable-libpmem-to-support-nvdimm.patch [bz#1705149]
  - Resolves: bz#1680492
    (Qemu quits suddenly while system_reset after hot-plugging unsupported memory by compatible guest on P9 with 1G huge page set)
  - Resolves: bz#1688312
    ([RFE] enable TPM passthrough at compile time (qemu-kvm))
  - Resolves: bz#1705149
    (libpmem support is not enabled in qemu-kvm)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-26.el8
changelog:
  - kvm-target-ppc-spapr-Add-SPAPR_CAP_LARGE_DECREMENTER.patch [bz#1698711]
  - kvm-target-ppc-spapr-Add-workaround-option-to-SPAPR_CAP_.patch [bz#1698711]
  - kvm-target-ppc-spapr-Add-SPAPR_CAP_CCF_ASSIST.patch [bz#1698711]
  - kvm-target-ppc-tcg-make-spapr_caps-apply-cap-cfpc-sbbc-i.patch [bz#1698711]
  - kvm-target-ppc-spapr-Enable-mitigations-by-default-for-p.patch [bz#1698711]
  - kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1693076]
  - kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1693076]
  - Resolves: bz#1693076
    (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-av-8])
  - Resolves: bz#1698711
    (Enable Spectre / Meltdown mitigations by default in pseries-rhel8.0.0 machine type)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.0.0-2.el8
changelog:
  - kvm-target-i386-define-md-clear-bit.patch [bz#1703297 bz#1703304 bz#1703310 bz#1707274]
  - Resolves: bz#1703297
    (CVE-2018-12126 virt:8.0.0/qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling (MSBDS) [rhel-av-8])
  - Resolves: bz#1703304
    (CVE-2018-12130 virt:8.0.0/qemu-kvm: hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS) [rhel-av-8])
  - Resolves: bz#1703310
    (CVE-2018-12127 virt:8.0.0/qemu-kvm: hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS) [rhel-av-8])
  - Resolves: bz#1707274
    (CVE-2019-11091 virt:8.0.0/qemu-kvm: hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM) [rhel-av-8.1.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.0.0-3.el8
changelog:
  - kvm-redhat-fix-cut-n-paste-garbage-in-hw_compat-comments.patch [bz#1709726]
  - kvm-compat-Generic-hw_compat_rhel_8_0.patch [bz#1709726]
  - kvm-redhat-sync-pseries-rhel7.6.0-with-rhel-av-8.0.1.patch [bz#1709726]
  - kvm-redhat-define-pseries-rhel8.1.0-machine-type.patch [bz#1709726]
  - Resolves: bz#1709726
    (Forward and backward migration failed with "qemu-kvm: error while loading state for instance 0x0 of device 'spapr'")


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.0.0-4.el8
changelog:
  - kvm-Disable-VXHS-support.patch [bz#1714937]
  - kvm-aarch64-Add-virt-rhel8.1.0-machine-type-for-ARM.patch [bz#1713735]
  - kvm-aarch64-Allow-ARM-VIRT-iommu-option-in-RHEL8.1-machi.patch [bz#1713735]
  - kvm-usb-call-reset-handler-before-updating-state.patch [bz#1713679]
  - kvm-usb-host-skip-reset-for-untouched-devices.patch [bz#1713679]
  - kvm-usb-host-avoid-libusb_set_configuration-calls.patch [bz#1713679]
  - kvm-aarch64-Compile-out-IOH3420.patch [bz#1627283]
  - kvm-vl-Fix-drive-blockdev-persistent-reservation-managem.patch [bz#1714891]
  - kvm-vl-Document-why-objects-are-delayed.patch [bz#1714891]
  - Resolves: bz#1627283
    (Compile out IOH3420 on aarch64)
  - Resolves: bz#1713679
    (Detached device when trying to upgrade USB device firmware when in doing USB Passthrough via QEMU)
  - Resolves: bz#1713735
    (Allow ARM VIRT iommu option in RHEL8.1 machine)
  - Resolves: bz#1714891
    (Guest with persistent reservation manager for a disk fails to start)
  - Resolves: bz#1714937
    (Disable VXHS support)


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.0.0-5.el8
changelog:
  - kvm-qemu-kvm.spec-bump-libseccomp-2.4.0.patch [bz#1720306]
  - kvm-qxl-check-release-info-object.patch [bz#1712717]
  - kvm-target-i386-add-MDS-NO-feature.patch [bz#1722839]
  - kvm-block-file-posix-Unaligned-O_DIRECT-block-status.patch [bz#1588356]
  - kvm-iotests-Test-unaligned-raw-images-with-O_DIRECT.patch [bz#1588356]
  - kvm-rh-set-CONFIG_BOCHS_DISPLAY-y-for-x86.patch [bz#1707118]
  - Resolves: bz#1588356
    (qemu crashed on the source host when do storage migration with source qcow2 disk created by 'qemu-img')
  - Resolves: bz#1707118
    (enable device: bochs-display (QEMU))
  - Resolves: bz#1712717
    (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-av-8])
  - Resolves: bz#1720306
    (VM failed to start with error "failed to install seccomp syscall filter in the kernel")
  - Resolves: bz#1722839
    ([Intel 8.1 FEAT] MDS_NO exposure to guest - Fast Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.0.0-6.el8
changelog:
  - kvm-x86_64-rh-devices-add-missing-TPM-passthrough.patch [bz#1519013]
  - kvm-x86_64-rh-devices-enable-TPM-emulation.patch [bz#1519013]
  - kvm-vfio-increase-the-cap-on-number-of-assigned-devices-.patch [bz#1719823]
  - Resolves: bz#1519013
    ([RFE] QEMU Software TPM support (vTPM, or TPM emulation))
  - Resolves: bz#1719823
    ([RHEL 8.1] [RFE] increase the maximum of vfio devices to more than 32 in qemu-kvm)


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.1.0-1.el8
changelog:
  - Rebase to qemu 4.1.0 rc4 [bz#1705235]
  - Resolves: bz#1705235
    (Rebase qemu-kvm for RHEL-AV 8.1.0)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-2.el8
changelog:
  - kvm-spec-Update-seavgabios-dependency.patch [bz#1725664]
  - kvm-pc-Don-t-make-die-id-mandatory-unless-necessary.patch [bz#1741451]
  - kvm-display-bochs-fix-pcie-support.patch [bz#1733977 bz#1740692]
  - kvm-spapr-Reset-CAS-IRQ-subsystem-after-devices.patch [bz#1733977]
  - kvm-spapr-xive-Fix-migration-of-hot-plugged-CPUs.patch [bz#1733977]
  - kvm-riscv-roms-Fix-make-rules-for-building-sifive_u-bios.patch [bz#1733977 bz#1740692]
  - kvm-Update-version-for-v4.1.0-release.patch [bz#1733977 bz#1740692]
  - Resolves: bz#1725664
    (Update seabios dependency)
  - Resolves: bz#1733977
    (Qemu core dumped: /home/ngu/qemu/hw/intc/xics_kvm.c:321: ics_kvm_set_irq: Assertion `kernel_xics_fd != -1' failed)
  - Resolves: bz#1740692
    (Backport QEMU 4.1.0 rc5 & ga patches)
  - Resolves: bz#1741451
    (Failed to hot-plug vcpus)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-3.el8
changelog:
  - kvm-x86-machine-types-pc_rhel_8_0_compat.patch [bz#1719649]
  - kvm-x86-machine-types-q35-Fixup-units_per_default_bus.patch [bz#1719649]
  - kvm-x86-machine-types-Fixup-dynamic-sysbus-entries.patch [bz#1719649]
  - kvm-x86-machine-types-add-pc-q35-rhel8.1.0.patch [bz#1719649]
  - kvm-machine-types-Update-hw_compat_rhel_8_0-from-hw_comp.patch [bz#1719649]
  - kvm-virtio-Make-disable-legacy-disable-modern-compat-pro.patch [bz#1719649]
  - Resolves: bz#1719649
    (8.1 machine type for x86)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-4.el8
changelog:
  - kvm-RHEL-disable-hostmem-memfd.patch [bz#1738626 bz#1740797]
  - Resolves: bz#1738626
    (Disable memfd in QEMU)
  - Resolves: bz#1740797
    (Disable memfd in QEMU)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-5.el8
changelog:
  - kvm-redhat-s390x-Rename-s390-ccw-virtio-rhel8.0.0-to-s39.patch [bz#1693772]
  - kvm-redhat-s390x-Add-proper-compatibility-options-for-th.patch [bz#1693772]
  - kvm-enable-virgl.patch [bz#1559740]
  - kvm-redhat-update-pseries-rhel8.1.0-machine-type.patch [bz#1744170]
  - kvm-Do-not-run-iotests-on-brew-build.patch [bz#1742197 bz#1742819]
  - Resolves: bz#1559740
    ([RFE] Enable virgl as TechPreview (qemu))
  - Resolves: bz#1693772
    ([IBM zKVM] RHEL AV 8.1.0 machine type update for s390x)
  - Resolves: bz#1742197
    (Remove iotests from qemu-kvm builds [RHEL AV 8.1.0])
  - Resolves: bz#1742819
    (Remove iotests from qemu-kvm builds [RHEL 8.1.0])
  - Resolves: bz#1744170
    ([IBM Power] New 8.1.0 machine type for pseries)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-6.el8
changelog:
  - kvm-memory-Refactor-memory_region_clear_coalescing.patch [bz#1743142]
  - kvm-memory-Split-zones-when-do-coalesced_io_del.patch [bz#1743142]
  - kvm-memory-Remove-has_coalesced_range-counter.patch [bz#1743142]
  - kvm-memory-Fix-up-memory_region_-add-del-_coalescing.patch [bz#1743142]
  - kvm-enable-virgl-for-real-this-time.patch [bz#1559740]
  - Resolves: bz#1559740
    ([RFE] Enable virgl as TechPreview (qemu))
  - Resolves: bz#1743142
    (Boot guest with multiple e1000 devices, qemu will crash after several guest reboots: kvm_mem_ioeventfd_add: error adding ioeventfd: No space left on device (28))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-7.el8
changelog:
  - kvm-trace-Clarify-DTrace-SystemTap-help-message.patch [bz#1516220]
  - kvm-socket-Add-backlog-parameter-to-socket_listen.patch [bz#1726898]
  - kvm-socket-Add-num-connections-to-qio_channel_socket_syn.patch [bz#1726898]
  - kvm-socket-Add-num-connections-to-qio_channel_socket_asy.patch [bz#1726898]
  - kvm-socket-Add-num-connections-to-qio_net_listener_open_.patch [bz#1726898]
  - kvm-multifd-Use-number-of-channels-as-listen-backlog.patch [bz#1726898]
  - kvm-pseries-Fix-compat_pvr-on-reset.patch [bz#1744107]
  - kvm-spapr-Set-compat-mode-in-spapr_core_plug.patch [bz#1744107]
  - Resolves: bz#1516220
    (-trace help prints an incomplete list of trace events)
  - Resolves: bz#1726898
    (Parallel migration fails with error "Unable to write to socket: Connection reset by peer" now and then)
  - Resolves: bz#1744107
    (Migration from P8(qemu4.1) to P9(qemu4.1), after migration, qemu crash on destination with error message "qemu-kvm: error while loading state for instance 0x1 of device 'cpu'")


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-8.el8
changelog:
  - kvm-migration-Do-not-re-read-the-clock-on-pre_save-in-ca.patch [bz#1747836]
  - kvm-ehci-fix-queue-dev-null-ptr-dereference.patch [bz#1746790]
  - kvm-spapr-Use-SHUTDOWN_CAUSE_SUBSYSTEM_RESET-for-CAS-reb.patch [bz#1743477]
  - kvm-file-posix-Handle-undetectable-alignment.patch [bz#1749134]
  - kvm-block-posix-Always-allocate-the-first-block.patch [bz#1749134]
  - kvm-iotests-Test-allocate_first_block-with-O_DIRECT.patch [bz#1749134]
  - Resolves: bz#1743477
    (Since bd94bc06479a "spapr: change default interrupt mode to 'dual'", QEMU resets the machine to select the appropriate interrupt controller. And -no-reboot prevents that.)
  - Resolves: bz#1746790
    (qemu core dump while migrate from RHEL7.6 to RHEL8.1)
  - Resolves: bz#1747836
    (Call traces after guest migration due to incorrect handling of the timebase)
  - Resolves: bz#1749134
    (I/O error when virtio-blk disk is backed by a raw image on 4k disk)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-9.el8
changelog:
  - kvm-migration-always-initialise-ram_counters-for-a-new-m.patch [bz#1734316]
  - kvm-migration-add-qemu_file_update_transfer-interface.patch [bz#1734316]
  - kvm-migration-add-speed-limit-for-multifd-migration.patch [bz#1734316]
  - kvm-migration-update-ram_counters-for-multifd-sync-packe.patch [bz#1734316]
  - kvm-spapr-pci-Consolidate-de-allocation-of-MSIs.patch [bz#1750200]
  - kvm-spapr-pci-Free-MSIs-during-reset.patch [bz#1750200]
  - Resolves: bz#1734316
    (multifd migration does not honour speed limits, consumes entire bandwidth of NIC)
  - Resolves: bz#1750200
    ([RHEL8.1][QEMU4.1]boot up guest with vf device,then system_reset guest,error prompt(qemu-kvm: Can't allocate MSIs for device 2800: IRQ 4904 is not free))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-10.el8
changelog:
  - kvm-spapr-xive-Mask-the-EAS-when-allocating-an-IRQ.patch [bz#1748725]
  - kvm-block-create-Do-not-abort-if-a-block-driver-is-not-a.patch [bz#1746267]
  - kvm-virtio-blk-Cancel-the-pending-BH-when-the-dataplane-.patch [bz#1717321]
  - kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749737]
  - Resolves: bz#1717321
    (qemu-kvm core dumped when repeat "system_reset" multiple times during guest boot)
  - Resolves: bz#1746267
    (qemu coredump: qemu-kvm: block/create.c:68: qmp_blockdev_create: Assertion `drv' failed)
  - Resolves: bz#1748725
    ([ppc][migration][v6.3-rc1-p1ce8930]basic migration failed with "qemu-kvm: KVM_SET_DEVICE_ATTR failed: Group 3 attr 0x0000000000001309: Device or resource busy")
  - Resolves: bz#1749737
    (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-11.el8
changelog:
  - kvm-blockjob-update-nodes-head-while-removing-all-bdrv.patch [bz#1746631]
  - kvm-hostmem-file-fix-pmem-file-size-check.patch [bz#1724008 bz#1736788]
  - kvm-memory-fetch-pmem-size-in-get_file_size.patch [bz#1724008 bz#1736788]
  - kvm-pr-manager-Fix-invalid-g_free-crash-bug.patch [bz#1753992]
  - Resolves: bz#1724008
    (QEMU core dumped "memory_region_get_ram_ptr: Assertion `mr->ram_block' failed")
  - Resolves: bz#1736788
    (QEMU core dumped if boot guest with nvdimm backed by /dev/dax0.0 and option pmem=off)
  - Resolves: bz#1746631
    (Qemu core dump when do block commit under stress)
  - Resolves: bz#1753992
    (core dump when testing persistent reservation in guest)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-12.el8
changelog:
  - kvm-block-Use-QEMU_IS_ALIGNED.patch [bz#1745922]
  - kvm-block-qcow2-Fix-corruption-introduced-by-commit-8ac0.patch [bz#1745922]
  - kvm-block-qcow2-refactor-encryption-code.patch [bz#1745922]
  - kvm-qemu-iotests-Add-test-for-bz-1745922.patch [bz#1745922]
  - Resolves: bz#1745922
    (Luks-inside-qcow2 snapshot cannot boot after 'qemu-img rebase')


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-13.el8
changelog:
  - kvm-nbd-server-attach-client-channel-to-the-export-s-Aio.patch [bz#1748253]
  - kvm-virtio-blk-schedule-virtio_notify_config-to-run-on-m.patch [bz#1744955]
  - Resolves: bz#1744955
    (Qemu hang when block resize a qcow2 image)
  - Resolves: bz#1748253
    (QEMU crashes (core dump) when using the integrated NDB server with data-plane)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-14.el8
changelog:
  - kvm-Revert-qcow2-skip-writing-zero-buffers-to-empty-COW-.patch [bz#1751934]
  - kvm-coroutine-Add-qemu_co_mutex_assert_locked.patch [bz#1764721]
  - kvm-qcow2-Fix-corruption-bug-in-qcow2_detect_metadata_pr.patch [bz#1764721]
  - Resolves: bz#1751934
    (Fail to install guest when xfs is the host filesystem)
  - Resolves: bz#1764721
    (qcow2 image corruption due to incorrect locking in preallocation detection)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-15.el8
changelog:
  - kvm-virtio-blk-Add-blk_drain-to-virtio_blk_device_unreal.patch [bz#1706759]
  - kvm-Revert-qcow2-skip-writing-zero-buffers-to-empty-COW-.patch [bz#1772473]
  - kvm-coroutine-Add-qemu_co_mutex_assert_locked.patch [bz#1772473]
  - kvm-qcow2-Fix-corruption-bug-in-qcow2_detect_metadata_pr.patch [bz#1772473]
  - Resolves: bz#1706759
    (qemu core dump when unplug a 16T GPT type disk from win2019 guest)
  - Resolves: bz#1772473
    (Import fixes from 8.1.0 into 8.1.1 branch)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-16.el8
changelog:
  - kvm-curl-Keep-pointer-to-the-CURLState-in-CURLSocket.patch [bz#1745209]
  - kvm-curl-Keep-socket-until-the-end-of-curl_sock_cb.patch [bz#1745209]
  - kvm-curl-Check-completion-in-curl_multi_do.patch [bz#1745209]
  - kvm-curl-Pass-CURLSocket-to-curl_multi_do.patch [bz#1745209]
  - kvm-curl-Report-only-ready-sockets.patch [bz#1745209]
  - kvm-curl-Handle-success-in-multi_check_completion.patch [bz#1745209]
  - kvm-curl-Check-curl_multi_add_handle-s-return-code.patch [bz#1745209]
  - kvm-vhost-user-save-features-if-the-char-dev-is-closed.patch [bz#1738768]
  - kvm-block-snapshot-Restrict-set-of-snapshot-nodes.patch [bz#1658981]
  - kvm-iotests-Test-internal-snapshots-with-blockdev.patch [bz#1658981]
  - kvm-qapi-Add-feature-flags-to-commands-in-qapi-introspec.patch [bz#1658981]
  - kvm-qapi-Allow-introspecting-fix-for-savevm-s-cooperatio.patch [bz#1658981]
  - kvm-block-Remove-backing-null-from-bs-explicit_-options.patch [bz#1773925]
  - kvm-iotests-Test-multiple-blockdev-snapshot-calls.patch [bz#1773925]
  - Resolves: bz#1658981
    (qemu failed to create internal snapshot via 'savevm' when using blockdev)
  - Resolves: bz#1738768
    (Guest fails to recover receiving packets after vhost-user reconnect)
  - Resolves: bz#1745209
    (qemu-img gets stuck when stream-converting from http)
  - Resolves: bz#1773925
    (Fail to do blockcommit with more than one snapshots)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-17.el8
changelog:
  - kvm-qemu-pr-helper-fix-crash-in-mpath_reconstruct_sense.patch [bz#1772322]
  - Resolves: bz#1772322
    (qemu-pr-helper: fix crash in mpath_reconstruct_sense)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-18.el8
changelog:
  - kvm-LUKS-support-preallocation.patch [bz#1534951]
  - kvm-nbd-add-empty-.bdrv_reopen_prepare.patch [bz#1718727]
  - kvm-qdev-qbus-add-hidden-device-support.patch [bz#1757796]
  - kvm-pci-add-option-for-net-failover.patch [bz#1757796]
  - kvm-pci-mark-devices-partially-unplugged.patch [bz#1757796]
  - kvm-pci-mark-device-having-guest-unplug-request-pending.patch [bz#1757796]
  - kvm-qapi-add-unplug-primary-event.patch [bz#1757796]
  - kvm-qapi-add-failover-negotiated-event.patch [bz#1757796]
  - kvm-migration-allow-unplug-during-migration-for-failover.patch [bz#1757796]
  - kvm-migration-add-new-migration-state-wait-unplug.patch [bz#1757796]
  - kvm-libqos-tolerate-wait-unplug-migration-state.patch [bz#1757796]
  - kvm-net-virtio-add-failover-support.patch [bz#1757796]
  - kvm-vfio-unplug-failover-primary-device-before-migration.patch [bz#1757796]
  - kvm-net-virtio-fix-dev_unplug_pending.patch [bz#1757796]
  - kvm-net-virtio-return-early-when-failover-primary-alread.patch [bz#1757796]
  - kvm-net-virtio-fix-re-plugging-of-primary-device.patch [bz#1757796]
  - kvm-net-virtio-return-error-when-device_opts-arg-is-NULL.patch [bz#1757796]
  - kvm-vfio-don-t-ignore-return-value-of-migrate_add_blocke.patch [bz#1757796]
  - kvm-hw-vfio-pci-Fix-double-free-of-migration_blocker.patch [bz#1757796]
  - Resolves: bz#1534951
    (RFE: Support preallocation mode for luks format)
  - Resolves: bz#1718727
    (Committing changes to the backing file over NBD fails with reopening files not supported)
  - Resolves: bz#1757796
    (RFE: support for net failover devices in qemu)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-5.el8
changelog:
  - kvm-i386-Remove-cpu64-rhel6-CPU-model.patch [bz#1741345]
  - kvm-Reallocate-dirty_bmap-when-we-change-a-slot.patch [bz#1772774]
  - Resolves: bz#1741345
    (Remove the "cpu64-rhel6" CPU from qemu-kvm)
  - Resolves: bz#1772774
    (qemu-kvm core dump during migration+reboot ( Assertion `mem->dirty_bmap' failed ))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-6.el8
changelog:
  - kvm-spapr-Don-t-trigger-a-CAS-reboot-for-XICS-XIVE-mode-.patch [bz#1733893]
  - kvm-vfio-pci-Don-t-remove-irqchip-notifier-if-not-regist.patch [bz#1782678]
  - kvm-virtio-don-t-enable-notifications-during-polling.patch [bz#1789301]
  - kvm-usbredir-Prevent-recursion-in-usbredir_write.patch [bz#1790844]
  - kvm-xhci-recheck-slot-status.patch [bz#1790844]
  - Resolves: bz#1733893
    (Boot a guest with "-prom-env 'auto-boot?=false'", SLOF failed to enter the boot entry after input "boot" followed by "0 > " on VNC)
  - Resolves: bz#1782678
    (qemu core dump after hot-unplugging the   XXV710/XL710 PF)
  - Resolves: bz#1789301
    (virtio-blk/scsi: fix notification suppression during AioContext polling)
  - Resolves: bz#1790844
    (USB related fixes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.2.0-7.el8
changelog:
  - kvm-tcp_emu-Fix-oob-access.patch [bz#1791568]
  - kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791568]
  - kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791568]
  - kvm-RHEL-hw-i386-disable-nested-PERF_GLOBAL_CTRL-MSR-sup.patch [bz#1559846]
  - Resolves: bz#1559846
    (Nested KVM: limit VMX features according to CPU models - Fast Train)
  - Resolves: bz#1791568
    (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-av-8.2.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.2.0-8.el8
changelog:
  - kvm-target-arm-arch_dump-Add-SVE-notes.patch [bz#1725084]
  - kvm-vhost-Add-names-to-section-rounded-warning.patch [bz#1779041]
  - kvm-vhost-Only-align-sections-for-vhost-user.patch [bz#1779041]
  - kvm-vhost-coding-style-fix.patch [bz#1779041]
  - kvm-virtio-fs-fix-MSI-X-nvectors-calculation.patch [bz#1694164]
  - kvm-vhost-user-fs-remove-vhostfd-property.patch [bz#1694164]
  - kvm-build-rename-CONFIG_LIBCAP-to-CONFIG_LIBCAP_NG.patch [bz#1694164]
  - kvm-virtiofsd-Pull-in-upstream-headers.patch [bz#1694164]
  - kvm-virtiofsd-Pull-in-kernel-s-fuse.h.patch [bz#1694164]
  - kvm-virtiofsd-Add-auxiliary-.c-s.patch [bz#1694164]
  - kvm-virtiofsd-Add-fuse_lowlevel.c.patch [bz#1694164]
  - kvm-virtiofsd-Add-passthrough_ll.patch [bz#1694164]
  - kvm-virtiofsd-Trim-down-imported-files.patch [bz#1694164]
  - kvm-virtiofsd-Format-imported-files-to-qemu-style.patch [bz#1694164]
  - kvm-virtiofsd-remove-mountpoint-dummy-argument.patch [bz#1694164]
  - kvm-virtiofsd-remove-unused-notify-reply-support.patch [bz#1694164]
  - kvm-virtiofsd-Remove-unused-enum-fuse_buf_copy_flags.patch [bz#1694164]
  - kvm-virtiofsd-Fix-fuse_daemonize-ignored-return-values.patch [bz#1694164]
  - kvm-virtiofsd-Fix-common-header-and-define-for-QEMU-buil.patch [bz#1694164]
  - kvm-virtiofsd-Trim-out-compatibility-code.patch [bz#1694164]
  - kvm-vitriofsd-passthrough_ll-fix-fallocate-ifdefs.patch [bz#1694164]
  - kvm-virtiofsd-Make-fsync-work-even-if-only-inode-is-pass.patch [bz#1694164]
  - kvm-virtiofsd-Add-options-for-virtio.patch [bz#1694164]
  - kvm-virtiofsd-add-o-source-PATH-to-help-output.patch [bz#1694164]
  - kvm-virtiofsd-Open-vhost-connection-instead-of-mounting.patch [bz#1694164]
  - kvm-virtiofsd-Start-wiring-up-vhost-user.patch [bz#1694164]
  - kvm-virtiofsd-Add-main-virtio-loop.patch [bz#1694164]
  - kvm-virtiofsd-get-set-features-callbacks.patch [bz#1694164]
  - kvm-virtiofsd-Start-queue-threads.patch [bz#1694164]
  - kvm-virtiofsd-Poll-kick_fd-for-queue.patch [bz#1694164]
  - kvm-virtiofsd-Start-reading-commands-from-queue.patch [bz#1694164]
  - kvm-virtiofsd-Send-replies-to-messages.patch [bz#1694164]
  - kvm-virtiofsd-Keep-track-of-replies.patch [bz#1694164]
  - kvm-virtiofsd-Add-Makefile-wiring-for-virtiofsd-contrib.patch [bz#1694164]
  - kvm-virtiofsd-Fast-path-for-virtio-read.patch [bz#1694164]
  - kvm-virtiofsd-add-fd-FDNUM-fd-passing-option.patch [bz#1694164]
  - kvm-virtiofsd-make-f-foreground-the-default.patch [bz#1694164]
  - kvm-virtiofsd-add-vhost-user.json-file.patch [bz#1694164]
  - kvm-virtiofsd-add-print-capabilities-option.patch [bz#1694164]
  - kvm-virtiofs-Add-maintainers-entry.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-create-new-files-in-caller-.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-lo_map-for-ino-fh-indir.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-ino_map-to-hide-lo_inod.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-dirp_map-to-hide-lo_dir.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-fd_map-to-hide-file-des.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-fallback-for-racy-ops.patch [bz#1694164]
  - kvm-virtiofsd-validate-path-components.patch [bz#1694164]
  - kvm-virtiofsd-Plumb-fuse_bufvec-through-to-do_write_buf.patch [bz#1694164]
  - kvm-virtiofsd-Pass-write-iov-s-all-the-way-through.patch [bz#1694164]
  - kvm-virtiofsd-add-fuse_mbuf_iter-API.patch [bz#1694164]
  - kvm-virtiofsd-validate-input-buffer-sizes-in-do_write_bu.patch [bz#1694164]
  - kvm-virtiofsd-check-input-buffer-size-in-fuse_lowlevel.c.patch [bz#1694164]
  - kvm-virtiofsd-prevent-.-escape-in-lo_do_lookup.patch [bz#1694164]
  - kvm-virtiofsd-prevent-.-escape-in-lo_do_readdir.patch [bz#1694164]
  - kvm-virtiofsd-use-proc-self-fd-O_PATH-file-descriptor.patch [bz#1694164]
  - kvm-virtiofsd-sandbox-mount-namespace.patch [bz#1694164]
  - kvm-virtiofsd-move-to-an-empty-network-namespace.patch [bz#1694164]
  - kvm-virtiofsd-move-to-a-new-pid-namespace.patch [bz#1694164]
  - kvm-virtiofsd-add-seccomp-whitelist.patch [bz#1694164]
  - kvm-virtiofsd-Parse-flag-FUSE_WRITE_KILL_PRIV.patch [bz#1694164]
  - kvm-virtiofsd-cap-ng-helpers.patch [bz#1694164]
  - kvm-virtiofsd-Drop-CAP_FSETID-if-client-asked-for-it.patch [bz#1694164]
  - kvm-virtiofsd-set-maximum-RLIMIT_NOFILE-limit.patch [bz#1694164]
  - kvm-virtiofsd-fix-libfuse-information-leaks.patch [bz#1694164]
  - kvm-virtiofsd-add-syslog-command-line-option.patch [bz#1694164]
  - kvm-virtiofsd-print-log-only-when-priority-is-high-enoug.patch [bz#1694164]
  - kvm-virtiofsd-Add-ID-to-the-log-with-FUSE_LOG_DEBUG-leve.patch [bz#1694164]
  - kvm-virtiofsd-Add-timestamp-to-the-log-with-FUSE_LOG_DEB.patch [bz#1694164]
  - kvm-virtiofsd-Handle-reinit.patch [bz#1694164]
  - kvm-virtiofsd-Handle-hard-reboot.patch [bz#1694164]
  - kvm-virtiofsd-Kill-threads-when-queues-are-stopped.patch [bz#1694164]
  - kvm-vhost-user-Print-unexpected-slave-message-types.patch [bz#1694164]
  - kvm-contrib-libvhost-user-Protect-slave-fd-with-mutex.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-renameat2-support.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-disable-readdirplus-on-cach.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-control-readdirplus.patch [bz#1694164]
  - kvm-virtiofsd-rename-unref_inode-to-unref_inode_lolocked.patch [bz#1694164]
  - kvm-virtiofsd-fail-when-parent-inode-isn-t-known-in-lo_d.patch [bz#1694164]
  - kvm-virtiofsd-extract-root-inode-init-into-setup_root.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-clean-up-cache-related-opti.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-use-hashtable.patch [bz#1694164]
  - kvm-virtiofsd-Clean-up-inodes-on-destroy.patch [bz#1694164]
  - kvm-virtiofsd-support-nanosecond-resolution-for-file-tim.patch [bz#1694164]
  - kvm-virtiofsd-fix-error-handling-in-main.patch [bz#1694164]
  - kvm-virtiofsd-cleanup-allocated-resource-in-se.patch [bz#1694164]
  - kvm-virtiofsd-fix-memory-leak-on-lo.source.patch [bz#1694164]
  - kvm-virtiofsd-add-helper-for-lo_data-cleanup.patch [bz#1694164]
  - kvm-virtiofsd-Prevent-multiply-running-with-same-vhost_u.patch [bz#1694164]
  - kvm-virtiofsd-enable-PARALLEL_DIROPS-during-INIT.patch [bz#1694164]
  - kvm-virtiofsd-fix-incorrect-error-handling-in-lo_do_look.patch [bz#1694164]
  - kvm-Virtiofsd-fix-memory-leak-on-fuse-queueinfo.patch [bz#1694164]
  - kvm-virtiofsd-Support-remote-posix-locks.patch [bz#1694164]
  - kvm-virtiofsd-use-fuse_lowlevel_is_virtio-in-fuse_sessio.patch [bz#1694164]
  - kvm-virtiofsd-prevent-fv_queue_thread-vs-virtio_loop-rac.patch [bz#1694164]
  - kvm-virtiofsd-make-lo_release-atomic.patch [bz#1694164]
  - kvm-virtiofsd-prevent-races-with-lo_dirp_put.patch [bz#1694164]
  - kvm-virtiofsd-rename-inode-refcount-to-inode-nlookup.patch [bz#1694164]
  - kvm-libvhost-user-Fix-some-memtable-remap-cases.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-fix-refcounting-on-remove-r.patch [bz#1694164]
  - kvm-virtiofsd-introduce-inode-refcount-to-prevent-use-af.patch [bz#1694164]
  - kvm-virtiofsd-do-not-always-set-FUSE_FLOCK_LOCKS.patch [bz#1694164]
  - kvm-virtiofsd-convert-more-fprintf-and-perror-to-use-fus.patch [bz#1694164]
  - kvm-virtiofsd-Reset-O_DIRECT-flag-during-file-open.patch [bz#1694164]
  - kvm-virtiofsd-Fix-data-corruption-with-O_APPEND-write-in.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-Use-cache_readdir-for-direc.patch [bz#1694164]
  - kvm-virtiofsd-add-definition-of-fuse_buf_writev.patch [bz#1694164]
  - kvm-virtiofsd-use-fuse_buf_writev-to-replace-fuse_buf_wr.patch [bz#1694164]
  - kvm-virtiofsd-process-requests-in-a-thread-pool.patch [bz#1694164]
  - kvm-virtiofsd-prevent-FUSE_INIT-FUSE_DESTROY-races.patch [bz#1694164]
  - kvm-virtiofsd-fix-lo_destroy-resource-leaks.patch [bz#1694164]
  - kvm-virtiofsd-add-thread-pool-size-NUM-option.patch [bz#1694164]
  - kvm-virtiofsd-Convert-lo_destroy-to-take-the-lo-mutex-lo.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-Pass-errno-to-fuse_reply_er.patch [bz#1694164]
  - kvm-virtiofsd-stop-all-queue-threads-on-exit-in-virtio_l.patch [bz#1694164]
  - kvm-virtiofsd-add-some-options-to-the-help-message.patch [bz#1694164]
  - kvm-redhat-ship-virtiofsd-vhost-user-device-backend.patch [bz#1694164]
  - Resolves: bz#1694164
    (virtio-fs: host<->guest shared file system (qemu))
  - Resolves: bz#1725084
    (aarch64: support dumping SVE registers)
  - Resolves: bz#1779041
    (netkvm: no connectivity Windows guest with q35 + hugepages + vhost + hv_synic)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-9.el8
changelog:
  - kvm-ppc-Deassert-the-external-interrupt-pin-in-KVM-on-re.patch [bz#1776638]
  - kvm-xics-Don-t-deassert-outputs.patch [bz#1776638]
  - kvm-ppc-Don-t-use-CPUPPCState-irq_input_state-with-moder.patch [bz#1776638]
  - kvm-trace-update-qemu-trace-stap-to-Python-3.patch [bz#1787395]
  - kvm-redhat-Remove-redundant-fix-for-qemu-trace-stap.patch [bz#1787395]
  - kvm-iscsi-Cap-block-count-from-GET-LBA-STATUS-CVE-2020-1.patch [bz#1794503]
  - kvm-tpm-ppi-page-align-PPI-RAM.patch [bz#1787444]
  - kvm-target-arm-kvm-trivial-Clean-up-header-documentation.patch [bz#1647366]
  - kvm-target-arm-kvm64-kvm64-cpus-have-timer-registers.patch [bz#1647366]
  - kvm-tests-arm-cpu-features-Check-feature-default-values.patch [bz#1647366]
  - kvm-target-arm-kvm-Implement-virtual-time-adjustment.patch [bz#1647366]
  - kvm-target-arm-cpu-Add-the-kvm-no-adjvtime-CPU-property.patch [bz#1647366]
  - kvm-migration-Define-VMSTATE_INSTANCE_ID_ANY.patch [bz#1529231]
  - kvm-migration-Change-SaveStateEntry.instance_id-into-uin.patch [bz#1529231]
  - kvm-apic-Use-32bit-APIC-ID-for-migration-instance-ID.patch [bz#1529231]
  - Resolves: bz#1529231
    ([q35] VM hangs after migration with 200 vCPUs)
  - Resolves: bz#1647366
    (aarch64: Add support for the kvm-no-adjvtime ARM CPU feature)
  - Resolves: bz#1776638
    (Guest failed to boot up after system_reset  20 times)
  - Resolves: bz#1787395
    (qemu-trace-stap list : TypeError: startswith first arg must be bytes or a tuple of bytes, not str)
  - Resolves: bz#1787444
    (Broken postcopy migration with vTPM device)
  - Resolves: bz#1794503
    (CVE-2020-1711 qemu-kvm: QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server [rhel-av-8.2.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-10.el8
changelog:
  - kvm-i386-Resolve-CPU-models-to-v1-by-default.patch [bz#1779078 bz#1787291 bz#1779078 bz#1779078]
  - kvm-iotests-Support-job-complete-in-run_job.patch [bz#1781637]
  - kvm-iotests-Create-VM.blockdev_create.patch [bz#1781637]
  - kvm-block-Activate-recursively-even-for-already-active-n.patch [bz#1781637]
  - kvm-hmp-Allow-using-qdev-ID-for-qemu-io-command.patch [bz#1781637]
  - kvm-iotests-Test-external-snapshot-with-VM-state.patch [bz#1781637]
  - kvm-iotests.py-Let-wait_migration-wait-even-more.patch [bz#1781637]
  - kvm-blockdev-fix-coding-style-issues-in-drive_backup_pre.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-unify-qmp_drive_backup-and-drive-backup-tra.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-unify-qmp_blockdev_backup-and-blockdev-back.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-honor-bdrv_try_set_aio_context-context-requ.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-backup-top-Begin-drain-earlier.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-block-backup-top-Don-t-acquire-context-while-droppin.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-Acquire-AioContext-on-dirty-bitmap-function.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-Return-bs-to-the-proper-context-on-snapshot.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-iotests-Test-handling-of-AioContexts-with-some-block.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-target-arm-monitor-query-cpu-model-expansion-crashed.patch [bz#1801320]
  - kvm-docs-arm-cpu-features-Make-kvm-no-adjvtime-comment-c.patch [bz#1801320]
  - Resolves: bz#1745606
    (Qemu hang when do incremental live backup in transaction mode without bitmap)
  - Resolves: bz#1746217
    (Src qemu hang when do storage vm migration during guest installation)
  - Resolves: bz#1773517
    (Src qemu hang when do storage vm migration with dataplane enable)
  - Resolves: bz#1779036
    (Qemu coredump when do snapshot in transaction mode with one snapshot path not exist)
  - Resolves: bz#1779078
    (RHVH 4.4: Failed to run VM on 4.3/4.4 engine (Exit message: the CPU is incompatible with host CPU: Host CPU does not provide required features: hle, rtm))
  - Resolves: bz#1781637
    (qemu crashed when do mem and disk snapshot)
  - Resolves: bz#1782111
    (Qemu hang when do full backup on multi-disks with one job's 'job-id' missed in transaction mode(data plane enable))
  - Resolves: bz#1782175
    (Qemu core dump when add persistent bitmap(data plane enable))
  - Resolves: bz#1783965
    (Qemu core dump when do backup with sync: bitmap and no bitmap provided)
  - Resolves: bz#1787291
    (RHVH 4.4: Failed to run VM on 4.3/4.4 engine (Exit message: the CPU is incompatible with host CPU: Host CPU does not provide required features: hle, rtm) [rhel-8.1.0.z])
  - Resolves: bz#1801320
    (aarch64: backport query-cpu-model-expansion and adjvtime document fixes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-11.el8
changelog:
  - kvm-spapr-Enable-DD2.3-accelerated-count-cache-flush-in-.patch [bz#1796240]
  - kvm-util-add-slirp_fmt-helpers.patch [bz#1798994]
  - kvm-tcp_emu-fix-unsafe-snprintf-usages.patch [bz#1798994]
  - kvm-virtio-add-ability-to-delete-vq-through-a-pointer.patch [bz#1791590]
  - kvm-virtio-make-virtio_delete_queue-idempotent.patch [bz#1791590]
  - kvm-virtio-reset-region-cache-when-on-queue-deletion.patch [bz#1791590]
  - kvm-virtio-net-delete-also-control-queue-when-TX-RX-dele.patch [bz#1791590]
  - Resolves: bz#1791590
    ([Q35] No "DEVICE_DELETED" event in qmp after unplug virtio-net-pci device)
  - Resolves: bz#1796240
    (Enable hw accelerated cache-count-flush by default for POWER9 DD2.3 cpus)
  - Resolves: bz#1798994
    (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-av-8.2.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-12.el8
changelog:
  - kvm-vhost-user-gpu-Drop-trailing-json-comma.patch [bz#1805334]
  - Resolves: bz#1805334
    (vhost-user/50-qemu-gpu.json is not valid JSON)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-13.el8
changelog:
  - kvm-target-i386-kvm-initialize-feature-MSRs-very-early.patch [bz#1791648]
  - kvm-target-i386-add-a-ucode-rev-property.patch [bz#1791648]
  - kvm-target-i386-kvm-initialize-microcode-revision-from-K.patch [bz#1791648]
  - kvm-target-i386-fix-TCG-UCODE_REV-access.patch [bz#1791648]
  - kvm-target-i386-check-for-availability-of-MSR_IA32_UCODE.patch [bz#1791648]
  - kvm-target-i386-enable-monitor-and-ucode-revision-with-c.patch [bz#1791648]
  - kvm-qcow2-Fix-qcow2_alloc_cluster_abort-for-external-dat.patch [bz#1703907]
  - kvm-mirror-Store-MirrorOp.co-for-debuggability.patch [bz#1794692]
  - kvm-mirror-Don-t-let-an-operation-wait-for-itself.patch [bz#1794692]
  - Resolves: bz#1703907
    ([upstream]QEMU coredump when converting to qcow2: external data file images on block devices with copy_offloading)
  - Resolves: bz#1791648
    ([RFE] Passthrough host CPU microcode version to KVM guest if using CPU passthrough)
  - Resolves: bz#1794692
    (Mirror block job stops making progress)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-14.el8
changelog:
  - kvm-hw-smbios-set-new-default-SMBIOS-fields-for-Windows-.patch [bz#1782529]
  - kvm-migration-multifd-clean-pages-after-filling-packet.patch [bz#1738451]
  - kvm-migration-Make-sure-that-we-don-t-call-write-in-case.patch [bz#1738451]
  - kvm-migration-multifd-fix-nullptr-access-in-terminating-.patch [bz#1738451]
  - kvm-migration-multifd-fix-destroyed-mutex-access-in-term.patch [bz#1738451]
  - kvm-multifd-Make-sure-that-we-don-t-do-any-IO-after-an-e.patch [bz#1738451]
  - kvm-qemu-file-Don-t-do-IO-after-shutdown.patch [bz#1738451]
  - kvm-migration-Don-t-send-data-if-we-have-stopped.patch [bz#1738451]
  - kvm-migration-Create-migration_is_running.patch [bz#1738451]
  - kvm-migration-multifd-fix-nullptr-access-in-multifd_send.patch [bz#1738451]
  - kvm-migration-Maybe-VM-is-paused-when-migration-is-cance.patch [bz#1738451]
  - kvm-virtiofsd-Remove-fuse_req_getgroups.patch [bz#1797064]
  - kvm-virtiofsd-fv_create_listen_socket-error-path-socket-.patch [bz#1797064]
  - kvm-virtiofsd-load_capng-missing-unlock.patch [bz#1797064]
  - kvm-virtiofsd-do_read-missing-NULL-check.patch [bz#1797064]
  - kvm-tools-virtiofsd-fuse_lowlevel-Fix-fuse_out_header-er.patch [bz#1797064]
  - kvm-virtiofsd-passthrough_ll-cleanup-getxattr-listxattr.patch [bz#1797064]
  - kvm-virtiofsd-Fix-xattr-operations.patch [bz#1797064]
  - Resolves: bz#1738451
    (qemu on src host core dump after set multifd-channels and do migration twice (first migration execute migrate_cancel))
  - Resolves: bz#1782529
    (Windows Update Enablement with default smbios strings in qemu)
  - Resolves: bz#1797064
    (virtiofsd: Fixes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-15.el8
changelog:
  - kvm-block-nbd-Fix-hang-in-.bdrv_close.patch [bz#1640894]
  - kvm-block-Generic-file-creation-fallback.patch [bz#1640894]
  - kvm-file-posix-Drop-hdev_co_create_opts.patch [bz#1640894]
  - kvm-iscsi-Drop-iscsi_co_create_opts.patch [bz#1640894]
  - kvm-iotests-Add-test-for-image-creation-fallback.patch [bz#1640894]
  - kvm-block-Fix-leak-in-bdrv_create_file_fallback.patch [bz#1640894]
  - kvm-iotests-Use-complete_and_wait-in-155.patch [bz#1790482 bz#1805143]
  - kvm-block-Introduce-bdrv_reopen_commit_post-step.patch [bz#1790482 bz#1805143]
  - kvm-block-qcow2-Move-bitmap-reopen-into-bdrv_reopen_comm.patch [bz#1790482 bz#1805143]
  - kvm-iotests-Refactor-blockdev-reopen-test-for-iothreads.patch [bz#1790482 bz#1805143]
  - kvm-block-bdrv_reopen-with-backing-file-in-different-Aio.patch [bz#1790482 bz#1805143]
  - kvm-block-Versioned-x-blockdev-reopen-API-with-feature-f.patch [bz#1790482 bz#1805143]
  - kvm-block-Make-bdrv_get_cumulative_perm-public.patch [bz#1790482 bz#1805143]
  - kvm-block-Relax-restrictions-for-blockdev-snapshot.patch [bz#1790482 bz#1805143]
  - kvm-iotests-Fix-run_job-with-use_log-False.patch [bz#1790482 bz#1805143]
  - kvm-iotests-Test-mirror-with-temporarily-disabled-target.patch [bz#1790482 bz#1805143]
  - kvm-block-Fix-cross-AioContext-blockdev-snapshot.patch [bz#1790482 bz#1805143]
  - kvm-iotests-Add-iothread-cases-to-155.patch [bz#1790482 bz#1805143]
  - kvm-qapi-Add-allow-write-only-overlay-feature-for-blockd.patch [bz#1790482 bz#1805143]
  - kvm-exec-rom_reset-Free-rom-data-during-inmigrate-skip.patch [bz#1809380]
  - Resolves: bz#1640894
    (Fix generic file creation fallback for qemu-img nvme:// image creation support)
  - Resolves: bz#1790482
    (bitmaps in backing images can't be modified)
  - Resolves: bz#1805143
    (allow late/lazy opening of backing chain for shallow blockdev-mirror)
  - Resolves: bz#1809380
    (guest hang during reboot process after migration from RHEl7.8 to RHEL8.2.0.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-16.el8
changelog:
  - kvm-migration-Rate-limit-inside-host-pages.patch [bz#1814336]
  - kvm-build-sys-do-not-make-qemu-ga-link-with-pixman.patch [bz#1811670]
  - Resolves: bz#1811670
    (Unneeded qemu-guest-agent dependency on pixman)
  - Resolves: bz#1814336
    ([POWER9] QEMU migration-test triggers a kernel warning)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-17.el8
changelog:
  - kvm-block-pass-BlockDriver-reference-to-the-.bdrv_co_cre.patch [bz#1816007]
  - kvm-block-trickle-down-the-fallback-image-creation-funct.patch [bz#1816007]
  - kvm-Revert-mirror-Don-t-let-an-operation-wait-for-itself.patch [bz#1794692]
  - kvm-mirror-Wait-only-for-in-flight-operations.patch [bz#1794692]
  - Resolves: bz#1794692
    (Mirror block job stops making progress)
  - Resolves: bz#1816007
    (qemu-img convert failed to convert with block device as target)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-18.el8_2
changelog:
  - kvm-job-take-each-job-s-lock-individually-in-job_txn_app.patch [bz#1817621]
  - kvm-replication-assert-we-own-context-before-job_cancel_.patch [bz#1817621]
  - kvm-backup-don-t-acquire-aio_context-in-backup_clean.patch [bz#1817621]
  - kvm-block-backend-Reorder-flush-pdiscard-function-defini.patch [bz#1817621]
  - kvm-block-Increase-BB.in_flight-for-coroutine-and-sync-i.patch [bz#1817621]
  - kvm-block-Fix-blk-in_flight-during-blk_wait_while_draine.patch [bz#1817621]
  - Resolves: bz#1817621
    (Crash and deadlock with block jobs when using io-threads)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-19.el8_2
changelog:
  - kvm-target-i386-do-not-set-unsupported-VMX-secondary-exe.patch [bz#1822682]
  - Resolves: bz#1822682
    (QEMU-4.2 fails to start a VM on Azure)


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-20.el8
changelog:
  - kvm-pcie_root_port-Add-hotplug-disabling-option.patch [bz#1790899]
  - kvm-compat-disable-edid-for-virtio-gpu-ccw.patch [bz#1816793]
  - Resolves: bz#1790899
    ([RFE] QEMU devices should have the option to enable/disable hotplug/unplug)
  - Resolves: bz#1816793
    ('edid' compat handling missing for virtio-gpu-ccw)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-21.el8
changelog:
  - kvm-hw-pci-pcie-Forbid-hot-plug-if-it-s-disabled-on-the-.patch [bz#1820531]
  - kvm-hw-pci-pcie-Replace-PCI_DEVICE-casts-with-existing-v.patch [bz#1820531]
  - kvm-tools-virtiofsd-passthrough_ll-Fix-double-close.patch [bz#1817445]
  - kvm-virtiofsd-add-rlimit-nofile-NUM-option.patch [bz#1817445]
  - kvm-virtiofsd-stay-below-fs.file-max-sysctl-value-CVE-20.patch [bz#1817445]
  - kvm-virtiofsd-jail-lo-proc_self_fd.patch [bz#1817445]
  - kvm-virtiofsd-Show-submounts.patch [bz#1817445]
  - kvm-virtiofsd-only-retain-file-system-capabilities.patch [bz#1817445]
  - kvm-virtiofsd-drop-all-capabilities-in-the-wait-parent-p.patch [bz#1817445]
  - Resolves: bz#1817445
    (CVE-2020-10717 virt:8.2/qemu-kvm: QEMU: virtiofsd: guest may open maximum file descriptor to cause DoS [rhel-av-8])
  - Resolves: bz#1820531
    (qmp command query-pci get wrong result after hotplug device under hotplug=off controller)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-22.el8
changelog:
  - kvm-block-always-fill-entire-LUKS-header-space-with-zero.patch [bz#1775462]
  - kvm-numa-remove-not-needed-check.patch [bz#1600217]
  - kvm-numa-properly-check-if-numa-is-supported.patch [bz#1600217]
  - kvm-numa-Extend-CLI-to-provide-initiator-information-for.patch [bz#1600217]
  - kvm-numa-Extend-CLI-to-provide-memory-latency-and-bandwi.patch [bz#1600217]
  - kvm-numa-Extend-CLI-to-provide-memory-side-cache-informa.patch [bz#1600217]
  - kvm-hmat-acpi-Build-Memory-Proximity-Domain-Attributes-S.patch [bz#1600217]
  - kvm-hmat-acpi-Build-System-Locality-Latency-and-Bandwidt.patch [bz#1600217]
  - kvm-hmat-acpi-Build-Memory-Side-Cache-Information-Struct.patch [bz#1600217]
  - kvm-tests-numa-Add-case-for-QMP-build-HMAT.patch [bz#1600217]
  - kvm-tests-bios-tables-test-add-test-cases-for-ACPI-HMAT.patch [bz#1600217]
  - kvm-ACPI-add-expected-files-for-HMAT-tests-acpihmat.patch [bz#1600217]
  - Resolves: bz#1600217
    ([Intel 8.2.1 FEAT] KVM ACPI HMAT support - qemu-kvm  Fast Train)
  - Resolves: bz#1775462
    (Creating luks-inside-qcow2 images with cluster_size=2k/4k will get a corrupted image)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-23.el8
changelog:
  - kvm-target-arm-Fix-PAuth-sbox-functions.patch [bz#1813940]
  - kvm-Don-t-leak-memory-when-reallocation-fails.patch [bz#1749737]
  - kvm-Replace-remaining-malloc-free-user-with-glib.patch [bz#1749737]
  - kvm-Revert-RHEL-disable-hostmem-memfd.patch [bz#1839030]
  - kvm-block-introducing-bdrv_co_delete_file-interface.patch [bz#1827630]
  - kvm-block.c-adding-bdrv_co_delete_file.patch [bz#1827630]
  - kvm-crypto.c-cleanup-created-file-when-block_crypto_co_c.patch [bz#1827630]
  - Resolves: bz#1749737
    (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-av-8])
  - Resolves: bz#1813940
    (CVE-2020-10702 virt:8.1/qemu-kvm: qemu: weak signature generation in Pointer Authentication support for ARM [rhel-av-8])
  - Resolves: bz#1827630
    (volume creation leaving uncleaned stuff behind on error (vol-clone/libvirt/qemu-kvm))
  - Resolves: bz#1839030
    (RFE: enable the "memfd" memory backend)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-24.el8
changelog:
  - kvm-target-i386-set-the-CPUID-level-to-0x14-on-old-machi.patch [bz#1513681]
  - kvm-block-curl-HTTP-header-fields-allow-whitespace-aroun.patch [bz#1841038]
  - kvm-block-curl-HTTP-header-field-names-are-case-insensit.patch [bz#1841038]
  - kvm-MAINTAINERS-fix-qcow2-bitmap.c-under-Dirty-Bitmaps-h.patch [bz#1779893 bz#1779904]
  - kvm-iotests-Let-_make_test_img-parse-its-parameters.patch [bz#1779893 bz#1779904]
  - kvm-qemu_img-add-cvtnum_full-to-print-error-reports.patch [bz#1779893 bz#1779904]
  - kvm-block-Make-it-easier-to-learn-which-BDS-support-bitm.patch [bz#1779893 bz#1779904]
  - kvm-blockdev-Promote-several-bitmap-functions-to-non-sta.patch [bz#1779893 bz#1779904]
  - kvm-blockdev-Split-off-basic-bitmap-operations-for-qemu-.patch [bz#1779893 bz#1779904]
  - kvm-qemu-img-Add-bitmap-sub-command.patch [bz#1779893 bz#1779904]
  - kvm-iotests-Fix-test-178.patch [bz#1779893 bz#1779904]
  - kvm-qcow2-Expose-bitmaps-size-during-measure.patch [bz#1779893 bz#1779904]
  - kvm-qemu-img-Factor-out-code-for-merging-bitmaps.patch [bz#1779893 bz#1779904]
  - kvm-qemu-img-Add-convert-bitmaps-option.patch [bz#1779893 bz#1779904]
  - kvm-iotests-Add-test-291-to-for-qemu-img-bitmap-coverage.patch [bz#1779893 bz#1779904]
  - kvm-iotests-Add-more-skip_if_unsupported-statements-to-t.patch [bz#1778593]
  - kvm-iotests-don-t-use-format-for-drive_add.patch [bz#1778593]
  - kvm-iotests-055-refactor-compressed-backup-to-vmdk.patch [bz#1778593]
  - kvm-iotests-055-skip-vmdk-target-tests-if-vmdk-is-not-wh.patch [bz#1778593]
  - kvm-backup-Improve-error-for-bdrv_getlength-failure.patch [bz#1778593]
  - kvm-backup-Make-sure-that-source-and-target-size-match.patch [bz#1778593]
  - kvm-iotests-Backup-with-different-source-target-size.patch [bz#1778593]
  - kvm-iotests-109-Don-t-mirror-with-mismatched-size.patch [bz#1778593]
  - kvm-iotests-229-Use-blkdebug-to-inject-an-error.patch [bz#1778593]
  - kvm-mirror-Make-sure-that-source-and-target-size-match.patch [bz#1778593]
  - kvm-iotests-Mirror-with-different-source-target-size.patch [bz#1778593]
  - Resolves: bz#1513681
    ([Intel 8.2.1 Feat] qemu-kvm PT VMX -- Fast Train)
  - Resolves: bz#1778593
    (Qemu coredump when backup to a existing small size image)
  - Resolves: bz#1779893
    (RFE: Copy bitmaps with qemu-img convert)
  - Resolves: bz#1779904
    (RFE: ability to estimate bitmap space utilization for qcow2)
  - Resolves: bz#1841038
    (qemu-img: /var/tmp/v2vovl56bced.qcow2: CURL: Error opening file: Server does not support 'range' (byte ranges) with HTTP/2 server in VMware ESXi 7)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-25.el8
changelog:
  - kvm-enable-ramfb.patch [bz#1841068]
  - kvm-block-Add-flags-to-BlockDriver.bdrv_co_truncate.patch [bz#1780574]
  - kvm-block-Add-flags-to-bdrv-_co-_truncate.patch [bz#1780574]
  - kvm-block-backend-Add-flags-to-blk_truncate.patch [bz#1780574]
  - kvm-qcow2-Support-BDRV_REQ_ZERO_WRITE-for-truncate.patch [bz#1780574]
  - kvm-raw-format-Support-BDRV_REQ_ZERO_WRITE-for-truncate.patch [bz#1780574]
  - kvm-file-posix-Support-BDRV_REQ_ZERO_WRITE-for-truncate.patch [bz#1780574]
  - kvm-block-truncate-Don-t-make-backing-file-data-visible.patch [bz#1780574]
  - kvm-iotests-Add-qemu_io_log.patch [bz#1780574]
  - kvm-iotests-Filter-testfiles-out-in-filter_img_info.patch [bz#1780574]
  - kvm-iotests-Test-committing-to-short-backing-file.patch [bz#1780574]
  - kvm-qcow2-Forward-ZERO_WRITE-flag-for-full-preallocation.patch [bz#1780574]
  - kvm-i386-Add-MSR-feature-bit-for-MDS-NO.patch [bz#1769912]
  - kvm-i386-Add-macro-for-stibp.patch [bz#1769912]
  - kvm-target-i386-Add-new-bit-definitions-of-MSR_IA32_ARCH.patch [bz#1769912]
  - kvm-i386-Add-new-CPU-model-Cooperlake.patch [bz#1769912]
  - kvm-target-i386-Add-missed-features-to-Cooperlake-CPU-mo.patch [bz#1769912]
  - Resolves: bz#1769912
    ([Intel 8.2.1 Feature] introduce Cooper Lake cpu model - qemu-kvm Fast Train)
  - Resolves: bz#1780574
    (Data corruption with resizing short overlay over longer backing files)
  - Resolves: bz#1841068
    (RFE: please support the "ramfb" display device model)


author: Eduardo Lima (Etrunko) <elima@redhat.com> - 4.2.0-26.el8
changelog:
  - kvm-nbd-server-Avoid-long-error-message-assertions-CVE-2.patch [bz#1845384]
  - kvm-block-Call-attention-to-truncation-of-long-NBD-expor.patch [bz#1845384]
  - Resolves: bz#1845384
    (CVE-2020-10761 virt:8.2/qemu-kvm: QEMU: nbd: reachable assertion failure in nbd_negotiate_send_rep_verr via remote client [rhel-av-8])


author: Eduardo Lima (Etrunko) <elima@redhat.com> - 4.2.0-27.el8
changelog:
  - kvm-hw-pci-pcie-Move-hot-plug-capability-check-to-pre_pl.patch [bz#1820531]
  - kvm-spec-Fix-python-shenigans-for-tests.patch [bz#1845779]
  - kvm-target-i386-Add-ARCH_CAPABILITIES-related-bits-into-.patch [bz#1840342]
  - Resolves: bz#1820531
    (qmp command query-pci get wrong result after hotplug device under hotplug=off controller)
  - Resolves: bz#1840342
    ([Intel 8.2.1 Bug] qemu-kvm Add ARCH_CAPABILITIES to Icelake-Server cpu model - Fast Train)
  - Resolves: bz#1845779
    (Install 'qemu-kvm-tests' failed as nothing provides /usr/libexec/platform-python3 - virt module 6972)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-28.el8
changelog:
  - kvm-virtio-blk-Refactor-the-code-that-processes-queued-r.patch [bz#1812765]
  - kvm-virtio-blk-On-restart-process-queued-requests-in-the.patch [bz#1812765]
  - kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1838082]
  - Resolves: bz#1812765
    (qemu with iothreads enabled crashes on resume after enospc pause for disk extension)
  - Resolves: bz#1838082
    (CVE-2020-1983 virt:8.2/qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-29.el8
changelog:
  - kvm-virtio-net-fix-removal-of-failover-device.patch [bz#1820120]
  - Resolves: bz#1820120
    (After hotunplugging the vitrio device and netdev, hotunpluging the failover VF will cause qemu core dump)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-1.el8
changelog:
  - Quick changelog fix to reflect the current fixes:
  - Resolve: bz#1781911
  - Resolve: bz#1841529
  - Resolve: bz#1842902
  - Resolve: bz#1818843
  - Resolve: bz#1819292
  - Resolve: bz#1801242


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-2.el8
changelog:
  - kvm-redhat-define-hw_compat_8_2.patch [bz#1853265]
  - Resolves: bz#1853265
    (Forward and backward migration from rhel-av-8.3.0(qemu-kvm-5.0.0) to rhel-av-8.2.1(qemu-kvm-4.2.0) failed with "qemu-kvm: error while loading state for instance 0x0 of device 'spapr'")


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-3.el8
changelog:
  - kvm-redhat-Update-hw_compat_8_2.patch [bz#1843348]
  - kvm-redhat-update-pseries-rhel8.2.0-machine-type.patch [bz#1843348]
  - kvm-Disable-TPM-passthrough-backend-on-ARM.patch [bz#1801242]
  - kvm-Require-libfdt-1.6.0.patch [bz#1867847]
  - Resolves: bz#1801242
    ([aarch64] vTPM support in machvirt)
  - Resolves: bz#1843348
    (8.3 machine types for POWER)
  - Resolves: bz#1867847
    ([ppc] virt module 7629: /usr/libexec/qemu-kvm: undefined symbol: fdt_check_full, version LIBFDT_1.2)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-4.el8
changelog:
  - kvm-Drop-bogus-IPv6-messages.patch [bz#1867075]
  - kvm-machine-types-numa-set-numa_mem_supported-on-old-mac.patch [bz#1849707]
  - kvm-machine_types-numa-compatibility-for-auto_enable_num.patch [bz#1849707]
  - kvm-migration-Add-block-bitmap-mapping-parameter.patch [bz#1790492]
  - kvm-iotests.py-Let-wait_migration-return-on-failure.patch [bz#1790492]
  - kvm-iotests-Test-node-bitmap-aliases-during-migration.patch [bz#1790492]
  - Resolves: bz#1790492
    ('dirty-bitmaps' migration capability should allow configuring target nodenames)
  - Resolves: bz#1849707
    (8.3 machine types for x86 - 5.1 update)
  - Resolves: bz#1867075
    (CVE-2020-10756 virt:8.3/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-5.el8
changelog:
  - kvm-Revert-i386-Fix-pkg_id-offset-for-EPYC-cpu-models.patch [bz#1873417]
  - kvm-Revert-target-i386-Enable-new-apic-id-encoding-for-E.patch [bz#1873417]
  - kvm-Revert-hw-i386-Move-arch_id-decode-inside-x86_cpus_i.patch [bz#1873417]
  - kvm-Revert-i386-Introduce-use_epyc_apic_id_encoding-in-X.patch [bz#1873417]
  - kvm-Revert-hw-i386-Introduce-apicid-functions-inside-X86.patch [bz#1873417]
  - kvm-Revert-target-i386-Cleanup-and-use-the-EPYC-mode-top.patch [bz#1873417]
  - kvm-Revert-hw-386-Add-EPYC-mode-topology-decoding-functi.patch [bz#1873417]
  - kvm-nvram-Exit-QEMU-if-NVRAM-cannot-contain-all-prom-env.patch [bz#1867739]
  - kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869715]
  - kvm-Remove-explicit-glusterfs-api-dependency.patch [bz#1872853]
  - kvm-disable-virgl.patch [bz#1831271]
  - Resolves: bz#1831271
    (Drop virgil acceleration support and remove virglrenderer dependency)
  - Resolves: bz#1867739
    (-prom-env does not validate input)
  - Resolves: bz#1869715
    (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-av-8.3.0])
  - Resolves: bz#1872853
    (move the glusterfs dependency out of qemu-kvm-core to the glusterfs module)
  - Resolves: bz#1873417
    (AMD/NUMA topology - revert 5.1 changes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-6.el8
changelog:
  - kvm-spec-Move-qemu-pr-helper-back-to-usr-bin.patch [bz#1869635]
  - kvm-Bump-required-libusbx-version.patch [bz#1856591]
  - Resolves: bz#1856591
    (libusbx isn't updated with qemu-kvm)
  - Resolves: bz#1869635
    ('/usr/bin/qemu-pr-helper' is not a suitable pr helper: No such file or directory)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-7.el8
changelog:
  - kvm-target-ppc-Add-experimental-option-for-enabling-secu.patch [bz#1789757 bz#1870384]
  - kvm-target-arm-Move-start-powered-off-property-to-generi.patch [bz#1849483]
  - kvm-target-arm-Move-setting-of-CPU-halted-state-to-gener.patch [bz#1849483]
  - kvm-ppc-spapr-Use-start-powered-off-CPUState-property.patch [bz#1849483]
  - Resolves: bz#1789757
    ([IBM 8.4 FEAT] Add machine option to enable secure VM support)
  - Resolves: bz#1849483
    (Failed to boot up guest when hotplugging vcpus on bios stage)
  - Resolves: bz#1870384
    ([IBM 8.3 FEAT] Add interim/unsupported machine option to enable secure VM support for testing purposes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-8.el8
changelog:
  - kvm-redhat-link-etc-qemu-ga-fsfreeze-hook-to-etc-qemu-kv.patch [bz#1738820]
  - kvm-seccomp-fix-killing-of-whole-process-instead-of-thre.patch [bz#1752376]
  - kvm-Revert-Drop-bogus-IPv6-messages.patch [bz#1867075]
  - kvm-block-rbd-add-namespace-to-qemu_rbd_strong_runtime_o.patch [bz#1821528]
  - Resolves: bz#1738820
    ('-F' option of qemu-ga command  cause the guest-fsfreeze-freeze command doesn't work)
  - Resolves: bz#1752376
    (qemu use SCMP_ACT_TRAP even SCMP_ACT_KILL_PROCESS is available)
  - Resolves: bz#1821528
    (missing namespace attribute when access the rbd image with namespace)
  - Resolves: bz#1867075
    (CVE-2020-10756 virt:8.3/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-9.el8
changelog:
  - kvm-hw-nvram-fw_cfg-fix-FWCfgDataGeneratorClass-get_data.patch [bz#1688978]
  - Resolves: bz#1688978
    (RFE: forward host preferences for cipher suites and CA certs to guest firmware)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-10.el8
changelog:
  - kvm-qemu-img-Support-bitmap-merge-into-backing-image.patch [bz#1877209]
  - Resolves: bz#1877209
    ('qemu-img bitmaps --merge' failed when trying to merge top volume bitmap to base volume bitmap)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-11.el8_3
changelog:
  - kvm-migration-increase-max-bandwidth-to-128-MiB-s-1-Gib-.patch [bz#1874004]
  - kvm-redhat-Make-all-generated-so-files-executable-not-on.patch [bz#1876635]
  - Resolves: bz#1874004
    (Live migration performance is poor during guest installation process on power host)
  - Resolves: bz#1876635
    (VM fails to start with a passthrough smartcard)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-12.el8_3
changelog:
  - kvm-virtio-skip-legacy-support-check-on-machine-types-le.patch [bz#1868449]
  - kvm-vhost-vsock-pci-force-virtio-version-1.patch [bz#1868449]
  - kvm-vhost-user-vsock-pci-force-virtio-version-1.patch [bz#1868449]
  - kvm-vhost-vsock-ccw-force-virtio-version-1.patch [bz#1868449]
  - Resolves: bz#1868449
    (vhost_vsock error: device is modern-only, use disable-legacy=on)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-13.el8_3
changelog:
  - kvm-x86-lpc9-let-firmware-negotiate-CPU-hotplug-with-SMI.patch [bz#1846886]
  - kvm-x86-cpuhp-prevent-guest-crash-on-CPU-hotplug-when-br.patch [bz#1846886]
  - kvm-x86-cpuhp-refuse-cpu-hot-unplug-request-earlier-if-n.patch [bz#1846886]
  - Resolves: bz#1846886
    (Guest hit soft lockup or reboots if hotplug vcpu under ovmf)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-14.el8_3
changelog:
  - kvm-virtiofsd-avoid-proc-self-fd-tempdir.patch [bz#1884276]
  - Resolves: bz#1884276
    (Pod with kata-runtime won't start, QEMU: "vhost_user_dev init failed, Operation not permitted" [mkdtemp failing in sandboxing])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-15.el8
changelog:
  - kvm-redhat-add-un-pre-install-systemd-hooks-for-qemu-ga.patch [bz#1882719]
  - kvm-rcu-Implement-drain_call_rcu.patch [bz#1812399 bz#1866707]
  - kvm-libqtest-Rename-qmp_assert_error_class-to-qmp_expect.patch [bz#1812399 bz#1866707]
  - kvm-qtest-rename-qtest_qmp_receive-to-qtest_qmp_receive_.patch [bz#1812399 bz#1866707]
  - kvm-qtest-Reintroduce-qtest_qmp_receive-with-QMP-event-b.patch [bz#1812399 bz#1866707]
  - kvm-qtest-remove-qtest_qmp_receive_success.patch [bz#1812399 bz#1866707]
  - kvm-device-plug-test-use-qtest_qmp-to-send-the-device_de.patch [bz#1812399 bz#1866707]
  - kvm-qtest-switch-users-back-to-qtest_qmp_receive.patch [bz#1812399 bz#1866707]
  - kvm-qtest-check-that-drives-are-really-appearing-and-dis.patch [bz#1812399 bz#1866707]
  - kvm-qemu-iotests-qtest-rewrite-test-067-as-a-qtest.patch [bz#1812399 bz#1866707]
  - kvm-qdev-add-check-if-address-free-callback-for-buses.patch [bz#1812399 bz#1866707]
  - kvm-scsi-scsi_bus-switch-search-direction-in-scsi_device.patch [bz#1812399 bz#1866707]
  - kvm-device_core-use-drain_call_rcu-in-in-qmp_device_add.patch [bz#1812399 bz#1866707]
  - kvm-device-core-use-RCU-for-list-of-children-of-a-bus.patch [bz#1812399 bz#1866707]
  - kvm-scsi-switch-to-bus-check_address.patch [bz#1812399 bz#1866707]
  - kvm-device-core-use-atomic_set-on-.realized-property.patch [bz#1812399 bz#1866707]
  - kvm-scsi-scsi-bus-scsi_device_find-don-t-return-unrealiz.patch [bz#1812399]
  - kvm-scsi-scsi_bus-Add-scsi_device_get.patch [bz#1812399 bz#1866707]
  - kvm-virtio-scsi-use-scsi_device_get.patch [bz#1812399 bz#1866707]
  - kvm-scsi-scsi_bus-fix-races-in-REPORT-LUNS.patch [bz#1812399 bz#1866707]
  - kvm-tests-migration-fix-memleak-in-wait_command-wait_com.patch [bz#1812399 bz#1866707]
  - kvm-libqtest-fix-the-order-of-buffered-events.patch [bz#1812399 bz#1866707]
  - kvm-libqtest-fix-memory-leak-in-the-qtest_qmp_event_ref.patch [bz#1812399 bz#1866707]
  - kvm-iotests-add-filter_qmp_virtio_scsi-function.patch [bz#1812399 bz#1866707]
  - kvm-iotests-rewrite-iotest-240-in-python.patch [bz#1812399 bz#1866707]
  - Resolves: bz#1812399
    (Qemu crash when detach disk with cache="none" discard="ignore" io="native")
  - Resolves: bz#1866707
    (qemu-kvm is crashing with error "scsi_target_emulate_report_luns: Assertion `i == n + 8' failed")
  - Resolves: bz#1882719
    (qemu-ga service still active and can work after qemu-guest-agent been removed)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-16.el8
changelog:
  - kvm-redhat-introduces-disable_everything-macro-into-the-.patch [bz#1884611]
  - kvm-redhat-scripts-extract_build_cmd.py-Avoid-listing-em.patch [bz#1884611]
  - kvm-redhat-Removing-unecessary-configurations.patch [bz#1884611]
  - kvm-redhat-Fixing-rh-local-build.patch [bz#1884611]
  - kvm-redhat-allow-Makefile-rh-prep-builddep-to-fail.patch [bz#1884611]
  - kvm-redhat-adding-rh-rpm-target.patch [bz#1884611]
  - kvm-redhat-move-shareable-files-from-qemu-kvm-core-to-qe.patch [bz#1884611]
  - kvm-redhat-Add-qemu-kiwi-subpackage.patch [bz#1884611]
  - Resolves: bz#1884611
    (Build kata-specific version of qemu)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-2.el8
changelog:
  - kvm-redhat-Define-hw_compat_8_3.patch [bz#1893935]
  - kvm-redhat-Add-spapr_machine_rhel_default_class_options.patch [bz#1893935]
  - kvm-redhat-Define-pseries-rhel8.4.0-machine-type.patch [bz#1893935]
  - kvm-redhat-s390x-add-rhel-8.4.0-compat-machine.patch [bz#1836282]
  - Resolves: bz#1836282
    (New machine type for qemu-kvm on s390x in RHEL-AV)
  - Resolves: bz#1893935
    (New machine type on RHEL-AV 8.4 for ppc64le)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-3.el8
changelog:
  - kvm-block-nvme-Implement-fake-truncate-coroutine.patch [bz#1848834]
  - kvm-spec-find-system-python-via-meson.patch [bz#1899619]
  - kvm-build-system-use-b_staticpic-false.patch [bz#1899619]
  - kvm-spapr-Fix-buffer-overflow-in-spapr_numa_associativit.patch [bz#1908693]
  - kvm-usb-hcd-xhci-pci-Fixup-capabilities-ordering-again.patch [bz#1912846]
  - kvm-qga-commands-posix-Send-CCW-address-on-s390x-with-th.patch [bz#1755075]
  - kvm-AArch64-machine-types-cleanup.patch [bz#1895276]
  - kvm-hw-arm-virt-Add-8.4-Machine-type.patch [bz#1895276]
  - kvm-udev-kvm-check-remove-the-exceeded-subscription-limi.patch [bz#1914463]
  - kvm-memory-Rename-memory_region_notify_one-to-memory_reg.patch [bz#1845758]
  - kvm-memory-Add-IOMMUTLBEvent.patch [bz#1845758]
  - kvm-memory-Add-IOMMU_NOTIFIER_DEVIOTLB_UNMAP-IOMMUTLBNot.patch [bz#1845758]
  - kvm-intel_iommu-Skip-page-walking-on-device-iotlb-invali.patch [bz#1845758]
  - kvm-memory-Skip-bad-range-assertion-if-notifier-is-DEVIO.patch [bz#1845758]
  - kvm-RHEL-Switch-pvpanic-test-to-q35.patch [bz#1885555]
  - kvm-8.4-x86-machine-type.patch [bz#1885555]
  - kvm-memory-clamp-cached-translation-in-case-it-points-to.patch [bz#1904392]
  - Resolves: bz#1848834
    (Failed to create luks format image on NVMe device)
  - Resolves: bz#1899619
    (QEMU 5.2 is built with PIC objects instead of PIE)
  - Resolves: bz#1908693
    ([ppc64le]boot up a guest with 128 numa nodes ,qemu got coredump)
  - Resolves: bz#1912846
    (qemu-kvm: Failed to load xhci:parent_obj during migration)
  - Resolves: bz#1755075
    ([qemu-guest-agent] fsinfo doesn't return disk info on s390x)
  - Resolves: bz#1895276
    (Machine types update for aarch64 for QEMU 5.2.0)
  - Resolves: bz#1914463
    (Remove KVM guest count and limit info message)
  - Resolves: bz#1845758
    (qemu core dumped: qemu-kvm: /builddir/build/BUILD/qemu-4.2.0/memory.c:1928: memory_region_notify_one: Assertion `entry->iova >= notifier->start && entry_end <= notifier->end' failed.)
  - Resolves: bz#1885555
    (8.4 machine types for x86)
  - Resolves: bz#1904392
    (CVE-2020-27821 virt:8.4/qemu-kvm: QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-4.el8
changelog:
  - kvm-Drop-bogus-IPv6-messages.patch [bz#1918061]
  - Resolves: bz#1918061
    (CVE-2020-10756 virt:rhel/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-av-8])


author: Eduardo Lima (Etrunko) <elima@redhat.com> - 5.2.0-5.el8
changelog:
  - kvm-spapr-Allow-memory-unplug-to-always-succeed.patch [bz#1914069]
  - kvm-spapr-Improve-handling-of-memory-unplug-with-old-gue.patch [bz#1914069]
  - kvm-x86-cpu-Add-AVX512_FP16-cpu-feature.patch [bz#1838738]
  - kvm-q35-Increase-max_cpus-to-710-on-pc-q35-rhel8-machine.patch [bz#1904268]
  - kvm-config-enable-VFIO_CCW.patch [bz#1922170]
  - Resolves: bz#1914069
    ([ppc64le] have this fix for rhel8.4 av (spapr: Allow memory unplug to always succeed))
  - Resolves: bz#1838738
    ([Intel 8.4 FEAT] qemu-kvm Sapphire Rapids (SPR) New Instructions (NIs) - Fast Train)
  - Resolves: bz#1904268
    ([RFE] [HPEMC] qemu-kvm: support up to 710 VCPUs)
  - Resolves: bz#1922170
    (Enable vfio-ccw in AV)


author: Eduardo Lima (Etrunko) <elima@redhat.com> - 5.2.0-6.el8
changelog:
  - kvm-scsi-fix-device-removal-race-vs-IO-restart-callback-.patch [bz#1854811]
  - kvm-tracetool-also-strip-l-and-ll-from-systemtap-format-.patch [bz#1907264]
  - kvm-redhat-moving-all-documentation-files-to-qemu-kvm-do.patch [bz#1881170 bz#1924766]
  - kvm-hw-arm-smmuv3-Fix-addr_mask-for-range-based-invalida.patch [bz#1834152]
  - kvm-redhat-makes-qemu-respect-system-s-crypto-profile.patch [bz#1902219]
  - kvm-vhost-Unbreak-SMMU-and-virtio-iommu-on-dev-iotlb-sup.patch [bz#1925028]
  - kvm-docs-set-CONFDIR-when-running-sphinx.patch [bz#1902537]
  - Resolves: bz#1854811
    (scsi-bus.c: use-after-free due to race between device unplug and I/O operation causes guest crash)
  - Resolves: bz#1907264
    (systemtap: invalid or missing conversion specifier at the trace event vhost_vdpa_set_log_base)
  - Resolves: bz#1881170
    (split documentation from the qemu-kvm-core package to its own subpackage)
  - Resolves: bz#1924766
    (split documentation from the qemu-kvm-core package to its own subpackage [av-8.4.0])
  - Resolves: bz#1834152
    ([aarch64] QEMU SMMUv3 device: Support range invalidation)
  - Resolves: bz#1902219
    (QEMU doesn't honour system crypto policies)
  - Resolves: bz#1925028
    (vsmmuv3/vhost and virtio-iommu/vhost regression)
  - Resolves: bz#1902537
    (The default fsfreeze-hook path from man page and qemu-ga --help command are different)


author: Eduardo Lima (Etrunko) <elima@redhat.com> - 5.2.0-7.el8
changelog:
  - kvm-virtio-Add-corresponding-memory_listener_unregister-.patch [bz#1903521]
  - kvm-block-Honor-blk_set_aio_context-context-requirements.patch [bz#1918966 bz#1918968]
  - kvm-nbd-server-Quiesce-coroutines-on-context-switch.patch [bz#1918966 bz#1918968]
  - kvm-block-Avoid-processing-BDS-twice-in-bdrv_set_aio_con.patch [bz#1918966 bz#1918968]
  - kvm-storage-daemon-Call-bdrv_close_all-on-exit.patch [bz#1918966 bz#1918968]
  - kvm-block-move-blk_exp_close_all-to-qemu_cleanup.patch [bz#1918966 bz#1918968]
  - Resolves: bz#1903521
    (hot unplug vhost-user cause qemu crash: qemu-kvm: ../softmmu/memory.c:2818: do_address_space_destroy: Assertion `QTAILQ_EMPTY(&as->listeners)' failed.)
  - Resolves: bz#1918966
    ([incremental_backup] qemu aborts if guest reboot during backup when using virtio-blk: "aio_co_schedule: Co-routine was already scheduled in 'aio_co_schedule'")
  - Resolves: bz#1918968
    ([incremental_backup] qemu deadlock after poweroff in guest during backup in nbd_export_close_all())


author: Eduardo Lima (Etrunko) <elima@redhat.com> - 5.2.0-8.el8
changelog:
  - kvm-block-nbd-only-detach-existing-iochannel-from-aio_co.patch [bz#1887883]
  - kvm-block-nbd-only-enter-connection-coroutine-if-it-s-pr.patch [bz#1887883]
  - kvm-nbd-make-nbd_read-return-EIO-on-error.patch [bz#1887883]
  - kvm-virtio-move-use-disabled-flag-property-to-hw_compat_.patch [bz#1907255]
  - kvm-virtiofsd-extract-lo_do_open-from-lo_open.patch [bz#1920740]
  - kvm-virtiofsd-optionally-return-inode-pointer-from-lo_do.patch [bz#1920740]
  - kvm-virtiofsd-prevent-opening-of-special-files-CVE-2020-.patch [bz#1920740]
  - kvm-spapr-Adjust-firmware-path-of-PCI-devices.patch [bz#1920941]
  - kvm-pci-reject-too-large-ROMs.patch [bz#1917830]
  - kvm-pci-add-romsize-property.patch [bz#1917830]
  - kvm-redhat-Add-some-devices-for-exporting-upstream-machi.patch [bz#1917826]
  - kvm-vhost-Check-for-valid-vdev-in-vhost_backend_handle_i.patch [bz#1880299]
  - Resolves: bz#1887883
    (qemu blocks client progress with various NBD actions)
  - Resolves: bz#1907255
    (Migrate failed with vhost-vsock-pci from RHEL-AV 8.3.1 to RHEL-AV 8.2.1)
  - Resolves: bz#1920740
    (CVE-2020-35517 virt:8.4/qemu-kvm: QEMU: virtiofsd: potential privileged host device access from guest [rhel-av-8.4.0])
  - Resolves: bz#1920941
    ([ppc64le] [AV]--disk cdimage.iso,bus=usb fails to boot)
  - Resolves: bz#1917830
    (Add romsize property to qemu-kvm)
  - Resolves: bz#1917826
    (Add extra device support to qemu-kvm, but not to rhel machine types)
  - Resolves: bz#1880299
    (vhost-user mq connection fails to restart after kill host testpmd which acts as vhost-user client)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-9.el8
changelog:
  - kvm-docs-generate-qemu-storage-daemon-qmp-ref-7-man-page.patch [bz#1901323]
  - kvm-docs-add-qemu-storage-daemon-1-man-page.patch [bz#1901323]
  - kvm-docs-Add-qemu-storage-daemon-1-manpage-to-meson.buil.patch [bz#1901323]
  - kvm-qemu-storage-daemon-Enable-object-add.patch [bz#1901323]
  - kvm-spec-Package-qemu-storage-daemon.patch [bz#1901323]
  - kvm-default-configs-Enable-vhost-user-blk.patch [bz#1930033]
  - kvm-qemu-nbd-Use-SOMAXCONN-for-socket-listen-backlog.patch [bz#1925345]
  - kvm-pcie-don-t-set-link-state-active-if-the-slot-is-empt.patch [bz#1917654]
  - Resolves: bz#1901323
    (QSD (QEMU Storage Daemon): basic support - TechPreview)
  - Resolves: bz#1930033
    (enable vhost-user-blk device)
  - Resolves: bz#1925345
    (qemu-nbd needs larger backlog for Unix socket listen())
  - Resolves: bz#1917654
    ([failover vf migration][RHEL84 vm] After start a vm with a failover vf + a failover virtio net device, the failvoer vf do not exist in the vm)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-10.el8
changelog:
  - kvm-migration-dirty-bitmap-Use-struct-for-alias-map-inne.patch [bz#1930757]
  - kvm-migration-dirty-bitmap-Allow-control-of-bitmap-persi.patch [bz#1930757]
  - kvm-qemu-iotests-300-Add-test-case-for-modifying-persist.patch [bz#1930757]
  - kvm-failover-fix-indentantion.patch [bz#1819991]
  - kvm-failover-Use-always-atomics-for-primary_should_be_hi.patch [bz#1819991]
  - kvm-failover-primary-bus-is-only-used-once-and-where-it-.patch [bz#1819991]
  - kvm-failover-Remove-unused-parameter.patch [bz#1819991]
  - kvm-failover-Remove-external-partially_hotplugged-proper.patch [bz#1819991]
  - kvm-failover-qdev_device_add-returns-err-or-dev-set.patch [bz#1819991]
  - kvm-failover-Rename-bool-to-failover_primary_hidden.patch [bz#1819991]
  - kvm-failover-g_strcmp0-knows-how-to-handle-NULL.patch [bz#1819991]
  - kvm-failover-Remove-primary_device_opts.patch [bz#1819991]
  - kvm-failover-remove-standby_id-variable.patch [bz#1819991]
  - kvm-failover-Remove-primary_device_dict.patch [bz#1819991]
  - kvm-failover-Remove-memory-leak.patch [bz#1819991]
  - kvm-failover-simplify-virtio_net_find_primary.patch [bz#1819991]
  - kvm-failover-should_be_hidden-should-take-a-bool.patch [bz#1819991]
  - kvm-failover-Rename-function-to-hide_device.patch [bz#1819991]
  - kvm-failover-virtio_net_connect_failover_devices-does-no.patch [bz#1819991]
  - kvm-failover-Rename-to-failover_find_primary_device.patch [bz#1819991]
  - kvm-failover-simplify-qdev_device_add-failover-case.patch [bz#1819991]
  - kvm-failover-simplify-qdev_device_add.patch [bz#1819991]
  - kvm-failover-make-sure-that-id-always-exist.patch [bz#1819991]
  - kvm-failover-remove-failover_find_primary_device-error-p.patch [bz#1819991]
  - kvm-failover-split-failover_find_primary_device_id.patch [bz#1819991]
  - kvm-failover-We-don-t-need-to-cache-primary_device_id-an.patch [bz#1819991]
  - kvm-failover-Caller-of-this-two-functions-already-have-p.patch [bz#1819991]
  - kvm-failover-simplify-failover_unplug_primary.patch [bz#1819991]
  - kvm-failover-Remove-primary_dev-member.patch [bz#1819991]
  - kvm-virtio-net-add-missing-object_unref.patch [bz#1819991]
  - kvm-x86-cpu-Populate-SVM-CPUID-feature-bits.patch [bz#1926785]
  - kvm-i386-Add-the-support-for-AMD-EPYC-3rd-generation-pro.patch [bz#1926785]
  - Resolves: bz#1930757
    (Allow control of block-dirty-bitmap persistence via 'block-bitmap-mapping')
  - Resolves: bz#1819991
    (Hostdev type interface with net failover enabled exists in domain xml and doesn't reattach to host after hot-unplug)
  - Resolves: bz#1926785
    ([RFE] AMD Milan - Add KVM/support for EPYC-Milan CPU Model - Fast Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-11.el8
changelog:
  - kvm-qxl-set-qxl.ssd.dcl.con-on-secondary-devices.patch [bz#1932190]
  - kvm-qxl-also-notify-the-rendering-is-done-when-skipping-.patch [bz#1932190]
  - kvm-virtiofsd-Save-error-code-early-at-the-failure-calls.patch [bz#1935071]
  - kvm-virtiofs-drop-remapped-security.capability-xattr-as-.patch [bz#1935071]
  - Resolves: bz#1932190
    (Timeout when dump the screen from 2nd VGA)
  - Resolves: bz#1935071
    (CVE-2021-20263 virt:8.4/qemu-kvm: QEMU: virtiofsd: 'security.capabilities' is not dropped with xattrmap option [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-12.el8
changelog:
  - kvm-scsi-disk-move-scsi_handle_rw_error-earlier.patch [bz#1927530]
  - kvm-scsi-disk-do-not-complete-requests-early-for-rerror-.patch [bz#1927530]
  - kvm-scsi-introduce-scsi_sense_from_errno.patch [bz#1927530]
  - kvm-scsi-disk-pass-SCSI-status-to-scsi_handle_rw_error.patch [bz#1927530]
  - kvm-scsi-disk-pass-guest-recoverable-errors-through-even.patch [bz#1927530]
  - kvm-hw-intc-arm_gic-Fix-interrupt-ID-in-GICD_SGIR-regist.patch [bz#1936948]
  - Resolves: bz#1927530
    (RHEL8 Hypervisor - OVIRT  - Issues seen on a virtualization guest with direct passthrough LUNS  pausing when a host gets a Thin threshold warning)
  - Resolves: bz#1936948
    (CVE-2021-20221 virt:av/qemu-kvm: qemu: out-of-bound heap buffer access via an interrupt ID field [rhel-av-8.4.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-13.el8
changelog:
  - kvm-i386-acpi-restore-device-paths-for-pre-5.1-vms.patch [bz#1934158]
  - Resolves: bz#1934158
    (Windows guest looses network connectivity when NIC was configured with static IP)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-14.el8
changelog:
  - kvm-vhost-user-blk-fix-blkcfg-num_queues-endianness.patch [bz#1937004]
  - kvm-block-export-fix-blk_size-double-byteswap.patch [bz#1937004]
  - kvm-block-export-use-VIRTIO_BLK_SECTOR_BITS.patch [bz#1937004]
  - kvm-block-export-fix-vhost-user-blk-export-sector-number.patch [bz#1937004]
  - kvm-block-export-port-virtio-blk-discard-write-zeroes-in.patch [bz#1937004]
  - kvm-block-export-port-virtio-blk-read-write-range-check.patch [bz#1937004]
  - kvm-spec-ui-spice-sub-package.patch [bz#1936373]
  - kvm-spec-ui-opengl-sub-package.patch [bz#1936373]
  - Resolves: bz#1937004
    (vhost-user-blk server endianness and input validation fixes)
  - Resolves: bz#1936373
    (move spice & opengl modules to rpm subpackages)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-15.el8_4
changelog:
  - kvm-block-Simplify-qmp_block_resize-error-paths.patch [bz#1903511]
  - kvm-block-Fix-locking-in-qmp_block_resize.patch [bz#1903511]
  - kvm-block-Fix-deadlock-in-bdrv_co_yield_to_drain.patch [bz#1903511]
  - Resolves: bz#1903511
    (no response on  QMP command 'block_resize')


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-16.el8
changelog:
  - kvm-virtio-pci-compat-page-aligned-ATS.patch [bz#1942362]
  - Resolves: bz#1942362
    (Live migration with iommu from rhel8.3.1 to rhel8.4 fails: qemu-kvm: get_pci_config_device: Bad config data)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-17.el8
changelog:
  - kvm-redhat-s390x-add-rhel-8.5.0-compat-machine.patch [bz#1951476]
  - kvm-redhat-add-missing-entries-in-hw_compat_rhel_8_4.patch [bz#1957834]
  - kvm-redhat-Define-pseries-rhel8.5.0-machine-type.patch [bz#1957834]
  - Resolves: bz#1951476
    ([s390x] RHEL AV 8.5 new machine type for s390x)
  - Resolves: bz#1957834
    ([ppc64le] RHEL AV 8.5 new machine type for ppc64le)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-18.el8
changelog:
  - kvm-virtio-net-failover-add-missing-remove_migration_sta.patch [bz#1953045]
  - kvm-hw-arm-virt-Add-8.5-machine-type.patch [bz#1957667]
  - kvm-hw-arm-virt-Disable-PL011-clock-migration-through-hw.patch [bz#1957667]
  - kvm-arm-virt-Register-highmem-and-gic-version-as-class-p.patch [bz#1957667]
  - kvm-virtio-blk-Fix-rollback-path-in-virtio_blk_data_plan.patch [bz#1927108]
  - kvm-virtio-blk-Configure-all-host-notifiers-in-a-single-.patch [bz#1927108]
  - kvm-virtio-scsi-Set-host-notifiers-and-callbacks-separat.patch [bz#1927108]
  - kvm-virtio-scsi-Configure-all-host-notifiers-in-a-single.patch [bz#1927108]
  - kvm-hw-arm-smmuv3-Another-range-invalidation-fix.patch [bz#1929720]
  - Resolves: bz#1953045
    (qemu-kvm NULL pointer de-reference  during migration at migrate_fd_connect ->...-> notifier_list_notify)
  - Resolves: bz#1957667
    ([aarch64] Add 8.5 machine type)
  - Resolves: bz#1927108
    (It's too slow to load scsi  disk when use 384 vcpus)
  - Resolves: bz#1929720
    ([aarch64] Handle vsmmuv3 IOTLB invalidation with non power of 2 size)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-19.el8
changelog:
  - kvm-pc-bios-s390-ccw-don-t-try-to-read-the-next-block-if.patch [bz#1965626]
  - kvm-redhat-Install-the-s390-netboot.img-that-we-ve-built.patch [bz#1966463]
  - kvm-sockets-update-SOCKET_ADDRESS_TYPE_FD-listen-2-backl.patch [bz#1967177]
  - kvm-target-i386-sev-add-support-to-query-the-attestation.patch [bz#1957022]
  - kvm-spapr-Don-t-hijack-current_machine-boot_order.patch [bz#1960119]
  - kvm-target-i386-Add-CPU-model-versions-supporting-xsaves.patch [bz#1942914]
  - kvm-spapr-Remove-stale-comment-about-power-saving-LPCR-b.patch [bz#1940731]
  - kvm-spapr-Set-LPCR-to-current-AIL-mode-when-starting-a-n.patch [bz#1940731]
  - Resolves: bz#1965626
    (RHEL8.2 - QEMU BIOS fails to read stage2 loader (kvm))
  - Resolves: bz#1966463
    (Rebuild the s390-netboot.img for downstream instead of shipping the upstream image)
  - Resolves: bz#1967177
    (QEMU 6.0.0 socket_get_fd() fails with the error "socket_get_fd: too many connections")
  - Resolves: bz#1957022
    (SEV: Add support to query the attestation report)
  - Resolves: bz#1960119
    ([regression]Failed to reset guest)
  - Resolves: bz#1942914
    ([Hyper-V][RHEL8.4]Nested Hyper-V on KVM: On Intel CPU L1 2016 can not start with cpu model Skylake-Server-noTSX-IBRS or Skylake-Client-noTSX-IBRS)
  - Resolves: bz#1940731
    ([ppc64le] Hotplug vcpu device hit call trace:[qemu output] KVM: unknown exit, hardware reason 7fff9ce87ed8)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-20.el8
changelog:
  - kvm-x86-Add-x86-rhel8.5-machine-types.patch [bz#1957838]
  - kvm-redhat-x86-Enable-kvm-asyncpf-int-by-default.patch [bz#1967603]
  - kvm-yank-Unregister-function-when-using-TLS-migration.patch [bz#1964326]
  - Resolves: bz#1957838
    (8.5 machine types for x86)
  - Resolves: bz#1967603
    (Enable interrupt based asynchronous page fault mechanism by default)
  - Resolves: bz#1964326
    (Qemu core dump when do tls migration via tcp protocol)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-21.el8
changelog:
  - kvm-block-backend-add-drained_poll.patch [bz#1960137]
  - kvm-nbd-server-Use-drained-block-ops-to-quiesce-the-serv.patch [bz#1960137]
  - kvm-disable-CONFIG_USB_STORAGE_BOT.patch [bz#1866133]
  - kvm-doc-Fix-some-mistakes-in-the-SEV-documentation.patch [bz#1954750]
  - kvm-docs-Add-SEV-ES-documentation-to-amd-memory-encrypti.patch [bz#1954750]
  - kvm-docs-interop-firmware.json-Add-SEV-ES-support.patch [bz#1954750]
  - Resolves: bz#1960137
    ([incremental backup] qemu-kvm hangs when Rebooting the VM during full backup)
  - Resolves: bz#1866133
    (Disable usb-bot device in QEMU (unsupported))
  - Resolves: bz#1954750
    (firmware scheme for sev-es)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-22.el8
changelog:
  - kvm-redhat-Expose-upstream-machines-pc-4.2-and-pc-2.11.patch [bz#1897923]
  - kvm-redhat-Enable-FDC-device-for-upstream-machines-too.patch [bz#1897923]
  - kvm-redhat-Add-hw_compat_4_2_extra-and-apply-to-upstream.patch [bz#1897923]
  - kvm-ppc-pef.c-initialize-cgs-ready-in-kvmppc_svm_init.patch [bz#1789757]
  - kvm-virtio-gpu-handle-partial-maps-properly.patch [bz#1932279]
  - kvm-redhat-Fix-unversioned-Obsoletes-warning.patch [bz#1950405 bz#1967330]
  - kvm-redhat-Move-qemu-kvm-docs-dependency-to-qemu-kvm.patch [bz#1950405 bz#1967330]
  - kvm-redhat-introducting-qemu-kvm-hw-usbredir.patch [bz#1950405 bz#1967330]
  - kvm-spapr-Fix-EEH-capability-issue-on-KVM-guest-for-PCI-.patch [bz#1976015]
  - Resolves: bz#1897923
    (support Live Migration from Ubuntu 18.04 i440fx to RHEL)
  - Resolves: bz#1789757
    ([IBM 8.5 FEAT] Add machine option to enable secure VM support)
  - Resolves: bz#1932279
    ([aarch64] qemu core dumped when using smmuv3 and iommu_platform enabling at virtio-gpu-pci)
  - Resolves: bz#1950405
    (review qemu-kvm-core dependencies)
  - Resolves: bz#1967330
    (Make qemu-kvm use versioned obsoletes for qemu-kvm-ma and qemu-kvm-rhev)
  - Resolves: bz#1976015
    (spapr: Fix EEH capability issue on KVM guest for PCI passthru)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-23.el8
changelog:
  - kvm-Add-mtod_check.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-bootp-limit-vendor-specific-area-to-input-packet-mem.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-bootp-check-bootp_input-buffer-size.patch [bz#1970823]
  - kvm-upd6-check-udp6_input-buffer-size.patch [bz#1970842]
  - kvm-tftp-check-tftp_input-buffer-size.patch [bz#1970850]
  - kvm-tftp-introduce-a-header-structure.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-udp-check-upd_input-buffer-size.patch [bz#1970858]
  - kvm-Fix-DHCP-broken-in-libslirp-v4.6.0.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-redhat-use-the-standard-vhost-user-JSON-path.patch [bz#1804196]
  - Resolves: bz#1970823
    (CVE-2021-3592 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) [rhel-av-8])
  - Resolves: bz#1970842
    (CVE-2021-3593 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) [rhel-av-8])
  - Resolves: bz#1970850
    (CVE-2021-3595 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) [rhel-av-8])
  - Resolves: bz#1970858
    (CVE-2021-3594 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) [rhel-av-8])
  - Resolves: bz#1804196
    (inconsistent paths for interop json files)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-24.el8
changelog:
  - kvm-s390x-css-Introduce-an-ESW-struct.patch [bz#1968326]
  - kvm-s390x-css-Split-out-the-IRB-sense-data.patch [bz#1968326]
  - kvm-s390x-css-Refactor-IRB-construction.patch [bz#1968326]
  - kvm-s390x-css-Add-passthrough-IRB.patch [bz#1968326]
  - kvm-vhost-user-blk-Fail-gracefully-on-too-large-queue-si.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Make-sure-to-set-Error-on-realize-fai.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Don-t-reconnect-during-initialisation.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Improve-error-reporting-in-realize.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Get-more-feature-flags-from-vhost-dev.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-virtio-Fail-if-iommu_platform-is-requested-but-unsup.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Check-that-num-queues-is-supported-by.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-Fix-backends-without-multiqueue-support.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - Resolves: bz#1968326
    ([vfio_ccw] I/O error when checking format - dasdfmt requires --force in quick mode when passed through)
  - Resolves: bz#1935014
    (qemu crash when attach vhost-user-blk-pci with option queue-size=4096)
  - Resolves: bz#1935019
    (qemu guest failed boot when attach vhost-user-blk-pci with option iommu_platform=on)
  - Resolves: bz#1935020
    (qemu guest failed boot when attach vhost-user-blk-pci with option packed=on)
  - Resolves: bz#1935031
    (qemu guest failed boot when attach vhost-user-blk-pci with unmatched num-queues with qsd)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-25.el8
changelog:
  - kvm-s390x-cpumodel-add-3931-and-3932.patch [bz#1976171]
  - kvm-file-posix-fix-max_iov-for-dev-sg-devices.patch [bz#1943653]
  - kvm-scsi-generic-pass-max_segments-via-max_iov-field-in-.patch [bz#1943653]
  - kvm-osdep-provide-ROUND_DOWN-macro.patch [bz#1943653]
  - kvm-block-backend-align-max_transfer-to-request-alignmen.patch [bz#1943653]
  - kvm-block-add-max_hw_transfer-to-BlockLimits.patch [bz#1943653]
  - kvm-file-posix-try-BLKSECTGET-on-block-devices-too-do-no.patch [bz#1943653]
  - Resolves: bz#1976171
    ([IBM 8.5 FEAT] CPU Model for new IBM Z Hardware - qemu part)
  - Resolves: bz#1943653
    (RHV VM pauses due to 'qemu-kvm' getting EINVAL on i/o to a direct lun with scsi passthrough enabled)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-26
changelog:
  - kvm-acpi-pc-revert-back-to-v5.2-PCI-slot-enumeration.patch [bz#1977798]
  - kvm-migration-failover-reset-partially_hotplugged.patch [bz#1787194]
  - kvm-hmp-Fix-loadvm-to-resume-the-VM-on-success-instead-o.patch [bz#1959676]
  - kvm-migration-Move-bitmap_mutex-out-of-migration_bitmap_.patch [bz#1959729]
  - kvm-i386-cpu-Expose-AVX_VNNI-instruction-to-guest.patch [bz#1924822]
  - kvm-ratelimit-protect-with-a-mutex.patch [bz#1838221]
  - kvm-Update-Linux-headers-to-5.13-rc4.patch [bz#1838221]
  - kvm-i386-Add-ratelimit-for-bus-locks-acquired-in-guest.patch [bz#1838221]
  - kvm-iothread-generalize-iothread_set_param-iothread_get_.patch [bz#1930286]
  - kvm-iothread-add-aio-max-batch-parameter.patch [bz#1930286]
  - kvm-linux-aio-limit-the-batch-size-using-aio-max-batch-p.patch [bz#1930286]
  - kvm-block-nvme-Fix-VFIO_MAP_DMA-failed-No-space-left-on-.patch [bz#1848881]
  - Resolves: bz#1977798
    (RHEL8.5 guest network interface name changed after upgrade to qemu-6.0)
  - Resolves: bz#1787194
    (After canceling the migration of a vm with VF which enables failover, using "migrate -d tcp:invalid uri" to re-migrating the vm will cause the VF in vm to be hot-unplug.)
  - Resolves: bz#1959676
    (guest status is paused after loadvm on rhel8.5.0)
  - Resolves: bz#1959729
    (SAP/3TB VM migration slowness [idle db])
  - Resolves: bz#1924822
    ([Intel 8.5 FEAT] qemu-kvm AVX2 VNNI - Fast Train)
  - Resolves: bz#1838221
    ([Intel 8.5 FEAT]  qemu-kvm Bus Lock VM Exit - Fast Train)
  - Resolves: bz#1930286
    (randread and randrw regression with virtio-blk multi-queue)
  - Resolves: bz#1848881
    (nvme:// block driver can exhaust IOMMU DMAs, hanging the VM, possible data loss)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-27
changelog:
  - kvm-migration-move-wait-unplug-loop-to-its-own-function.patch [bz#1976852]
  - kvm-migration-failover-continue-to-wait-card-unplug-on-e.patch [bz#1976852]
  - kvm-aarch64-Add-USB-storage-devices.patch [bz#1974579]
  - Resolves: bz#1976852
    ([failover vf migration]  The failover vf will be unregistered  if canceling the migration whose status is "wait-unplug")
  - Resolves: bz#1974579
    (It's not possible to start installation from a virtual USB device on aarch64)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-28.el8
changelog:
  - kvm-iotests-Improve-and-rename-test-291-to-qemu-img-bitm.patch [bz#1946084]
  - kvm-qemu-img-Fail-fast-on-convert-bitmaps-with-inconsist.patch [bz#1946084]
  - kvm-qemu-img-Add-skip-broken-bitmaps-for-convert-bitmaps.patch [bz#1946084]
  - kvm-audio-Never-send-migration-section.patch [bz#1991671]
  - Resolves: bz#1946084
    (qemu-img convert --bitmaps fail if a bitmap is inconsistent)
  - Resolves: bz#1991671
    (vmstate differs between -audiodev and QEMU_AUDIO_DRV when no sound frontends devs present.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-29.el8
changelog:
  - kvm-file-posix-Cap-max_iov-at-IOV_MAX.patch [bz#1994494]
  - kvm-migration-Move-yank-outside-qemu_start_incoming_migr.patch [bz#1974366]
  - Resolves: bz#1994494
    (VM remains in paused state when trying to write on a resized disk resides on iscsi)
  - Resolves: bz#1974366
    (Fail to set migrate incoming for 2nd time after the first time failed)


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-2
changelog:
  - kvm-qxl-fix-pre-save-logic.patch [bz#2002907]
  - kvm-redhat-Define-hw_compat_rhel_8_5.patch [bz#1998949]
  - kvm-redhat-Update-pseries-rhel8.5.0.patch [bz#1998949]
  - kvm-redhat-Add-s390x-machine-type-compatibility-update-f.patch [bz#1998950]
  - Resolves: bz#2002907
    (Unexpectedly failed when managedsave the guest which has qxl video device)
  - Resolves: bz#1998949
    (Add machine type compatibility update for 6.1 rebase [ppc64le])
  - Resolves: bz#1998950
    (Add machine type compatibility update for 6.1 rebase [s390x])


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-3
changelog:
  - kvm-virtio-net-fix-use-after-unmap-free-for-sg.patch [bz#1999221]
  - Resolves: bz#1999221
    (CVE-2021-3748 virt:rhel/qemu-kvm: QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-4
changelog:
  - kvm-spec-Remove-qemu-kiwi-build.patch [bz#2002694]
  - kvm-hw-arm-virt-Add-hw_compat_rhel_8_5-to-8.5-machine-ty.patch [bz#1998947]
  - Resolves: bz#2002694
    (remove qemu-kiwi rpm from qemu-kvm sources in rhel-8.6)
  - Resolves: bz#1998947
    (Add machine type compatibility update for 6.1 rebase [aarch64])


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-5
changelog:
  - kvm-e1000-fix-tx-re-entrancy-problem.patch [bz#1930092]
  - kvm-hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-allowed-in-MODE.patch [bz#2020720]
  - Resolves: bz#1930092
    (CVE-2021-20257 virt:rhel/qemu-kvm: QEMU: net: e1000: infinite loop while processing transmit descriptors [rhel-8.5.0])
  - Resolves: bz#2020720
    (CVE-2021-3930 virt:rhel/qemu-kvm: QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-2
changelog:
  - kvm-redhat-Add-rhel8.6.0-machine-type-for-s390x.patch [bz#2005325]
  - kvm-redhat-Define-pseries-rhel8.6.0-machine-type.patch [bz#2031041]
  - Resolves: bz#2005325
    (Fix CPU Model for new IBM Z Hardware - qemu part)
  - Resolves: bz#2031041
    (Add rhel-8.6.0 machine types for RHEL 8.6 [ppc64le])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-4
changelog:
  - kvm-hw-arm-virt-Register-iommu-as-a-class-property.patch [bz#2031039]
  - kvm-hw-arm-virt-Register-its-as-a-class-property.patch [bz#2031039]
  - kvm-hw-arm-virt-Rename-default_bus_bypass_iommu.patch [bz#2031039]
  - kvm-hw-arm-virt-Add-8.6-machine-type.patch [bz#2031039]
  - kvm-hw-arm-virt-Check-no_tcg_its-and-minor-style-changes.patch [bz#2031039]
  - kvm-rhel-machine-types-x86-set-prefer_sockets.patch [bz#2029582]
  - Resolves: bz#2031039
    (Add rhel-8.6.0 machine types for RHEL 8.6 [aarch64])
  - Resolves: bz#2029582
    ([8.6] machine types: 6.2: Fix prefer_sockets)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-5
changelog:
  - kvm-acpi-validate-hotplug-selector-on-access.patch [bz#2036580]
  - kvm-x86-Add-q35-RHEL-8.6.0-machine-type.patch [bz#2031035]
  - Resolves: bz#2036580
    (CVE-2021-4158 virt:rhel/qemu-kvm: QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c [rhel-8])
  - Resolves: bz#2031035
    (Add rhel-8.6.0 machine types for RHEL 8.6 [x86])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-6
changelog:
  - kvm-virtiofsd-Drop-membership-of-all-supplementary-group.patch [bz#2046198]
  - kvm-softmmu-fix-device-deletion-events-with-device-JSON-.patch [bz#2033279]
  - kvm-block-backend-prevent-dangling-BDS-pointers-across-a.patch [bz#2021778 bz#2036178]
  - kvm-iotests-stream-error-on-reset-New-test.patch [bz#2021778 bz#2036178]
  - kvm-block-rbd-fix-handling-of-holes-in-.bdrv_co_block_st.patch [bz#2037135]
  - kvm-block-rbd-workaround-for-ceph-issue-53784.patch [bz#2037135]
  - Resolves: bz#2046198
    (CVE-2022-0358 virt:av/qemu-kvm: QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 [rhel-8.6])
  - Resolves: bz#2033279
    ([wrb][qemu-kvm 6.2] The hot-unplugged device can not be hot-plugged back)
  - Resolves: bz#2021778
    (Qemu core dump when do full backup during system reset)
  - Resolves: bz#2036178
    (Qemu core dumped when do block-stream to a snapshot node on non-enough space storage)
  - Resolves: bz#2037135
    (Booting from Local Snapshot Core Dumped Whose Backing File Is Based on RBD)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-7
changelog:
  - kvm-numa-Enable-numa-for-SGX-EPC-sections.patch [bz#1518984]
  - kvm-numa-Support-SGX-numa-in-the-monitor-and-Libvirt-int.patch [bz#1518984]
  - kvm-doc-Add-the-SGX-numa-description.patch [bz#1518984]
  - kvm-Enable-SGX-RH-Only.patch [bz#1518984]
  - kvm-qapi-Cleanup-SGX-related-comments-and-restore-sectio.patch [bz#1518984]
  - kvm-block-io-Update-BSC-only-if-want_zero-is-true.patch [bz#2041480]
  - kvm-iotests-block-status-cache-New-test.patch [bz#2041480]
  - Resolves: bz#1518984
    ([Intel 8.6 Feat] qemu-kvm: SGX 1.5 (SGX1 + Flexible Launch Control) support)
  - Resolves: bz#2041480
    ([incremental_backup] Inconsistent block status reply in qemu-nbd)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-8
changelog:
  - kvm-block-nbd-Delete-reconnect-delay-timer-when-done.patch [bz#2035185]
  - kvm-block-nbd-Assert-there-are-no-timers-when-closed.patch [bz#2035185]
  - kvm-iotests.py-Add-QemuStorageDaemon-class.patch [bz#2035185]
  - kvm-iotests-281-Test-lingering-timers.patch [bz#2035185]
  - kvm-block-nbd-Move-s-ioc-on-AioContext-change.patch [bz#2035185]
  - kvm-iotests-281-Let-NBD-connection-yield-in-iothread.patch [bz#2035185]
  - Resolves: bz#2035185
    (Qemu core dump when start guest with nbd node or do block jobs to nbd node)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-9
changelog:
  - kvm-Revert-redhat-Add-hw_compat_4_2_extra-and-apply-to-u.patch [bz#2062613]
  - kvm-Revert-redhat-Enable-FDC-device-for-upstream-machine.patch [bz#2062613]
  - kvm-Revert-redhat-Expose-upstream-machines-pc-4.2-and-pc.patch [bz#2062613]
  - kvm-hw-virtio-vdpa-Fix-leak-of-host-notifier-memory-regi.patch [bz#2060843]
  - kvm-pci-expose-TYPE_XIO3130_DOWNSTREAM-name.patch [bz#2062610]
  - kvm-acpi-pcihp-pcie-set-power-on-cap-on-parent-slot.patch [bz#2062610]
  - kvm-vmxcap-Add-5-level-EPT-bit.patch [bz#2065207]
  - kvm-i386-Add-Icelake-Server-v6-CPU-model-with-5-level-EP.patch [bz#2065207]
  - kvm-acpi-fix-QEMU-crash-when-started-with-SLIC-table.patch [bz#2062611]
  - kvm-tests-acpi-whitelist-expected-blobs-before-changing-.patch [bz#2062611]
  - kvm-tests-acpi-add-SLIC-table-test.patch [bz#2062611]
  - kvm-tests-acpi-SLIC-update-expected-blobs.patch [bz#2062611]
  - kvm-tests-acpi-manually-pad-OEM_ID-OEM_TABLE_ID-for-test.patch [bz#2062611]
  - kvm-tests-acpi-whitelist-nvdimm-s-SSDT-and-FACP.slic-exp.patch [bz#2062611]
  - kvm-acpi-fix-OEM-ID-OEM-Table-ID-padding.patch [bz#2062611]
  - kvm-tests-acpi-update-expected-blobs.patch [bz#2062611]
  - kvm-tests-acpi-test-short-OEM_ID-OEM_TABLE_ID-values-in-.patch [bz#2062611]
  - kvm-rhel-workaround-for-lack-of-binary-patches-in-SRPM.patch [bz#2062611]
  - Resolves: bz#2062613
    (Revert IBM-specific Ubuntu-compatibility machine type for 8.6-AV GA [rhel-8.7.0])
  - Resolves: bz#2060843
    ([virtual network][vDPA] qemu crash after hot unplug vdpa device [rhel-8.7.0])
  - Resolves: bz#2062610
    (Do operation to disk will hang in the guest of target host after hotplugging and migrating [rhel-8.7.0])
  - Resolves: bz#2065207
    (Win11 (q35+edk2) guest broke after install wsl2 through 'wsl --install -d Ubuntu-20.04' [rhel-8.7.0])
  - Resolves: bz#2062611
    (Guest can not start with SLIC acpi table [rhel-8.7.0])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-10
changelog:
  - kvm-RHEL-disable-seqpacket-for-vhost-vsock-device-in-rhe.patch [bz#2068202]
  - kvm-block-Lock-AioContext-for-drain_end-in-blockdev-reop.patch [bz#2067118]
  - kvm-iotests-Test-blockdev-reopen-with-iothreads-and-thro.patch [bz#2067118]
  - kvm-s390x-css-fix-PMCW-invalid-mask.patch [bz#2071070]
  - kvm-Set-permission-on-installing-files.patch [bz#2072377]
  - Resolves: bz#2068202
    (RHEL 9.0 guest with vsock device migration failed from RHEL 9.0 > RHEL 8.6 [rhel-8.7.0])
  - Resolves: bz#2067118
    (qemu crash after execute blockdev-reopen with  iothread)
  - Resolves: bz#2071070
    (s390x/css: fix PMCW invalid mask)
  - Resolves: bz#2072377
    (Fix build warnings that occur when installing the keymap files)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-11
changelog:
  - kvm-hw-intc-arm_gicv3-Check-for-MEMTX_OK-instead-of-MEMT.patch [bz#1999236]
  - kvm-softmmu-physmem-Simplify-flatview_write-and-address_.patch [bz#1999236]
  - kvm-softmmu-physmem-Introduce-MemTxAttrs-memory-field-an.patch [bz#1999236]
  - Resolves: bz#1999236
    (CVE-2021-3750 virt:rhel/qemu-kvm: QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-12
changelog:
  - kvm-display-qxl-render-fix-race-condition-in-qxl_cursor-.patch [bz#2040738]
  - kvm-vhost-vsock-detach-the-virqueue-element-in-case-of-e.patch [bz#2063262]
  - Resolves: bz#2040738
    (CVE-2021-4207 virt:rhel/qemu-kvm: QEMU: QXL: double fetch in qxl_cursor() can lead to heap buffer overflow [rhel-8])
  - Resolves: bz#2063262
    (CVE-2022-26354 virt:rhel/qemu-kvm: QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-13
changelog:
  - kvm-s390x-ipl-support-extended-kernel-command-line-size.patch [bz#2043830]
  - kvm-virtio-net-fix-map-leaking-on-error-during-receive.patch [bz#2063206]
  - kvm-qcow2-Improve-refcount-structure-rebuilding.patch [bz#1519071]
  - kvm-iotests-108-Test-new-refcount-rebuild-algorithm.patch [bz#1519071]
  - kvm-qcow2-Add-errp-to-rebuild_refcount_structure.patch [bz#1519071]
  - kvm-iotests-108-Fix-when-missing-user_allow_other.patch [bz#1519071]
  - Resolves: bz#2043830
    ([IBM 8.7 FEAT] KVM: Allow long kernel command lines for QEMU)
  - Resolves: bz#2063206
    (CVE-2022-26353 virt:rhel/qemu-kvm: QEMU: virtio-net: map leaking on error during receive [rhel-8])
  - Resolves: bz#1519071
    (Fail to rebuild the reference count tables of qcow2 image on host block devices (e.g. LVs))


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-14
changelog:
  - kvm-Revert-redhat-Add-some-devices-for-exporting-upstrea.patch [bz#2065043]
  - kvm-target-i386-properly-reset-TSC-on-reset.patch [bz#2070417]
  - kvm-ui-cursor-fix-integer-overflow-in-cursor_alloc-CVE-2.patch [bz#2040734]
  - Resolves: bz#2065043
    (Remove upstream-only devices from the qemu-kvm binary)
  - Resolves: bz#2070417
    (Windows guest hangs after updating and restarting from the guest OS [rhel-8.7.0])
  - Resolves: bz#2040734
    (CVE-2021-4206 virt:rhel/qemu-kvm: QEMU: QXL: integer overflow in cursor_alloc() can lead to heap buffer overflow [rhel-8.7])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-15
changelog:
  - kvm-virtio-gpu-do-not-byteswap-padding.patch [bz#1916415]
  - kvm-linux-headers-update-to-5.16-rc1.patch [bz#1916415]
  - kvm-linux-headers-Update-headers-to-v5.17-rc1.patch [bz#1916415]
  - kvm-linux-headers-include-missing-changes-from-5.17.patch [bz#1916415]
  - kvm-x86-Fix-the-64-byte-boundary-enumeration-for-extende.patch [bz#1916415]
  - kvm-x86-Add-AMX-XTILECFG-and-XTILEDATA-components.patch [bz#1916415]
  - kvm-x86-Grant-AMX-permission-for-guest.patch [bz#1916415]
  - kvm-x86-Add-XFD-faulting-bit-for-state-components.patch [bz#1916415]
  - kvm-x86-Add-AMX-CPUIDs-enumeration.patch [bz#1916415]
  - kvm-x86-add-support-for-KVM_CAP_XSAVE2-and-AMX-state-mig.patch [bz#1916415]
  - kvm-x86-Support-XFD-and-AMX-xsave-data-migration.patch [bz#1916415]
  - kvm-target-i386-kvm-do-not-access-uninitialized-variable.patch [bz#1916415]
  - kvm-KVM-x86-workaround-invalid-CPUID-0xD-9-info-on-some-.patch [bz#1916415]
  - kvm-virtio-net-setup-vhost_dev-and-notifiers-for-cvq-onl.patch [bz#2069946]
  - kvm-virtio-net-align-ctrl_vq-index-for-non-mq-guest-for-.patch [bz#2069946]
  - kvm-vhost-vdpa-fix-improper-cleanup-in-net_init_vhost_vd.patch [bz#2069946]
  - kvm-vhost-net-fix-improper-cleanup-in-vhost_net_start.patch [bz#2069946]
  - kvm-vhost-vdpa-backend-feature-should-set-only-once.patch [bz#2069946]
  - kvm-vhost-vdpa-change-name-and-polarity-for-vhost_vdpa_o.patch [bz#2069946]
  - kvm-virtio-net-don-t-handle-mq-request-in-userspace-hand.patch [bz#2069946]
  - kvm-ide-Increment-BB-in-flight-counter-for-TRIM-BH.patch [bz#2029980]
  - kvm-block-Make-bdrv_refresh_limits-non-recursive.patch [bz#2072932]
  - kvm-iotests-Allow-using-QMP-with-the-QSD.patch [bz#2072932]
  - kvm-iotests-graph-changes-while-io-New-test.patch [bz#2072932]
  - Resolves: bz#1916415
    ([Intel 8.7 FEAT] qemu-kvm Sapphire Rapids (SPR) AMX Instructions)
  - Resolves: bz#2069946
    (PXE boot crash qemu when using multiqueue vDPA)
  - Resolves: bz#2029980
    (Failed assertion in IDE emulation with Ceph backend)
  - Resolves: bz#2072932
    (Qemu coredump when refreshing block limits on an actively used iothread block device [rhel.8.7])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-16
changelog:
  - kvm-virtiofsd-Fix-breakage-due-to-fuse_init_in-size-chan.patch [bz#2097209]
  - kvm-hw-block-fdc-Prevent-end-of-track-overrun-CVE-2021-3.patch [bz#1951521]
  - kvm-tests-qtest-fdc-test-Add-a-regression-test-for-CVE-2.patch [bz#1951521]
  - Resolves: bz#2097209
    ([virtiofs] mount virtiofs failed: SELinux: (dev virtiofs, type virtiofs) getxattr errno 111)
  - Resolves: bz#1951521
    (CVE-2021-3507 virt:rhel/qemu-kvm: QEMU: fdc: heap buffer overflow in DMA read data transfers [rhel-8])


author: Camilla Conte <cconte@redhat.com> - 6.2.0-17
changelog:
  - kvm-migration-Never-call-twice-qemu_target_page_size.patch [bz#2072049]
  - kvm-multifd-Rename-used-field-to-num.patch [bz#2072049]
  - kvm-multifd-Add-missing-documentation.patch [bz#2072049]
  - kvm-multifd-The-variable-is-only-used-inside-the-loop.patch [bz#2072049]
  - kvm-multifd-remove-used-parameter-from-send_prepare-meth.patch [bz#2072049]
  - kvm-multifd-remove-used-parameter-from-send_recv_pages-m.patch [bz#2072049]
  - kvm-multifd-Fill-offset-and-block-for-reception.patch [bz#2072049]
  - kvm-multifd-Make-zstd-compression-method-not-use-iovs.patch [bz#2072049]
  - kvm-multifd-Make-zlib-compression-method-not-use-iovs.patch [bz#2072049]
  - kvm-migration-All-this-fields-are-unsigned.patch [bz#2072049]
  - kvm-multifd-Move-iov-from-pages-to-params.patch [bz#2072049]
  - kvm-multifd-Make-zlib-use-iov-s.patch [bz#2072049]
  - kvm-multifd-Make-zstd-use-iov-s.patch [bz#2072049]
  - kvm-multifd-Remove-send_write-method.patch [bz#2072049]
  - kvm-multifd-Use-a-single-writev-on-the-send-side.patch [bz#2072049]
  - kvm-multifd-Use-normal-pages-array-on-the-send-side.patch [bz#2072049]
  - kvm-QIOChannel-Add-flags-on-io_writev-and-introduce-io_f.patch [bz#2072049]
  - kvm-QIOChannelSocket-Implement-io_writev-zero-copy-flag-.patch [bz#2072049]
  - kvm-migration-Add-zero-copy-send-parameter-for-QMP-HMP-f.patch [bz#2072049]
  - kvm-migration-Add-migrate_use_tls-helper.patch [bz#2072049]
  - kvm-multifd-multifd_send_sync_main-now-returns-negative-.patch [bz#2072049]
  - kvm-multifd-Send-header-packet-without-flags-if-zero-cop.patch [bz#2072049]
  - kvm-multifd-Implement-zero-copy-write-in-multifd-migrati.patch [bz#2072049]
  - kvm-QIOChannelSocket-Introduce-assert-and-reduce-ifdefs-.patch [bz#2072049]
  - kvm-QIOChannelSocket-Fix-zero-copy-send-so-socket-flush-.patch [bz#2072049]
  - kvm-migration-Change-zero_copy_send-from-migration-param.patch [bz#2072049]
  - kvm-migration-Add-migration_incoming_transport_cleanup.patch [bz#2097652]
  - kvm-migration-Allow-migrate-recover-to-run-multiple-time.patch [bz#2097652]
  - kvm-pc-bios-s390-ccw-virtio-Introduce-a-macro-for-the-DA.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-bootmap-Improve-the-guessing-logic-.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Simplify-fix-virtio_i.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Remove-virtio_assume_.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-Set-missing-status-bits-whil.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-Read-device-config-after-fea.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-Beautify-the-code-for-readin.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-Split-virtio-scsi-code-from-virtio_.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Request-the-right-fea.patch [bz#2098076]
  - Resolves: bz#2072049
    (Pull  MSG_ZEROCOPY on QEMU Live Migration Patches into RHEL 8)
  - Resolves: bz#2097652
    (The migration port is not released if use it again for recovering postcopy migration)
  - Resolves: bz#2098076
    (virtio-blk: Can't boot fresh installation from used virtio-blk dasd disk under certain conditions)


author: Camilla Conte <cconte@redhat.com> - 6.2.0-18
changelog:
  - kvm-linux-aio-fix-unbalanced-plugged-counter-in-laio_io_.patch [bz#2105410]
  - kvm-linux-aio-explain-why-max-batch-is-checked-in-laio_i.patch [bz#2105410]
  - Resolves: bz#2105410
    (Stalled IO Operations in VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-19
changelog:
  - kvm-migration-Introduce-ram_transferred_add.patch [bz#2110203]
  - kvm-migration-Tally-pre-copy-downtime-and-post-copy-byte.patch [bz#2110203]
  - kvm-QIOChannelSocket-Fix-zero-copy-flush-returning-code-.patch [bz#2110203]
  - kvm-Add-dirty-sync-missed-zero-copy-migration-stat.patch [bz#2110203]
  - kvm-migration-multifd-Report-to-user-when-zerocopy-not-w.patch [bz#2110203]
  - kvm-migration-Avoid-false-positive-on-non-supported-scen.patch [bz#2110203]
  - kvm-migration-add-remaining-params-has_-true-in-migratio.patch [bz#2110203]
  - kvm-QIOChannelSocket-Add-support-for-MSG_ZEROCOPY-IPV6.patch [bz#2110203]
  - kvm-pc-bios-s390-ccw-Fix-booting-with-logical-block-size.patch [bz#2112296]
  - Resolves: bz#2110203
    (zerocopy capability can be enabled when set migrate capabilities with multifd and compress/xbzrle together)
  - Resolves: bz#2112296
    (virtio-blk: Can't boot fresh installation from used 512 cluster_size image under certain conditions)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-20
changelog:
  - kvm-scsi-generic-Fix-emulated-block-limits-VPD-page.patch [bz#2120279]
  - Resolves: bz#2120279
    (Wrong max_sectors_kb and Maximum transfer length on the pass-through device [rhel-8.7])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-21
changelog:
  - kvm-backends-hostmem-Fix-support-of-memory-backend-memfd.patch [bz#2117149]
  - kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2125271]
  - kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2125271]
  - Resolves: bz#2117149
    (Can't run when memory backing with hugepages and backend type memfd)
  - Resolves: bz#2125271
    ([RHEL8.7] Guests in VMX root operation fail to reboot with QEMU's 'system_reset' command [rhel-8.8.0])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-22
changelog:
  - kvm-redhat-Update-linux-headers-linux-kvm.h-to-v5.18-rc6.patch [bz#2124757]
  - kvm-target-s390x-kvm-Honor-storage-keys-during-emulation.patch [bz#2124757]
  - kvm-virtiofsd-use-g_date_time_get_microsecond-to-get-sub.patch [bz#2018885]
  - Resolves: bz#2124757
    (RHEL8: skey test in kvm_unit_test got failed)
  - Resolves: bz#2018885
    ([virtiofs] virtiofsd debug log's timestamp is NULL)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-23
changelog:
  - kvm-virtio-fix-the-condition-for-iommu_platform-not-supp.patch [bz#2116302]
  - kvm-virtio-fix-feature-negotiation-for-ACCESS_PLATFORM.patch [bz#2116302]
  - Resolves: bz#2116302
    (RHEL8.6 - virtiofs will not mount fs on secure execution guest)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-24
changelog:
  - kvm-s390x-pci-use-a-reserved-ID-for-the-default-PCI-grou.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-don-t-use-hard-coded-dma-range-in-reg_ioat.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-use-the-passthrough-measurement-update-int.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-add-supported-DT-information-to-clp-respon.patch [bz#1664378 bz#2043909]
  - kvm-Update-linux-headers-to-v6.0-rc4.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-add-routine-to-get-host-function-handle-fr.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-enable-for-load-store-interpretation.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-don-t-fence-interpreted-devices-without-MS.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-enable-adapter-event-notification-for-inte.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-let-intercept-devices-have-separate-PCI-gr.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-reflect-proper-maxstbl-for-groups-of-inter.patch [bz#1664378 bz#2043909]
  - kvm-s390x-s390-virtio-ccw-Switch-off-zPCI-enhancements-o.patch [bz#1664378 bz#2043909]
  - kvm-dump-Use-ERRP_GUARD.patch [bz#1664378 bz#2043909]
  - kvm-dump-Remove-the-sh_info-variable.patch [bz#1664378 bz#2043909]
  - kvm-dump-Introduce-shdr_num-to-decrease-complexity.patch [bz#1664378 bz#2043909]
  - kvm-dump-Remove-the-section-if-when-calculating-the-memo.patch [bz#1664378 bz#2043909]
  - kvm-dump-Add-more-offset-variables.patch [bz#1664378 bz#2043909]
  - kvm-dump-Introduce-dump_is_64bit-helper-function.patch [bz#1664378 bz#2043909]
  - kvm-dump-Consolidate-phdr-note-writes.patch [bz#1664378 bz#2043909]
  - kvm-dump-Cleanup-dump_begin-write-functions.patch [bz#1664378 bz#2043909]
  - kvm-dump-Consolidate-elf-note-function.patch [bz#1664378 bz#2043909]
  - kvm-dump-Replace-opaque-DumpState-pointer-with-a-typed-o.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rename-write_elf_loads-to-write_elf_phdr_loads.patch [bz#1664378 bz#2043909]
  - kvm-dump-Refactor-dump_iterate-and-introduce-dump_filter.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rework-get_start_block.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rework-filter-area-variables.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rework-dump_calculate_size-function.patch [bz#1664378 bz#2043909]
  - kvm-dump-Split-elf-header-functions-into-prepare-and-wri.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rename-write_elf-_phdr_note-to-prepare_elf-_phd.patch [bz#1664378 bz#2043909]
  - kvm-dump-simplify-a-bit-kdump-get_next_page.patch [bz#1664378 bz#2043909]
  - kvm-dump-fix-kdump-to-work-over-non-aligned-blocks.patch [bz#1664378 bz#2043909]
  - kvm-dump-Use-a-buffer-for-ELF-section-data-and-headers.patch [bz#1664378 bz#2043909]
  - kvm-dump-Write-ELF-section-headers-right-after-ELF-heade.patch [bz#1664378 bz#2043909]
  - kvm-dump-Reorder-struct-DumpState.patch [bz#1664378 bz#2043909]
  - kvm-dump-Reintroduce-memory_offset-and-section_offset.patch [bz#1664378 bz#2043909]
  - kvm-dump-Add-architecture-section-and-section-string-tab.patch [bz#1664378 bz#2043909]
  - kvm-s390x-Add-protected-dump-cap.patch [bz#1664378 bz#2043909]
  - kvm-s390x-Introduce-PV-query-interface.patch [bz#1664378 bz#2043909]
  - kvm-include-elf.h-add-s390x-note-types.patch [bz#1664378 bz#2043909]
  - kvm-s390x-Add-KVM-PV-dump-interface.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pv-Add-dump-support.patch [bz#1664378 bz#2043909]
  - kvm-ui-vnc-clipboard-fix-integer-underflow-in-vnc_client.patch [bz#2129760]
  - Resolves: bz#1664378
    ([IBM 8.8 FEAT] Enhanced Interpretation for PCI Functions (kvm) - qemu part)
  - Resolves: bz#2043909
    ([IBM 8.8 FEAT] KVM: Secure Execution guest dump encryption with customer keys - qemu part)
  - Resolves: bz#2129760
    (CVE-2022-3165 virt:rhel/qemu-kvm: QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-25
changelog:
  - kvm-hw-acpi-Add-ospm_status-hook-implementation-for-acpi.patch [bz#2132609]
  - kvm-target-arm-kvm-Retry-KVM_CREATE_VM-call-if-it-fails-.patch [bz#2132609]
  - Resolves: bz#2132609
    (qemu-kvm: backport some aarch64 fixes)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-26
changelog:
  - kvm-docs-system-s390x-Document-the-loadparm-machine-prop.patch [bz#2128225]
  - kvm-s390x-Register-TYPE_S390_CCW_MACHINE-properties-as-c.patch [bz#2128225]
  - kvm-ui-vnc.c-Fixed-a-deadlock-bug.patch [bz#2141896]
  - Resolves: bz#2128225
    ([s390x] [RHEL8][s390x-ccw bios] lacking document about parameter loadparm in qemu)
  - Resolves: bz#2141896
    (VMs hung on vnc_clipboard_send)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-27
changelog:
  - kvm-hw-display-qxl-Have-qxl_log_command-Return-early-if-.patch [bz#2148545]
  - kvm-hw-display-qxl-Document-qxl_phys2virt.patch [bz#2148545]
  - kvm-hw-display-qxl-Pass-requested-buffer-size-to-qxl_phy.patch [bz#2148545]
  - kvm-hw-display-qxl-Avoid-buffer-overrun-in-qxl_phys2virt.patch [bz#2148545]
  - kvm-hw-display-qxl-Assert-memory-slot-fits-in-preallocat.patch [bz#2148545]
  - Resolves: bz#2148545
    (CVE-2022-4144 virt:rhel/qemu-kvm: QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-of-bounds read [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-28
changelog:
  - kvm-s390x-tod-kvm-don-t-save-restore-the-TOD-in-PV-guest.patch [bz#2155448]
  - Resolves: bz#2155448
    (RHEL8.8 - KVM: s390: pv: don't allow userspace to set the clock under PV - QEMU part)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-29
changelog:
  - kvm-block-mirror-Do-not-wait-for-active-writes.patch [bz#2125119]
  - kvm-block-mirror-Drop-mirror_wait_for_any_operation.patch [bz#2125119]
  - kvm-block-mirror-Fix-NULL-s-job-in-active-writes.patch [bz#2125119]
  - kvm-accel-introduce-accelerator-blocker-API.patch [bz#2161188]
  - kvm-KVM-keep-track-of-running-ioctls.patch [bz#2161188]
  - kvm-kvm-Atomic-memslot-updates.patch [bz#2161188]
  - kvm-migration-Read-state-once.patch [bz#2074205]
  - kvm-s390x-pci-RPCIT-second-pass-when-mappings-exhausted.patch [bz#2163713]
  - kvm-s390x-pci-coalesce-unmap-operations.patch [bz#2163713]
  - kvm-s390x-pci-shrink-DMA-aperture-to-be-bound-by-vfio-DM.patch [bz#2163713]
  - kvm-s390x-pci-reset-ISM-passthrough-devices-on-shutdown-.patch [bz#2163713]
  - Resolves: bz#2125119
    (Mirror job with "copy-mode":"write-blocking" that used for storage migration can't converge under heavy I/O)
  - Resolves: bz#2161188
    (SVM: non atomic memslot updates cause boot failure with seabios and cpu-pm=on)
  - Resolves: bz#2074205
    (while live-migrating many instances concurrently, libvirt sometimes return internal error: migration was active, but no RAM info was set)
  - Resolves: bz#2163713
    ([s390x] VM fails to start with ISM passed through)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-30
changelog:
  - kvm-qcow2-Fix-theoretical-corruption-in-store_bitmap-err.patch [bz#2147617]
  - kvm-qemu-img-commit-Report-errors-while-closing-the-imag.patch [bz#2147617]
  - kvm-qemu-img-bitmap-Report-errors-while-closing-the-imag.patch [bz#2147617]
  - kvm-qemu-iotests-Test-qemu-img-bitmap-commit-exit-code-o.patch [bz#2147617]
  - Resolves: bz#2147617
    (qemu-img finishes successfully while having errors in commit or bitmaps operations)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-31
changelog:
  - kvm-io-Add-support-for-MSG_PEEK-for-socket-channel.patch [bz#2137740]
  - kvm-migration-check-magic-value-for-deciding-the-mapping.patch [bz#2137740]
  - kvm-target-s390x-arch_dump-Fix-memory-corruption-in-s390.patch [bz#2168187]
  - Resolves: bz#2137740
    (Multifd migration fails under a weak network/socket ordering race)
  - Resolves: bz#2168187
    ([s390x] qemu-kvm coredumps when SE crashes)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-32.el8_8
changelog:
  - kvm-aio_wait_kick-add-missing-memory-barrier.patch [bz#2168472]
  - kvm-qatomic-add-smp_mb__before-after_rmw.patch [bz#2168472]
  - kvm-qemu-thread-posix-cleanup-fix-document-QemuEvent.patch [bz#2168472]
  - kvm-qemu-thread-win32-cleanup-fix-document-QemuEvent.patch [bz#2168472]
  - kvm-edu-add-smp_mb__after_rmw.patch [bz#2168472]
  - kvm-aio-wait-switch-to-smp_mb__after_rmw.patch [bz#2168472]
  - kvm-qemu-coroutine-lock-add-smp_mb__after_rmw.patch [bz#2168472]
  - kvm-physmem-add-missing-memory-barrier.patch [bz#2168472]
  - kvm-async-update-documentation-of-the-memory-barriers.patch [bz#2168472]
  - kvm-async-clarify-usage-of-barriers-in-the-polling-case.patch [bz#2168472]
  - kvm-scsi-protect-req-aiocb-with-AioContext-lock.patch [bz#2090990]
  - kvm-dma-helpers-prevent-dma_blk_cb-vs-dma_aio_cancel-rac.patch [bz#2090990]
  - kvm-virtio-scsi-reset-SCSI-devices-from-main-loop-thread.patch [bz#2090990]
  - Resolves: bz#2168472
    (Guest hangs when starting or rebooting)
  - Resolves: bz#2090990
    (qemu crash with error scsi_req_unref(SCSIRequest *): Assertion `req->refcount > 0' failed or scsi_dma_complete(void *, int): Assertion `r->req.aiocb != NULL' failed [8.7.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-33
changelog:
  - kvm-s390x-pv-Implement-a-CGS-check-helper.patch [bz#2187159]
  - Resolves: bz#2187159
    (RHEL8.8 - KVM - Secure Guest crashed during booting with 248 vcpus)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-34
changelog:
  - kvm-migration-Handle-block-device-inactivation-failures-.patch [bz#2177957]
  - kvm-migration-Minor-control-flow-simplification.patch [bz#2177957]
  - kvm-migration-Attempt-disk-reactivation-in-more-failure-.patch [bz#2177957]
  - kvm-nbd-server-push-pending-frames-after-sending-reply.patch [bz#2035712]
  - kvm-nbd-server-Request-TCP_NODELAY.patch [bz#2035712]
  - Resolves: bz#2177957
    (Qemu core dump if cut off nfs storage during migration)
  - Resolves: bz#2035712
    ([qemu] Booting from Guest Image over NBD with TLS Is Slow)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-35
changelog:
  - kvm-virtiofsd-Add-basic-support-for-FUSE_SYNCFS-request.patch [bz#2196880]
  - kvm-s390-kvm-adjust-diag318-resets-to-retain-data.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-SLDA-sign-bit-index.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-SRDA-CC-calculation.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-cc_calc_sla_64-missing-overflows.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-shifting-32-bit-values-for-more-tha.patch [bz#2169308 bz#2209605]
  - kvm-s390x-sigp-Reorder-the-SIGP-STOP-code.patch [bz#2169308 bz#2209605]
  - kvm-s390x-tcg-Fix-BRASL-with-a-large-negative-offset.patch [bz#2169308 bz#2209605]
  - kvm-s390x-tcg-Fix-BRCL-with-a-large-negative-offset.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-determination-of-overflow-condition.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-determination-of-overflow-cond.patch [bz#2169308 bz#2209605]
  - kvm-s390x-follow-qdev-tree-to-detect-SCSI-device-on-a-CC.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-the-accumulation-of-ccm-in-op_icm.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-writeback-to-v1-in-helper_vstl.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-fix-handling-of-zeroes-in-vfmin-vfmax.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-CLFIT-and-CLGIT-immediate-size.patch [bz#2169308 bz#2209605]
  - kvm-s390x-tcg-Fix-opcode-for-lzrf.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-emulation-of-the-VISTR-instruction.patch [bz#2169308 bz#2209605]
  - kvm-s390x-css-revert-SCSW-ctrl-flag-bits-on-error.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-tcg-Fix-and-improve-the-SACF-instructio.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-tcg-mem_helper-Test-the-right-bits-in-p.patch [bz#2169308 bz#2209605]
  - kvm-pc-bios-Add-support-for-List-Directed-IPL-from-ECKD-.patch [bz#2169308 bz#2209605]
  - Resolves: bz#2196880
    ([virtiofs] Backport FUSE_SYNCFS support)
  - Resolves: bz#2169308
    (Backport latest s390x-related fixes from upstream QEMU for qemu-kvm in RHEL 8.9)
  - Resolves: bz#2209605
    ([IBM 8.9 FEAT] KVM: ECKD List Directed IPL - virtio (qemu))


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-36
changelog:
  - kvm-memory-prevent-dma-reentracy-issues.patch [bz#1999236]
  - kvm-async-Add-an-optional-reentrancy-guard-to-the-BH-API.patch [bz#1999236]
  - kvm-checkpatch-add-qemu_bh_new-aio_bh_new-checks.patch [bz#1999236]
  - kvm-hw-replace-most-qemu_bh_new-calls-with-qemu_bh_new_g.patch [bz#1999236]
  - kvm-lsi53c895a-disable-reentrancy-detection-for-script-R.patch [bz#1999236]
  - kvm-bcm2835_property-disable-reentrancy-detection-for-io.patch [bz#1999236]
  - kvm-raven-disable-reentrancy-detection-for-iomem.patch [bz#1999236]
  - kvm-apic-disable-reentrancy-detection-for-apic-msi.patch [bz#1999236]
  - kvm-async-avoid-use-after-free-on-re-entrancy-guard.patch [bz#1999236]
  - kvm-memory-stricter-checks-prior-to-unsetting-engaged_in.patch [bz#1999236]
  - kvm-lsi53c895a-disable-reentrancy-detection-for-MMIO-reg.patch [bz#1999236]
  - kvm-hw-scsi-lsi53c895a-Fix-reentrancy-issues-in-the-LSI-.patch [bz#1999236]
  - kvm-target-i386-add-support-for-FLUSH_L1D-feature.patch [bz#2216203]
  - kvm-target-i386-add-support-for-FB_CLEAR-feature.patch [bz#2216203]
  - kvm-migration-Disable-postcopy-multifd-migration.patch [bz#2169733]
  - Resolves: bz#1999236
    (CVE-2021-3750 virt:rhel/qemu-kvm: QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free [rhel-8])
  - Resolves: bz#2216203
    ([qemu-kvm]VM reports vulnerabilty to mmio_stale_data on patched host with microcode)
  - Resolves: bz#2169733
    (Qemu on destination host crashed if migrate with postcopy and multifd enabled)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-37
changelog:
  - kvm-util-iov-Make-qiov_slice-public.patch [bz#2141964]
  - kvm-block-Collapse-padded-I-O-vecs-exceeding-IOV_MAX.patch [bz#2141964]
  - kvm-util-iov-Remove-qemu_iovec_init_extended.patch [bz#2141964]
  - kvm-iotests-iov-padding-New-test.patch [bz#2141964]
  - kvm-block-Fix-pad_request-s-request-restriction.patch [bz#2141964]
  - Resolves: bz#2141964
    (Guest hit EXT4-fs error on host 4K disk  when repeatedly hot-plug/unplug running IO disk)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-38
changelog:
  - kvm-qapi-i386-sev-Change-the-reduced-phys-bits-value-fro.patch [bz#2214840]
  - kvm-qemu-options.hx-Update-the-reduced-phys-bits-documen.patch [bz#2214840]
  - kvm-i386-sev-Update-checks-and-information-related-to-re.patch [bz#2214840]
  - kvm-i386-cpu-Update-how-the-EBX-register-of-CPUID-0x8000.patch [bz#2214840]
  - kvm-target-i386-kvm-Fix-disabling-MPX-on-cpu-host-with-M.patch [bz#2223947]
  - Resolves: bz#2214840
    ([AMDSERVER 8.9 Bug] Qemu SEV reduced-phys-bits fixes)
  - Resolves: bz#2223947
    ([RHEL8.9] qemu core dump with '-cpu host,mpx=off' on Cascadelake host)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-39
changelog:
  - kvm-vhost-vdpa-do-not-cleanup-the-vdpa-vhost-net-structu.patch [bz#2215786]
  - Resolves: bz#2215786
    (CVE-2023-3301 virt:rhel/qemu-kvm: QEMU: net: triggerable assertion due to race condition in hot-unplug [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-40
changelog:
  - kvm-ui-vnc-clipboard-fix-infinite-loop-in-inflate_buffer.patch [bz#2218488]
  - Resolves: bz#2218488
    (CVE-2023-3255 virt:rhel/qemu-kvm: QEMU: VNC: infinite loop in inflate_buffer() leads to denial of service [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-41
changelog:
  - kvm-s390x-ap-fix-missing-subsystem-reset-registration.patch [bz#2111390]
  - kvm-s390x-do-a-subsystem-reset-before-the-unprotect-on-r.patch [bz#2111390]
  - kvm-redhat-Update-linux-headers-for-kvm_s390_vm_cpu_uv_f.patch [bz#2111390]
  - kvm-target-s390x-kvm-Refactor-AP-functionalities.patch [bz#2111390]
  - kvm-target-s390x-AP-passthrough-for-PV-guests.patch [bz#2111390]
  - Resolves: bz#2111390
    ([IBM 8.10 FEAT] KVM: Enable Secure Execution Crypto Passthrough - qemu part)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-42
changelog:
  - kvm-target-s390x-dump-Remove-unneeded-dump-info-function.patch [RHEL-16696]
  - kvm-dump-Add-arch-cleanup-function.patch [RHEL-16696]
  - kvm-target-s390x-arch_dump-Add-arch-cleanup-function-for.patch [RHEL-16696]
  - Resolves: RHEL-16696
    (RHEL8 - KVM : Secure execution guest remains in "paused" state, post "virsh dump" failure (qemu-kvm))


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-43
changelog:
  - kvm-net-Provide-MemReentrancyGuard-to-qemu_new_nic.patch [RHEL-7309]
  - kvm-net-Update-MemReentrancyGuard-for-NIC.patch [RHEL-7309]
  - kvm-vhost-release-memory_listener-object-in-error-path.patch [RHEL-7567]
  - kvm-ui-fix-crash-when-there-are-no-active_console.patch [RHEL-2600]
  - Resolves: RHEL-7309
    (CVE-2023-3019 virt:rhel/qemu-kvm: QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest() [rhel-8])
  - Resolves: RHEL-7567
    ([RHEL8][clone]VM crash when guest running testpmd and delete created vhostuserclient port on host)
  - Resolves: RHEL-2600
    (qemu core dump occurs when client connects to VNC server because qemu cmd only adds vnc but without graphics device)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-44
changelog:
  - kvm-hw-ide-reset-cancel-async-DMA-operation-before-reset.patch [RHEL-15437]
  - kvm-tests-qtest-ahci-test-add-test-exposing-reset-issue-.patch [RHEL-15437]
  - Resolves: RHEL-15437
    (CVE-2023-5088 virt:rhel/qemu-kvm: QEMU: improper IDE controller reset can lead to MBR overwrite [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-45
changelog:
  - kvm-acpi-fix-acpi_index-migration.patch [RHEL-20189]
  - kvm-RHEL-Enable-x-not-migrate-acpi-index-for-all-pre-RHE.patch [RHEL-20189]
  - kvm-hw-arm-virt-Do-not-load-efi-virtio.rom-for-all-virti.patch [RHEL-14870]
  - Resolves: RHEL-20189
    ([RHEL.8.10.0]Failed to migrate guest with pc (i440x)  between RHELAV 8.4.0 and RHEL 8.10.0)
  - Resolves: RHEL-14870
    ([rhel8]ipxe-roms-qemu does not provide efi-virtio.rom)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-46
changelog:
  - kvm-MAINTAINERS-split-out-s390x-sections.patch [RHEL-18214]
  - kvm-s390x-pv-remove-semicolon-from-macro-definition.patch [RHEL-18214]
  - kvm-hw-s390x-pv-Restrict-Protected-Virtualization-to-sys.patch [RHEL-18214]
  - kvm-hw-s390x-Move-KVM-specific-PV-from-hw-to-target-s390.patch [RHEL-18214]
  - kvm-target-s390x-kvm-pv-Provide-some-more-useful-informa.patch [RHEL-18214]
  - Resolves: RHEL-18214
    ([RHEL8][Secure-execution][s390x]  The error message is not clear when boot up a SE guest with wrong encryption)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-47
changelog:
  - kvm-s390x-pci-avoid-double-enable-disable-of-aif.patch [RHEL-22411]
  - kvm-s390x-pci-refresh-fh-before-disabling-aif.patch [RHEL-22411]
  - kvm-s390x-pci-drive-ISM-reset-from-subsystem-reset.patch [RHEL-22411]
  - Resolves: RHEL-22411
    ([s390x] VM fails to start with ISM passed through)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-48
changelog:
  - kvm-iotests-add-filter_qmp_generated_node_ids.patch [RHEL-7353]
  - kvm-iotests-port-141-to-Python-for-reliable-QMP-testing.patch [RHEL-7353]
  - kvm-monitor-only-run-coroutine-commands-in-qemu_aio_cont.patch [RHEL-7353]
  - kvm-iotests-Make-144-deterministic-again.patch [RHEL-7353]
  - Resolves: RHEL-7353
    ([qemu-kvm] no response with QMP command device_add when repeatedly hotplug/unplug virtio disks [RHEL-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-49
changelog:
  - kvm-glib-compat-Introduce-g_memdup2-wrapper.patch [RHEL-19628]
  - kvm-ui-clipboard-mark-type-as-not-available-when-there-i.patch [RHEL-19628]
  - kvm-virtio-net-correctly-copy-vnet-header-when-flushing-.patch [RHEL-19496]
  - Resolves: RHEL-19628
    (CVE-2023-6683 virt:rhel/qemu-kvm: QEMU: VNC: NULL pointer dereference in qemu_clipboard_request() [rhel-8])
  - Resolves: RHEL-19496
    (CVE-2023-6693 virt:rhel/qemu-kvm: QEMU: virtio-net: stack buffer overflow in virtio_net_flush_tx() [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-50
changelog:
  - kvm-qcow2-Don-t-open-data_file-with-BDRV_O_NO_IO.patch [RHEL-35616]
  - kvm-iotests-244-Don-t-store-data-file-with-protocol-in-i.patch [RHEL-35616]
  - kvm-iotests-270-Don-t-store-data-file-with-json-prefix-i.patch [RHEL-35616]
  - kvm-block-introduce-bdrv_open_file_child-helper.patch [RHEL-35616]
  - kvm-block-Parse-filenames-only-when-explicitly-requested.patch [RHEL-35616]
  - Resolves: RHEL-35616
    (CVE-2024-4467 virt:rhel/qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write [rhel-8.10.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-51.el8
changelog:
  - kvm-virtio-gpu-free-BHs-by-implementing-unrealize.patch [RHEL-32276]
  - kvm-virtio-gpu-reset-gfx-resources-in-main-thread.patch [RHEL-32276]
  - kvm-hw-virtio-Introduce-virtio_bh_new_guarded-helper.patch [RHEL-32276]
  - kvm-hw-display-virtio-gpu-Protect-from-DMA-re-entrancy-b.patch [RHEL-32276]
  - kvm-hw-char-virtio-serial-bus-Protect-from-DMA-re-entran.patch [RHEL-32276]
  - kvm-hw-virtio-virtio-crypto-Protect-from-DMA-re-entrancy.patch [RHEL-32276]
  - Resolves: RHEL-32276
    (CVE-2024-3446 virt:rhel/qemu-kvm: QEMU: virtio: DMA reentrancy issue leads to double free vulnerability [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-52.el8
changelog:
  - kvm-nbd-server-Plumb-in-new-args-to-nbd_client_add.patch [RHEL-52611]
  - kvm-nbd-server-CVE-2024-7409-Cap-default-max-connections.patch [RHEL-52611]
  - kvm-nbd-server-CVE-2024-7409-Drop-non-negotiating-client.patch [RHEL-52611]
  - kvm-nbd-server-CVE-2024-7409-Close-stray-clients-at-serv.patch [RHEL-52611]
  - kvm-vnc-increase-max-display-size.patch [RHEL-50854]
  - Resolves: RHEL-52611
    (CVE-2024-7409 virt:rhel/qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-8.10.z])
  - Resolves: RHEL-50854
    (vnc: increase max display size to 4K)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-53.el8
changelog:
  - kvm-nbd-server-Favor-qemu_aio_context-over-iohandler-con.patch [RHEL-52611]
  - kvm-iotests-test-NBD-TLS-iothread.patch [RHEL-52611]
  - kvm-nbd-server-CVE-2024-7409-Avoid-use-after-free-when-c.patch [RHEL-52611]
  - Resolves: RHEL-52611
    (CVE-2024-7409 virt:rhel/qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-53.el8.1
changelog:
  - kvm-block-move-bdrv_qiov_is_aligned-to-file-posix.patch [RHEL-60553]
  - kvm-block-use-the-request-length-for-iov-alignment.patch [RHEL-60553]
  - Resolves: RHEL-60553
    (Frequent VM pauses on OpenShift Virtualization with Portworx storage)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-53.el8.2
changelog:
  - kvm-Fix-thread-pool-size-default-value-in-the-man-page.patch [RHEL-26197]
  - Resolves: RHEL-26197
    (virtiofsd --help and manpage does not agree on --thread-pool-size default value)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-53.el8.3
changelog:
  - kvm-qga-skip-bind-mounts-in-fs-list.patch [RHEL-59214]
  - Resolves: RHEL-59214
    (qemu-ga cannot freeze filesystems with sentinelone)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-53.el8.4
changelog:
  - kvm-target-s390x-report-deprecated-props-in-cpu-model-ex.patch [RHEL-88701]
  - kvm-target-s390x-flag-te-and-cte-as-deprecated.patch [RHEL-88701]
  - kvm-target-s390x-filter-deprecated-properties-based-on-m.patch [RHEL-88701]
  - kvm-target-s390x-move-deprecated-props-to-CpuModelExpans.patch [RHEL-88701]
  - kvm-redhat-Adjust-indentation-in-qapi-machine-target.jso.patch [RHEL-88701]
  - Resolves: RHEL-88701
    ([RHEL 8.10 qemu] KVM - Live migration of guest fails from z16-z17 [rhel-8.10.z])


author: Jacob Wang <jacob.wang@openanolis.org> - 6.2.0-53.0.8.4
changelog:
  - Adjust limit for virtiofsd minor version
  - Add loongarch supporti (lixianglai@loongson.cn)
  - Add package qemu-user-static (fuyuan.wh@alibaba-inc.com)
  - Modify-smbios-option-lack-and-Modify-the-maximum-num.patch (lixianglai@loongson.cn)
  - rename-kvm_msr_buf-with-kvm_csr_buf.patch (lixianglai@loongson.cn)
  - code-cleanup-for-loongarch-kvm.patch (lixianglai@loongson.cn)
  - Support-TPM.patch (lixianglai@loongson.cn)
  - kvm-csr-save-and-restore-optimization.patch (lixianglai@loongson.cn)
  - address-space-code-cleanup-on-7A-virt-machine.patch (lixianglai@loongson.cn)
  - Fix-irq-routing-and-fpu-option-to-compat-with-kernel.patch (lixianglai@loongson.cn)
  - Support-vfio-config.patch (lixianglai@loongson.cn)
  - pass-to-make-check.patch (lixianglai@loongson.cn)
  - fixup-can-t-find-cpu-type.patch (lixianglai@loongson.cn)
  - fix-smbios-type4-info-for-numa-support.patch (lixianglai@loongson.cn)
  - Fix-smp.cores-value.patch (lixianglai@loongson.cn)
  - Add-lbt-support-for-kvm.patch (lixianglai@loongson.cn)
  - Modify-the-ioctl-command-of-kvm.patch (lixianglai@loongson.cn)
  - Add-usb-storage-config-for-loongarch.patch (zhaotianrui@loongson.c)
  - Add-loongarch-into-QEMU_ARCH_VIRTIO_PCI-to-support-q.patch (zhaotianrui@loongson.c)
  - Fix-host-architecture-macro-of-LoongArch-to-HOST_LOO.patch (zhaotianrui@loongson.c)
  - Fix-LoongArch-KVM-header-macros.patch (zhaotianrui@loongson.c)
  - loongarch: Fixed the issue where qemu specifies the boot order (lixianglai@loongson.cn)
  - 0001-anolis-csv-i386-add-CSV-context.patch (jiangxin@hygon.cn)
  - 0002-anolis-csv-i386-add-command-to-initialize-CSV-contex.patch (jiangxin@hygon.cn)
  - 0003-anolis-csv-i386-add-command-to-load-data-to-guest-me.patch (jiangxin@hygon.cn)
  - 0004-anolis-csv-i386-add-command-to-load-vmcb-to-guest-me.patch (jiangxin@hygon.cn)
  - 0005-anolis-cpu-i386-populate-CPUID-0x8000_001F-when-CSV-.patch (jiangxin@hygon.cn)
  - 0006-anolis-csv-i386-CSV-guest-do-not-need-register-unreg.patch (jiangxin@hygon.cn)
  - 0007-anolis-target-i386-csv-load-initial-image-to-private.patch (jiangxin@hygon.cn)
  - 0008-anolis-vga-force-full-update-for-CSV-guest.patch (jiangxin@hygon.cn)
    (Hygon CSV3 feature)
  - Support Hygon CSV/CSV2 live migration, CSV2 reboot (hanliyang@hygon.cn)
  - Support CSV3 live migration (jiangxin@hygon.cn)
  - Support reuse ASID for CSV guests (hanliyang@hygon.cn)
  - Support tkm key isolation (xiongmengbiao@hygon.cn)
  - Add Hygon Dhyana-v3 and Dharma CPU model (zhouyanjing@hygon.cn)
  - Intel-SIG: Supprt Intel SPR/GNR/SRF new ISAs and cpu models (quanxian.wang@intel.com)
  - Intel-SIG: Supprt new SPR models (quanxian.wang@intel.com)
  - Intel-SIG: Sync more intel platform related features/fixes from upstream (jason.zeng@intel.com)
  - Sync Patch from source repo
  - fix psp device is not enabled
  - Support Hygon TKM run on CSV Guest
  - support Hygon CCP used in guest
  - Repair-CPU-hotplug-object-repeated-release-problem.patch
  - Dependency patches for Intel CWF platform


author: Quanxian Wang <quanxian.wang@intel.com> - 6.2.0-53.0.8.6
changelog:
  - Clearwater Forrest(CWF) Support
  - 1164-target-i386-Introduce-SierraForest-v2-model.patch
  - 1165-target-i386-Export-BHI_NO-bit-to-guests.patch
  - 1166-target-i386-Add-new-CPU-model-ClearwaterForest.patch
  - 1167-docs-Add-GNR-SRF-and-CWF-CPU-models.patch
  - 1168-target-i386-add-sha512-sm3-sm4-feature-bits.patch


author: Jacob Wang <jacob.wang@openanolis.org> - 6.2.0-53.0.1.2
changelog:
  - Adjust limit for virtiofsd minor version
  - Add loongarch supporti (lixianglai@loongson.cn)
  - Add package qemu-user-static (fuyuan.wh@alibaba-inc.com)
  - Modify-smbios-option-lack-and-Modify-the-maximum-num.patch (lixianglai@loongson.cn)
  - rename-kvm_msr_buf-with-kvm_csr_buf.patch (lixianglai@loongson.cn)
  - code-cleanup-for-loongarch-kvm.patch (lixianglai@loongson.cn)
  - Support-TPM.patch (lixianglai@loongson.cn)
  - kvm-csr-save-and-restore-optimization.patch (lixianglai@loongson.cn)
  - address-space-code-cleanup-on-7A-virt-machine.patch (lixianglai@loongson.cn)
  - Fix-irq-routing-and-fpu-option-to-compat-with-kernel.patch (lixianglai@loongson.cn)
  - Support-vfio-config.patch (lixianglai@loongson.cn)
  - pass-to-make-check.patch (lixianglai@loongson.cn)
  - fixup-can-t-find-cpu-type.patch (lixianglai@loongson.cn)
  - fix-smbios-type4-info-for-numa-support.patch (lixianglai@loongson.cn)
  - Fix-smp.cores-value.patch (lixianglai@loongson.cn)
  - Add-lbt-support-for-kvm.patch (lixianglai@loongson.cn)
  - Modify-the-ioctl-command-of-kvm.patch (lixianglai@loongson.cn)
  - Add-usb-storage-config-for-loongarch.patch (zhaotianrui@loongson.c)
  - Add-loongarch-into-QEMU_ARCH_VIRTIO_PCI-to-support-q.patch (zhaotianrui@loongson.c)
  - Fix-host-architecture-macro-of-LoongArch-to-HOST_LOO.patch (zhaotianrui@loongson.c)
  - Fix-LoongArch-KVM-header-macros.patch (zhaotianrui@loongson.c)
  - loongarch: Fixed the issue where qemu specifies the boot order (lixianglai@loongson.cn)
  - 0001-anolis-csv-i386-add-CSV-context.patch (jiangxin@hygon.cn)
  - 0002-anolis-csv-i386-add-command-to-initialize-CSV-contex.patch (jiangxin@hygon.cn)
  - 0003-anolis-csv-i386-add-command-to-load-data-to-guest-me.patch (jiangxin@hygon.cn)
  - 0004-anolis-csv-i386-add-command-to-load-vmcb-to-guest-me.patch (jiangxin@hygon.cn)
  - 0005-anolis-cpu-i386-populate-CPUID-0x8000_001F-when-CSV-.patch (jiangxin@hygon.cn)
  - 0006-anolis-csv-i386-CSV-guest-do-not-need-register-unreg.patch (jiangxin@hygon.cn)
  - 0007-anolis-target-i386-csv-load-initial-image-to-private.patch (jiangxin@hygon.cn)
  - 0008-anolis-vga-force-full-update-for-CSV-guest.patch (jiangxin@hygon.cn)
    (Hygon CSV3 feature)
  - Support Hygon CSV/CSV2 live migration, CSV2 reboot (hanliyang@hygon.cn)
  - Support CSV3 live migration (jiangxin@hygon.cn)
  - Support reuse ASID for CSV guests (hanliyang@hygon.cn)
  - Support tkm key isolation (xiongmengbiao@hygon.cn)
  - Add Hygon Dhyana-v3 and Dharma CPU model (zhouyanjing@hygon.cn)
  - Intel-SIG: Supprt Intel SPR/GNR/SRF new ISAs and cpu models (quanxian.wang@intel.com)
  - Intel-SIG: Supprt new SPR models (quanxian.wang@intel.com)
  - Intel-SIG: Sync more intel platform related features/fixes from upstream (jason.zeng@intel.com)


author: Xuchun Shang <xuchun.shang@linux.alibaba.com> - 6.2.0-53.0.1.3
changelog:
  - Sync Patch from source repo
  - 1120-qapi-qom-target-i386-csv-guest-Introduce-secret-head.patch
  - 1121-target-i386-kvm-Support-to-get-and-enable-extensions.patch
  - 1122-target-i386-csv-Request-to-set-private-memory-of-CSV.patch
  - 1123-target-i386-csv-Support-load-kernel-hashes-for-CSV3-.patch
  - 1124-target-i386-csv-Support-inject-secret-for-CSV3-guest.patch
  - 1125-i386-Avoid-explicitly-using-KVM_CAP_HYGON_COCO_EXT_C.patch
  - 1126-target-i386-sev-Return-0-if-sev_send_get_packet_len-.patch
  - 1127-target-i386-csv-The-CSV2-guest-running-on-the-recipi.patch
  - 1128-virtio-net-Fix-network-stall-at-the-host-side-waitin.patch


author: xiongmengbiao <xiongmengbiao@hygon.cn> - 6.2.0-53.0.1.5
changelog:
  - Support Hygon TKM run on CSV Guest
  - 1130-newfeature-hw-i386-add-mem2-option-for-qemu.patch
  - 1131-newfeature-hw-misc-psp-support-tkm-use-mem2-memory.patch
  - 1132-newfeature-hw-misc-psp-Pin-the-hugepage-memory-speci.patch


author: yangdepei <yangdepei@hygon.cn> - 6.2.0-53.0.1.6
changelog:
  - support Hygon CCP used in guest
  - 1133-newfeature-hw-vfio-add-hct-device-based-mediated-use.patch
  - 1134-newfeature-hw-vfio-hct-Change-MAX_CCP_CNT-from-16-to.patch
  - 1135-bugfix-hw-vfio-hct-fix-ccp-index-error-caused-by-uni.patch
  - 1136-newfeature-hw-vfio-hct-sharing-CCP-resources-between.patch
  - 1137-bugfix-hw-vfio-hct-exit-once-mdev-deivce-realize-fai.patch
  - 1138-bugfix-hw-vfio-hct-build-hct-device-in-default.patch


author: Jason Zeng <jason.zeng@intel.com> - 6.2.0-53.0.1.8
changelog:
  - Dependency patches for Intel CWF platform
  - 1140-target-i386-Allow-MCDT_NO-if-host-supports.patch
  - 1141-vmxcap-add-tertiary-execution-controls.patch
  - 1142-target-i386-add-support-for-VMX_SECONDARY_EXEC_ENABL.patch
  - 1143-target-i386-enumerate-bit-56-of-MSR_IA32_VMX_BASIC.patch
  - 1144-target-i386-fix-feature-dependency-for-WAITPKG.patch
  - 1145-target-i386-add-support-for-LAM-in-CPUID-enumeration.patch
  - 1146-target-i386-add-control-bits-support-for-LAM.patch
  - 1147-target-i386-add-support-for-FRED-in-CPUID-enumeratio.patch
  - 1148-target-i386-mark-CR4.FRED-not-reserved.patch
  - 1149-vmxcap-add-support-for-VMX-FRED-controls.patch
  - 1150-target-i386-enumerate-VMX-nested-exception-support.patch
  - 1151-target-i386-Add-get-set-migrate-support-for-FRED-MSR.patch
  - 1152-target-i386-Delete-duplicated-macro-definition-CR4_F.patch
  - 1153-target-i386-Add-VMX-control-bits-for-nested-FRED-sup.patch
  - 1154-target-i386-Raise-the-highest-index-value-used-for-a.patch
  - 1155-target-i386-Add-more-features-enumerated-by-CPUID.7..patch
  - 1156-target-i386-pass-X86CPU-to-x86_cpu_get_supported_fea.patch
  - 1157-i386-cpuid-Remove-subleaf-constraint-on-CPUID-leaf-1.patch
  - 1158-target-i386-Don-t-construct-a-all-zero-entry-for-CPU.patch
  - 1159-target-i386-Enable-fdp-excptn-only-and-zero-fcs-fds.patch
  - 1160-target-i386-Construct-CPUID-2-as-stateful-iff-times-.patch
  - 1161-target-i386-Make-invtsc-migratable-when-user-sets-ts.patch
  - 1162-target-i386-cpu-Fix-notes-for-CPU-models.patch


author: Mengbiao Xiong <xiongmengbiao@hygon.cn> - 6.2.0-53.0.8.7
changelog:
  - Support Hygon TKM (Trusted Key Management) Guest live migration
  - 1169-hw-misc-psp-support-live-migrate-for-vpsp-device.patch


author: yangdepei <yangdepei@hygon.cn> - 6.2.0-53.0.8.8
changelog:
  - Support Hygon HCT vCCP Guest live migration
  - 1170-hw-vfio-hct-support-start-with-ccp.ko-driver.patch
  - 1171-hw-vfio-hct-support-vfio-pci-multiple-processes.patch
  - 1172-hw-vfio-hct-support-live-migration-function-for-virt.patch
  - 1173-hw-vfio-hct-fix-virtual-machine-paused-due-to-obtain.patch
  - 1174-hw-vfio-hct-support-abort-migration-when-hct-excepti.patch


author: Zdenek Dohnal <zdohnal@redhat.com> - 7.1.1-5
changelog:
  - CVE-2018-9918 qpdf: stack exhaustion in QPDFObjectHandle and QPDF_Dictionary classes in libqpdf.a [fedora-all]


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-2
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209491


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-3
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212753


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212753


author: Remi Collet <rcollet@redhat.com> - 4.0.10-2
changelog:
  - drop build dependency on pandoc
  - drop dependency on jemalloc #1591762
  - fix License (BSD and MIT)
  - add bundled libraries licences
  - cleanup conditions from spec file


author: Remi Collet <rcollet@redhat.com> - 5.0.3-2
changelog:
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192
  - fix Stack buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10193


author: Remi Collet <rcollet@redhat.com> - 5.0.3-4
changelog:
  - fix lua scripts can overflow the heap-based Lua stack
    CVE-2021-32626
  - fix integer overflow issue with Streams
    CVE-2021-32627
  - fix integer overflow bug in the ziplist data structure
    CVE-2021-32628
  - fix integer overflow issue with intsets
    CVE-2021-32687
  - fix integer overflow issue with strings
    CVE-2021-41099


author: Liwei Ge <geliwei@openanolis.org> - 6.2.17-1.0.1
changelog:
  - Support loongarch64 platform
  - cherry-pick `add sw patch $cbad809d90a96439e196e8610d5b1868bcca5d3d`. (nijie@wxiat.com)


author: Silas Sewell <silas@sewell.ch> - 1.2.6-3
changelog:
  - Add Fedora build flags
  - Send all scriplet output to /dev/null
  - Remove debugging flags
  - Add redis.conf check to init script


author: Fabian Deutsch <fabiand@fedoraproject.org> - 2.4.6-1
changelog:
  - Update to 2.4.6
  - systemd unit file added
  - Compiler flags changed to compile 2.4.6
  - Remove doc/ and Changelog


author: Fabian Deutsch <fabian.deutsch@gmx.de> - 2.6.16-1
changelog:
  - Update to 2.6.16
  - Fix rhbz#973151
  - Fix rhbz#656683
  - Fix rhbz#977357 (Jan Vcelak <jvcelak@fedoraproject.org>)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.8.14-1
changelog:
  - Upstream 2.8.14 (RHBZ #1136287)
  - Bugfix for lua scripting users (server crash)
  - Refresh patches
  - backport spec from EPEL7 (thanks Warren)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.8.14-2
changelog:
  - Cleanup spec
  - Fix shutdown for redis-{server,sentinel}
  - Backport fixes from Remi Collet repository (ie: sentinel working)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.8.15-1
changelog:
  - Upstream 2.8.15 (critical bugfix for sentinel)
  - Fix to sentinel systemd service and configuration (thanks Remi)
  - Refresh patch management


author: Remi Collet <remi@fedoraproject.org> - 2.8.17-1
changelog:
  - Upstream 2.8.17
  - fix redis-sentinel service unit file for systemd
  - fix redis-shutdown for sentinel
  - also use redis-shutdown in init scripts


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.8.19-1
changelog:
  - Upstream 2.8.19 (RHBZ #1175232)
  - Fix permissions for tmpfiles (RHBZ #1182913)
  - Add limits config files
  - Spec cleanups


author: Haïkel Guémar <hguemar@fedoraproject.org> - 3.0.2-1
changelog:
  - Upstream 3.0.2 (RHBZ #1228245)
  - Fix Lua sandbox escape and arbitrary code execution (RHBZ #1228331)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 3.2.3-1
changelog:
  - Upstream 3.2.3
  - Security fix for CVE-2013-7458 (redis-cli history world readable)
  - RHBZ#1363670 RHBZ#1363671


author: Remi Collet <remi@fedoraproject.org> - 3.2.3-2
changelog:
  - add missing man pages #1374577
    using patch from https://github.com/antirez/redis/pull/3491
  - data and configuration should not be publicly readable #1374700
  - remove /var/run/redis with systemd #1374728
  - provide redis-check-rdb as a symlink to redis-server #1374736
    using patch from https://github.com/antirez/redis/pull/3494
  - move redis-shutdown to libexec


author: Nathan Scott <nathans@redhat.com> - 3.2.9-1
changelog:
  - Upstream 3.2.9
  - Add RuntimeDirectory=redis to systemd unit file (RHBZ #1454700)
  - Mark rundir as %ghost since it may disappear (tmpfs - #1454700)
  - Fix a shutdown failure with Unix domain sockets (RHBZ #1444988)


author: Nathan Scott <nathans@redhat.com> - 3.2.10-1
changelog:
  - Upstream 3.2.10 release
  - Ensure both the redis and redis-sentinel service files set correct perms
  - Dropped systemd tmpfiles source, handled directly in systemd service files


author: Nathan Scott <nathans@redhat.com> - 3.2.11-1
changelog:
  - Upstream 3.2.11 bug-fix-only release
  - Switch to using Type=notify for Redis systemd services (RHBZ #1172841)
  - Add Provides:bundled hiredis, linenoise, lua-libs clauses (RHBZ #788500)


author: Nathan Scott <nathans@redhat.com> - 4.0.2-1
changelog:
  - Upstream 4.0.2 release.  (RHBZ #1389592)
  - Add redis-devel for loadable module development.
  - Add redis-doc for man pages and detailed documentation.
  - Provide redis-check-aof as a symlink to redis-server also now.


author: Remi Collet <remi@remirepo.net> - 4.0.3-1
changelog:
  - Redis 4.0.3
  - fix ownership of /usr/share/doc/redis
  - use make_flags for test to avoid rebuild and failure
  - fix rpm macro location on EL-6
  - add /var/run/redis on EL-6
  - add spec file license header
  - drop duplicated documentation from main package
  - keep man in main page


author: Nathan Scott <nathans@redhat.com> - 4.0.4-1
changelog:
  - Upstream 4.0.4 release.
  - Update to current upstream redis-doc also.
  - Fix man page issues (RHBZ #1513594 and RHBZ #1515417).


author: Remi Collet <remi@remirepo.net> - 4.0.5-1
changelog:
  - Redis 4.0.5 - Released Thu Dec 1 16:03:32 CET 2017
  - Upgrade urgency CRITICAL: Redis 4.0.4 fix for PSYNC2 was broken,
    causing the slave to crash when receiving an RDB file from the
    master that contained a duplicated Lua script.


author: Kalev Lember <kalevlember@gmail.com> - 0.7.93-1
changelog:
  - Update to 0.7.93
  - Tighten deps with the _isa macro
  - Don't manually require pkgconfig; rpmbuild generates this automatically
  - Use license macro for the COPYING file


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-5
changelog:
  + rhythmbox-3.4.2-5
  - Remove LIRC plugin
  - Fix 2 build warnings
  - Remove BRs for removed visualiser plugin


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-7
changelog:
  + rhythmbox-3.4.2-7
  - Fix warnings in art search when playing a radio
  - Fix initial import never finishing
  - Fix multimedia keys integration in GNOME


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - adjust for rpmdb index name change
  - drop unnecessary vendor-macro patch for real
  - add ISA-dependencies among rpm subpackages
  - make lzma and sqlite deps conditional and disabled by default for now


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - rpm 4.5.90-0.git8424.1 (alpha snapshot)
  - adjust to build against Berkeley DB 4.5.20 from compat-db for now
  - add posttrans to clean up db environment mismatch after upgrade
  - forward-port devel autodeps patch


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8426.5
  - flip back to external bdb
  - fix tab vs spaces complaints from rpmlint
  - add dep for lzma and require unzip instead of zip in build (#310694)
  - add pkgconfig dependency to rpm-devel
  - drop ISA-dependencies for initial introduction
  - new snapshot from upstream for documentation fixes


author: Florian Festi <ffesti@redhat.com>
changelog:
  - 4.5.90-0.git8426.10
  - rpm-4.5.90-posttrans.patch
  - use header from rpmdb in posttrans to make anaconda happy


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8461.1
  - new snapshot from upstream
  - fixes #68290, #455972, #446202, #453364, #456708, #456103, #456321, #456913,
    - partial fix for #457360


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - add support for noarch subpackages
  - fix segfault in case of insufficient disk space detected (#460146)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - fix parsing of boolean expressions in spec (#456103)
    (unbreaks pam, jpilot and maybe other builds)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - create directory structure for rpmbuild prior to build if it doesn't exist (#455387)
  - create _topdir if it doesn't exist when installing SRPM
  - don't generate broken cpio in case of hardlink pointing on softlink,
    thanks to pixel@mandriva.com


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - add hack to support extracting gstreamer plugin provides (#438225)
  - fix another macro argument handling regression (#461180)


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to official 4.5.90 alpha tarball 
  - a big pile of misc bugfixes + translation updates
  - isa-macro generation fix for ppc (#464754)
  - avoid pulling in pile of perl dependencies for an unused script
  - handle both "invalid argument" and clear env version mismatch on posttrans


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc1 
  - fixes #465586, #466597, #465409, #216221, #466503, #466009, #463447...
  - avoid using %configure macro for now, it has unwanted side-effects on rpm


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - Make noarch sub-packages actually work
  - Fix defaultdocdir logic in installplatform to avoid hardwiring mandir


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc2
  - fixes #471820, #473167, #469355, #468319, #472507, #247374, #426672, #444661
  - enable automatic generation of pkg-config and libtool dependencies #465377


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.2
changelog:
  - change platform sharedstatedir to something more sensible (#185862)
  - add rpmdb_foo links to db utils for documentation compatibility


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.3
changelog:
  - extract mimehandler provides from .desktop files
  - preliminaries for extracting font provides (not enabled yet)
  - dont classify font metrics data as fonts
  - only run script dep extraction once per file, duh


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-1
changelog:
  - update to 4.6.0 final
  - revert libmagic looking into compressed files for now, breaks ooffice build


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-4
changelog:
  - inherit group tag from the main package (#470714)
  - ignore BuildArch tags for anyarch actions (#442105)
  - don't check package BuildRequires when doing --rmsource (#452477)
  - don't fail because of missing sources when only spec removal
    is requested (#472427)


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-5
changelog:
  - remove two offending hunks from anyarch patch causing that
    RPMTAG_BUILDARCHS isn't written to SRPMs


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-7
changelog:
  - loosen up restrictions on dependency names (#455119)
  - handle inter-dependent pkg-config files for requires too (#473814)
  - error/warn on elf binaries in noarch package in build


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-0.beta1.9
changelog:
  - fix recorded file state of otherwise skipped files (#492947)
  - compress ChangeLog, drop old CHANGES file (#492440)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-1
changelog:
  - update to 4.7.0 final (http://rpm.org/wiki/Releases/4.7.0)
  - fixes #494049, #495429
  - dont permit test-suite failure anymore


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-2
changelog:
  - file classification tweaks for text files (#494817)
    - disable libmagic text token checks, it's way too error-prone
    - consistently classify all text as such and include description


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-3
changelog:
  - couple of merge-review fixes (#226377)
    - eliminate bogus leftover rpm:rpm rpmdb ownership
    - unescaped macro in changelog
  - fix find-lang --with-kde with KDE3 (#466009)
  - switch back to default file digest algorithm


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-4
changelog:
  - split cron-job into a sub-package to avoid silly deps on core rpm (#500722)
  - rpm requires coreutils but not in %post
  - build with libcap and libacl
  - fix pgp pubkey signature tag parsing


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-5
changelog:
  - don't mess up problem altNEVR in python ts.check() (#501068)
  - fix hardlink size calculation on build (#503020)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-8
changelog:
  - updated OSGi dependency extractor (#506471)
  - fix segfault in symlink fingerprinting (#505777)
  - fix invalid memory access causing bogus file dependency errors (#506323)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-5
changelog:
  - fix duplicate dependency filtering on build (#490378)
  - permit absolute paths in file lists again (#521760)
  - use permissions 444 for all .debug files (#522194)
  - add support for optional bugurl tag (#512774)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-6
changelog:
  - use relative paths within db environment (related to #507309, #507309...)
  - remove db environment on close in chrooted operation (related to above)
  - initialize rpmlib earlier in rpm2cpio (#523260)
  - fix file dependency tag extension formatting (#523282)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-7
changelog:
  - fix build with BDB 4.8.x by removing XA "support" from BDB backend 
  - perl dep extractor heredoc parsing improvements (#524929)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-8
changelog:
  - support multiple python implementations in brp-python-bytecompile (#531117)
  - make disk space problem reporting a bit saner (#517418)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.2-2
changelog:
  - missing error exit code from signing password checking (#496754)
  - dont fail build on unrecognized data files (#532489)
  - dont try to parse subkeys and secret keys (#436812)
  - fix chmod test on selinux, breaking %{_fixperms} macro (#543035)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.1
changelog:
  - update to 4.8.0-beta1 (http://rpm.org/wiki/Releases/4.8.0)
  - rpm-build conflicts with current ocaml-runtime


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.2
changelog:
  - fix noise from python bytecompile on non-python packages (#539635)
  - make all our -devel [build]requires isa-specific
  - trim out superfluous -devel dependencies from rpm-devel


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-3
changelog:
  - fix segfault on failed url retrieval
  - fix verification error code depending on verbosity level
  - if anything in testsuite fails, dump out the log


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-8
changelog:
  - more fixes to postscript provides extractor (#562228)
  - avoid accessing unrelated mount points in disk space checking (#547548)
  - fix disk space checking with erasures present in transaction (#561160)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-11
changelog:
  - support single PPD providing driver for devices (#568351)
  - merge the psdriver patch pile into one
  - preserve empty lines in spec prep section (#573339)
  - teach python bindings about RPMTRANS_FLAG_NOCONTEXTS (related to #573111)
  - dont own localized man directories through find_lang (#569536)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-15
changelog:
  - handle non-existent dependency sets correctly in python (#593553)
  - make find-lang look in all locale dirs (#584866)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-16
changelog:
  - adjust to new pkg-config behavior wrt private dependencies (#596433)
  - rpm-build now requires pkgconfig >= 0.24


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-1
changelog:
  - update to 4.8.1 (http://rpm.org/wiki/Releases/4.8.1)
  - drop no longer needed patches
  - fix source url pointing to testing directory


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-2
changelog:
  - fix a potential getOutputFrom() error from font provide extraction
  - debug-friendlier message to aid finding other similar cases (#565223)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-5
changelog:
  - create gdb index on debuginfo generation (#617166)
  - rpm-build now requires /usr/bin/gdb-add-index for consistent index creation
  - include COPYING in -apidocs for licensing guidelines compliance


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-7
changelog:
  - bunch of spec tweaks, cleanups + corrections:
    - shorten rpm-build filelist a bit with glob use, reorder for saner grouping
    - missing isa in popt version dependency
    - only add rpmdb_foo symlinks for actually relevant db_* utils
    - drop no longer necessary file-devel dependency from rpm-devel
    - drop sqlite backend build-conditional
    - preliminaries for moving from db4 to libdb
  - use gnupg2 for signing as that's more likely to be installed by default


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.1
changelog:
  - rpm 4.9.0-beta1 (http://rpm.org/wiki/Releases/4.9.0)
    - drop no longer needed patches
    - adjust requires + buildrequires to match current needs
    - adjust rpmdb index ghosts to match the new release
    - split librpmbuild and librpmsign to a separate rpm-build-libs package
    - split rpmsign to its own package to allow signing without all the build goo
    - build-conditionalize plugins, disabled for now
    - gstreamer and printer dependency generation moving out
    - handle .so symlink dependencies with fileattrs
    - use gnupg2 for signing as that's what typically installed by default


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.3
changelog:
  - avoid division by zero in rpmdb size calculation (#671056)
  - fix secondary index iteration returing duplicate at end (#671149)
  - fix rebuilddb creating duplicate indexes for first header


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.5
changelog:
  - dont try to remove environment files if private env used (related to #671200)
  - unbreak mono dependency extraction (#673663)
  - complain instead of silent abort if cwd is not readable (#672576)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.rc1.1
changelog:
  - update to 4.9.0-rc1
  - drop upstream patches
  - nss packaging has changed, buildrequire nss-softokn-freebl-devel


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.rc1.4
changelog:
  - spec cosmetics clean up extra whitespace + group more logically
  - wipe out BDB environment at boot via tmpfiles.d


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-5
changelog:
  - verify some properties of replaced and wrong-colored files (#528383)
  - only list packages that would be generated on spec query (#693338)
  - preferred color packages should be erased last (#680261)
  - fix leaks when freeing a populated transaction set
  - take file state into account for file dependencies


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-8
changelog:
  - add dwarf-4 support to debugedit (#707677)
  - generate build-id symlinks for all filenames sharing a build-id (#641377)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-9
changelog:
  - fix crash if prep or changelog section in spec is empty (#706959)
  - fix crash on macro which undefines itself
  - fix script dependency generation with file 5.07 string changes (#712251)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.1.2-3
changelog:
  - adjust db util prefix & dependency due to #749293
  - warn but dont fail the build if STABS encountered by debugedit (#725378)


author: Kay Sievers <kay@redhat.com> - 4.9.1.2-8
changelog:
  - add temporary rpmlib patch to support filesystem transition
    https://fedoraproject.org/wiki/Features/UsrMove


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.1.2-13
changelog:
  - fix memory corruption on rpmdb size estimation (#766260)
  - fix couple of memleaks in python bindings (#782147)
  - fix regression in verify output formatting (#797964)
  - dont process spec include in false branch of if (#782970)
  - only warn on missing excluded files on build (#745629)
  - dont free up file info sets on test transactions


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11505.5
changelog:
  - add temporary fake library provides to get around deltarpm "bootstrap"
    dependency (yes its dirty)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11519.1
changelog:
  - newer git snapshot to keep patch-count down
  - fixes CVE-2012-0060, CVE-2012-0061 and CVE-2012-0815
  - fix obsoletes in installing set getting matched on provides (#810077)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11536.1
changelog:
  - newer git snapshot (#809402, #808750)
  - adjust posttrans script wrt bdb string change (#803866, #805613)


author: Panu Matilainen <pmatilai@redhat.com> - 4.10.90-0.git11989.1
changelog:
  - update to 4.11 (http://rpm.org/wiki/Releases/4.11.0) post-alpha snapshot
  - drop/adjust patches as necessary


author: Panu Matilainen <pmatilai@redhat.com> - 4.10.90-0.git11989.3
changelog:
  - package /usr/lib/rpm/macros.d directory (related to #846679)
  - fixup a bunch of old incorrect dates in spec changelog


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.0-0.beta1.2
changelog:
  - armv7hl and armv7hnl should not have -mthumb (#901901)
  - fix duplicate directory ownership between rpm and rpm-build (#894201)
  - fix regression on paths shared between a real file/dir and a ghost


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-7
changelog:
  - fix build-time double-free on file capability processing (#956190)
  - fix relocation related regression on file sanity check (#1001553)
  - fix segfault on empty -p <lua> scriptlet body (#1004062)
  - fix source url, once again


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-11
changelog:
  - generate kmod(module.ko) provides for kernel (#1025513)
  - dont override CONFIG_SITE if already set (related to #962837)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.2-0.rc1.1
changelog:
  - update to 4.11.2-rc1 (http://rpm.org/wiki/Releases/4.11.2)
  - drop upstreamed patches, adjust others as needed
  - handle python egg-info's version munging in file lists


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.2-3
changelog:
  - dont eat newlines on parametrized macro invocations (#1045723)
  - fully reset file actions between rpmtsRun() calls (#1076552)
  - fix build and sign module initialization in python3 (#1064758)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.2-6
changelog:
  - build with -fsanitize=address and -fsanitize=undefined for now
  - add spec build conditional for sanitizer build


author: Tom Callaway <spot@fedoraproject.org> - 4.11.2-10
changelog:
  - remove _isa from all BuildRequires (bz 554854)
    See: https://fedoraproject.org/wiki/Packaging:Guidelines#BuildRequires_and_.25.7B_isa.7D


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.90-0.git12844.1
changelog:
  - Update to rpm 4.12-alpha ((http://rpm.org/wiki/Releases/4.12.0)
  - Drop/adjust patches as appropriate
  - New sub-package(s) for plugins


author: Panu Matilainen <pmatilai@redhat.com> - 4.12.0-0.beta1.1
changelog:
  - Update to 4.12.0-beta1 (http://rpm.org/wiki/Releases/4.12.0)
  - Fixes #1122004, #1111349, #1117912, #1123722
  - Drop upstreamed patches


author: Panu Matilainen <pmatilai@redhat.com> - 4.12.0.1-1
changelog:
  - Update to rpm-4.12.0.1 final (http://rpm.org/wiki/Releases/4.12.0.1)
  - Temporary workaround payload size mismatch issue in rpm2cpio (#1142949)


author: Panu Matilainen <pmatilai@redhat.com> - 4.12.0.1-3
changelog:
  - Skip ghost files in payload (#1156497)
  - Fix size and archice size tag generation on big-endian systems


author: Lubos Kardos <lkardos@redhat.com> - 4.12.0.1-5
changelog:
  - Add check against malicious CPIO file name size (#1168715)
  - Fixes CVE-2014-8118
  - Fix race condidition where unchecked data is exposed in the file system
    (#1039811)
  - Fixes CVE-2013-6435


author: Lubos Kardos <lkardos@redhat.com> 4.12.0-11
changelog:
  - Pass _find_debuginfo_opts -g to eu-strip for executables (#1186563)
  - add_minidebug is not ran when strip_g is set (#1186563)


author: Lubos Kardos <lkardos@redhat.com> - 4.12.90-5
changelog:
  - If globbing of a filename fails, try use the filename without globbing.
    (#1246743)
  - Modify rpmIsGlob() to be more precise and compatible with glob().
    (#1246743)


author: Lubos Kardos <lkardos@redhat.com> - 4.13-0.rc1.6
changelog:
  - If %_wrong_version_format_terminate_build is 1 then terminate build in case
    that version format is wrong i. e. epoch is not unsigned integer or version
    contains more separators (":", "-"). %_wrong_version_format_terminate_build
    is 1 by deafault (#1265700)


author: Lubos Kardos <lkardos@redhat.com> - 4.13-0.rc1.7
changelog:
  - Fix reading a memory right after the end of an allocated area (#1260248)
  - Add support for various types of dependencies to rpmdeps tool (#1247092)
  - fix %autopatch when patch do not exist (#1244172)


author: Lubos Kardos <lkardos@rpm.org> - 4.13.0-0.rc1.13
changelog:
  - Add possibility to disable file triggers
  - Fix unwanted multiple execution of filetriggers in dnf (#1282115)


author: Lubos Kardos <lkardos@redhat.com> - 4.13.0-0.rc1.20
changelog:
  - Revert using %configure, it causes problems
  - Temporary set %_gnu macro explictly, just for one build (#1303265)


author: Florian Festi <ffesti@rpm.org> - 4.13.0-0.rc1.24
changelog:
  - Also block idle and sleep in the systemd-inhibit plugin (#1297984)
  - Add support for MIPS release 6
  - Add mips32 mips64 mipsel and mipseb macros (#1285116)


author: Lubos Kardos <lkardos@redhat.com> 4.13.0-0.rc1.31
changelog:
  - Enable --no-backup-if-mismatch by default in %patch macro (#884755)
  - Add %{_default_patch_flags} to %__patch which is used in %autosetup
  - Use fuzz settings for %autopatch/%autosetup


author: Lubos Kardos <lkardos@redhat.com> 4.13.0-0.rc1.33
changelog:
  - Fix sigsegv in stringFormat() (#1316903)
  - Fix reading rpmtd behind its size in formatValue() (#1316896)


author: Igor Gnatenko <ignatenko@redhat.com> - 4.13.0-0.rc1.41
changelog:
  - Add %{?system_python_abi}
  - rpm-python -> python2-rpm && rpm-python3 -> python3-rpm with providing old names
  - Fixes and cleanups


author: Thierry Vignaud <tvignaud@redhat.com> - 4.13.0-2
changelog:
  - Fix package name references in python sub-packages to match reality
  - Re-enable test-suite now that it works again


author: Panu Matilainen <pmatilai@redhat.com> - 4.13.0-11
changelog:
  - Fix malformed packages being generated around 4GB boundary (#1405570)
  - Resurrect debuginfo GDB index generation (#1410907)


author: Mark Wielaard <mjw@redhat.com> - 4.13.0.1-13
changelog:
  - Add tests fix for sed file build-id regexp matching.
  - Add fix for build-ids in non-executable ELF files (#1433837).


author: Panu Matilainen <pmatilai@redhat.com> - 4.13.0.1-17
changelog:
  - Work around missing python[23] during build dependency parse
  - Include ISA in the new python library version dependencies too


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-19
changelog:
  - Minisymtab should only be added for executables or shared libraries.
  - Add find-debuginfo.sh -n (debugedit --no-recompute-build-id) option.


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-25
changelog:
  - Add support for debugsource and debuginfo subpackages
    - find-debuginfo-untangle-unique-build-options.patch
    - debugsrc-and-sub-debuginfo-packages.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-28
changelog:
  - Add debugedit-prefix.patch.
  - Add find-debuginfo-filter-built-ins.patch.
  - Add find-debuginfo-dwz-multi.patch.
  - Add find-debuginfo-and-macro-docs.patch.


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-29
changelog:
  - Track patches using https://pagure.io/rpm-fedora
  - Use file list to explicitly set mode for build-id dirs/files
    (#1452893, #1458839)


author: Miro Hrončok <mhroncok@redhat.com> - 4.13.90-0.git14000.4
changelog:
  - Add platform-python bytecompilation patch: platform-python-bytecompile.patch
  - Add platform python deps generator patch: platform-python-abi.patch
  - Add a platform-python subpackage and remove system python related declarations
  - Build rpm without platform_python for bytecompilation
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.0-0.rc1.1
changelog:
  - Rebase to rpm 4.14.0-rc1 (http://rpm.org/wiki/Releases/4.14.0)
  - Re-enable SHA256 header digest generation (see #1480407)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.0-0.rc1.2
changelog:
  - Actually honor with/without libimaevm option
  - ima-evm-utils-devel >= 1.0 is required for rpm >= 4.14.0


author: Tomas Orsava <torsava@redhat.com> - 4.14.1-5
changelog:
  - Add envvar that will be present during RPM build,
    Part of a Fedora Change for F28: "Avoid /usr/bin/python in RPM build"
    https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.1-6
changelog:
  - Avoid unnecessary macro helper dependency on /usr/bin/python (#1538657)
  - Fix release of previous changelog entry


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-0.rc2.1
changelog:
  - Update to rpm 4.14.2-rc2
  - Fixes a regression in rpmlog error handling (#1597274)
  - Fixes several resource leaks found by covscan (#1602681)
  - Fixes DISTTAG not getting copied to source rpms (#1596193)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-1
changelog:
  - Buildrequire audit-libs-devel to actually enable the feature (#1607612)
  - Update to rpm 4.14.2 final (http://rpm.org/wiki/Releases/4.14.2)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-7
changelog:
  - Move python-macro-helper to main package where the macros are (#1651926)
  - Document --noverify in the man page (#1646458)
  - Handle unsupported digests the same as disabled ones (#1652529)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-11
changelog:
  - Revised patch for Py3 string data as surrogate-escaped utf-8 (#1631292)
  - Add a .decode() method to returned Py3 strings for compatibility


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-14
changelog:
  - Verify packages before signing (#1646388)
  - Make rpmsign exist values more consistent with our other tools


author: Florian Festi <ffesti@redhat.com> - 4.14.2-16
changelog:
  - Sort list of hard linked files in find-debuginfo.sh (#1421272)
  - Correct rpm -ql exit value when optional -p is omitted (#1680610)
  - Show list of files only once when use rpm -ql and multiple rpm files (#1689898)


author: Florian Festi <ffesti@redhat.com> - 4.14.2-23
changelog:
  - Use --dpbath only with full path (#1696408)
  - Fix memory leaks (#1714657)
  - Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
  - Fix bash warning from solution for #1689810


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-27
changelog:
  - Support generating build-id's from compressed ELF files (#1650074)
  - Compress annobit notes in find-debuginfo (#1719837)


author: Florian Festi <ffesti@redhat.com> - 4.14.2-31
changelog:
  - Parallelize /usr/lib/rpm/brp-strip-static-archive (#1691824)
  - Parallelize /usr/lib/rpm/check-buildroot (#1704354)


author: Florian Festi <ffesti@redhat.com> - 4.14.3-5
changelog:
  - Don't error out when replacing an invalid signature (#1874062)
  - Raise an expection when erasing a package fails in Python (#1872623)
  - Fix builds on NFS filesystems (#1840728)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-12
changelog:
  - Bump up the limit of signature header to 64MB (#1918777)
  - Add fapolicyd plugin (#1923167)
  - Unblock signals in forked scriptlets (#1913765)
  - Fix ambiguous diagnostics output on file triggers (#1883338)
  - Ensure ELF files get stripped when debuginfo is disabled (#1634084)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-13
changelog:
  - Fix minor issues found by COVSCAN in fapolicyd plugin
  - Actually honor libarchive bcond at configure time (#1902887)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-15
changelog:
  - Add out-of-bounds checks to hdrblobInit() (#1929445)
  - Fixes CVE-2021-20266
  - Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-16
changelog:
  - Add support for read-only sqlite rpmdb (#1938928)
  - Drop compat .decode() method from returned Py3 strings (#1840142)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-20
changelog:
  - Add --path query option (#1940895)
  - Macroize find-debuginfo script location (#2019540)
  - Validate and require subkey binding sigs on PGP pubkeys (#1958480)
  - Fixes CVE-2021-3521


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-22
changelog:
  - Fix spurious %transfiletriggerpostun execution (#2023693)
  - Skip recorded symlinks in --setperms (#1900662)


author: Florian Festi <ffesti@redhat.com> - 4.14.3-31
changelog:
  - Backport file handling code from rpm-4.19 to fix CVE-2021-35937,
    CVE-2021-35938 and CVE-2021-35939


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-32
changelog:
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63069)
  - Fix IMA signature lengths assumed constant (RHEL-39896)
  - Fix root relocation regression (RHEL-49494)
  - Report unsafe symlinks during installation as a specific case (RHEL-39897)
  - Don't segfault on missing priority tag (RHEL-39894)


author: Liwei Ge <geliwei@openanolis.org> - 4.14.4-32.0.1
changelog:
  - Rebrand for Anolis OS
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 build
  - Support loongarch for rpm
  - Add loongarch64 support for debugedit(doupengda@loongson.cn)
  - Modify the spec to add debugedit for loongarch64(zhangwenlong@loongson.cn)
  - Support and switch rpmdb to sqlite (flin@linux.alibaba.com)
  - conditional set relbuf for loongarch debugedit (geliwei@openanolis.org)
  - avoid dead loop in db3_dbiOpen when db_create failed (xuchunmei@linux.alibaba.com)
  - do not switch rpmdb to sqlite (xuchunmei@linux.alibaba.com)
  - Fix a copy-paste --help description of --whatconflicts (wangkaiqiang@inspur.com)
  - https://bugzilla.openanolis.cn/show_bug.cgi?id=8035 (wangkaiqiang@inspur.com)
  - Add sw64 Architecture (nijie@wxiat.com)
  - update config to support sw64 Architecture. (Weisson@linux.alibaba.com)
  - keep compatibility between sw and other architecture. (Weisson@linux.alibaba.com)
  - Fix compatibility of debugedit tool on sw_64 platform. (Weisson@linux.alibaba.com)
  - cherry-pick Add sw8a Architecture #d96aa474da407c806ef6b68c669f8027e366f302 (nijie@wxiat.com)
  - cherry-pick Add sw8a patch #923576a65dc00eb4fbe1f10a5d0027c4de1f5be0 (nijie@wxiat.com)


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.4-4
changelog:
  - Expose gating.yaml file in order to enable manual CI gating for rshim
    in RHEL-8.4, by bumping release and doing a Brew build.
  - Partially resolves: rhbz#1912248


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5.
  - Modify rshim.spec accordingly.
  - Resolves: rhbz#1950425


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-2
changelog:
  - Add sysconfig/rshim file and update rshim.service to source it.
  - jbastian made the first cut of this patch, which needed to be
    modified due to the update to 2.0.5. And I chose to go with
    %autosetup to handle Patch0, instead of sticking with %setup.
  - Resolves: rhbz#1946349


author: Dean Nelson <dnelson@redhat.com> - 2.0.8-1
changelog:
  - Update user-space rshim driver source to version 2.0.8
  - Modify rshim.spec accordingly
  - Resolves: rhbz#2196852


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-9
changelog:
  - Add deleteStateOnFileMove imfile module option
    resolves: rhbz#1909639
  - Add inotify_rm_watch() inotify API call when object needs to be destroyed
    resolves: rhbz#2052403


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-10
changelog:
  - openssl: Correct gnutlsPriorityString (custom ciphers) behaviour
  - Fix error handling in gtlsRecordRecv that can cause 100 percent CPU usage
    resolves: rhbz#2046158
  - Address CVE-2022-24903, Heap-based overflow in TCP syslog server
    resolves: rhbz#2081401


author: Attila Lakatos <alaktos@redhat.com> - 8.2102.0-13
changelog:
  - Make rsyslog-relp require librelp>= 1.9.0
    resolves: rhbz#2029352
  - Reorder logrotate parameters to work with POSIXLY_CORRECT env var
    resolves: rhbz#2070496


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-14
changelog:
  - Fix wrong type conversion in cstrLen()
    resolves: rhbz#2157804
  - imjournal: by default retrieves _PID from journal as PID number
    resolves: rhbz#2176398
  - Systemd service file hardening
    resolves: rhbz#2176404


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-15
changelog:
  - omelasticsearch: make compatible with elasticsearch>=8
  - add new action specific parameter esversion.major
    resolves: rhbz#2192955


author: Stephen Gallagher <sgallagh@redhat.com> - 0.11-15
changelog:
  - Temporarily disable -Werror=format-security to unbreak the build
  - Build with verbose command-line visible in the logs
  - Resolves: rhbz#1424270


author: John Kacur <jkacur@redhat.com> - 5.14.0-3
changelog:
  - Fix exit status when returning from calls to usage()
  Resolves: rhbz#2161423
  jiraProject == RHELPLAN-145250


author: John Kacur <jkacur@redhat.com> - 5.14.0-6
changelog:
  - Forward port the tests directory for ci testing
  Resolves: rhbz#2196611
  jiraProject == RHELPLAN-156801


author: John Kacur <jkacur@redhat.com> - 6.6.0-1
changelog:
  Update to rtla in linux-6.6.0
  - Add patch to use SYS_gettid and add -lpthread to the Makefile
  Resolves: RHEL-10081


author: Vít Ondruch <vondruch@redhat.com> - 2.7.1-133
changelog:
  - Fix `require` behavior allowing to load libraries multiple times.
    Resolves: rhbz#1842989
  - Add ruby-default-gems dependency on irb.


author: Pavel Valena <pvalena@redhat.com> - 2.7.3-136
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1947938
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1944227


author: Jarek Prokop <jprokop@redhat.com> - 3.0.1-138
changelog:
  - Upgrade to Ruby 3.0.1 by merging Fedora rawhide branch (commit: 6b2ff68).
    * Add missing `rubygem-` prefix for bundled provide of 'connection_pool'.
    * Pass ldflags to gem install via CONFIGURE_ARGS
    * Remove IRB dependency from rubygem-rdoc.
    * Fix flaky excon test suite.
    * Properly support DWARF5 debug information.
        Related: rhbz#1920533
    * Bundle OpenSSL into StdLib.
    * Fix SEGFAULT in rubygem-shoulda-matchers test suite.
    * Provide `gem.build_complete` file for binary gems.
    * Re-enable test suite.
    * ruby-default-gems have to depend on rubygem(io-console) due to reline.
    * Fix SEGFAULT preventing rubygem-unicode to build on armv7hl.
    * Add support for reworked RubyGems plugins.
    * Use proper path for plugin wrappers.
    * Extract RSS and REXML into separate subpackages, because they were moved from
       default gems to bundled gems.
    * Drop Net::Telnet and XMLRPC packages, because they were dropped from Ruby.
    Resolves: rhbz#1938942
  - Fix FTBFS due to an incompatible load directive.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-139
changelog:
  - Upgrade to Ruby 3.0.2.
    Related: rhbz#1938942
  - Fix command injection vulnerability in RDoc. (CVE-2021-31799)
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    (CVE-2021-31810)
  - Fix StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)
  - Fix dependencies of gems with explicit source installed from a
    different source. (CVE-2020-36327)
  - Pass ldflags to gem install via CONFIGURE_ARGS.
    The same comment on the changelog 3.0.1-138 was wrong.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-140
changelog:
  - Fix rubygem-irb upgrade not working due to directory -> symlink conversion.
    Resolves: rhbz#2010949


author: Jarek Prokop <jprokop@redhat.com> - 3.3.1-2
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-37446
  - Fix buffer overread vulnerability in StringIO.
    (CVE-2024-27280)
    Resolves: RHEL-37448
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    (CVE-2024-27281)
    Resolves: RHEL-37449
  - Fix Arbitrary memory address read vulnerability with Regex search.
    (CVE-2024-27282)
    Resolves: RHEL-37447


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-3
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-55409
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57049
    Resolves: RHEL-57054
    Resolves: RHEL-57069
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52783


author: Toru Hoshina <hoshina@best.com>
changelog:
  - Modified SPEC in order to install libruby.a so that it should be used by
    another ruby entention.
  - 2nd release.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/12/2000 CVS).
  - Added manuals and FAQs.
  - Split into ruby, ruby-devel, ruby-tcltk, ruby-docs, irb.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/20/2000 CVS).
  - Removed ruby-list.23190.patch(included into ruby_cvs.patch).
  - Added ruby-dev.10054.patch.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/22/2000 CVS).
  - Removed ruby-dev.10054.patch(included into ruby_cvs.patch).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.6.
  - removed ruby-dev.10123.patch(included into ruby-1.4.6).
  - Added ruby_cvs.2000082901.patch(upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Updated to upstream version 1.6.1.
  - Removed ruby_cvs.2000082901.patch and added ruby_cvs.2000092718.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000092718.patch and added ruby_cvs.2000100218.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100218.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000101117.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101117.patch and added ruby_cvs.2000101901.patch
    (upgraded ruby to latest cvs version).
  - Added ruby-dev.11262.patch.
  - Added ruby-dev.11265.patch.


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101901.patch, added ruby_cvs.2000121413.patch
    (upgraded ruby to latest cvs version).
  - Removed ruby-dev.11262.patch, ruby-dev.11265.patch,
    and ruby-dev.11268.patch (included into above patch).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000121413.patch, added ruby_cvs.2000122019.patch
    (upgraded ruby to latest cvs version).
  - new package: libruby


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000122019.patch, added ruby_cvs.2000122215.patch
    (upgraded ruby to latest cvs version, 1.6.2-preview4).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Applied patch: upgraded to cvs version (2001-01-15):
    fixed minor bugs(e.g. ruby makes extention librares too large...).


author: akira yamada <akira@vinelinux.org>
changelog:
  - fixed bad group for libruby.
  - Applied patch: upgraded to cvs version (2001-02-08):
    fixed minor bugs.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4-2
changelog:
  - Remove Japanese description and summaries; they belong in specspo and
    break rpm
  - Clean up specfile
  - Mark language specific files (README.jp) as such
  - bzip2 sources
  - rename the libruby package to ruby-libs for consistency
  - Exclude ia64 (doesn't build - the code doesn't seem to be 64-bit clean
    [has been excluded on alpha forever])


author: Akira TAGOH <tagoh@redhat.com> 1.6.6-1
changelog:
  - New upstream release.
  - Applied bug fix patches:
    - ruby-1.6.6-501-ruby-mode.patch: ruby-talk#30479: disables font-lock
      coloring.
    - ruby-1.6.6-100.patch: ruby-talk#30203: Ruby 1.6.6 bug and fix
                            ruby-list#33047: regex bug
                            PR#230: problem with -d in 1.6.6
  - Added ruby-mode and ruby-mode-xemacs packages.
  - Ruby works fine for ia64. so re-enable to build with ia64.
    (probably it should be worked for alpha)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-1
changelog:
  - New upstream release.
  - ruby-1.6.6-100.patch, ruby-1.6.6-501-ruby-mode.patch:
    removed. these patches no longer should be needed.
  - ruby-1.6.7-500-marshal-proc.patch: applied a fix patch.
    (ruby-dev#16178: Marshal::dump should call Proc#call.)
  - ruby-1.6.7-501-class-var.patch: applied a fix patch.
    (ruby-talk#35157: class vars broken in 1.6.7)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-2
changelog:
  - ruby-man-1.4.6-jp.tar.bz2: removed.
  - ruby-refm-rdp-1.4.7-ja-html.tar.bz2: uses it instead of.
  - ruby-1.6.7-500-marshal-proc.patch, ruby-1.6.7-501-class-var.patch:
    removed.
  - ruby-1.6.7-100.patch: applied a bug fix patch.
    (ruby-dev#16274: patch for 'wm state')
    (PR#206ja: SEGV handle EXIT)
  - ruby-1.6.7-101.patch: applied a bug fix patch.
    (ruby-list#34313: singleton should not be Marshal.dump'ed)
    (ruby-dev#16411: block local var)
  - ruby-1.6.7-102.patch: applied a bug fix patch.
    (handling multibyte chars is partially broken)
  - ruby-1.6.7-103.patch: applied a bug fix patch.
    (ruby-dev#16462: preserve reference for GC, but link should be cut)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-10
changelog:
  - moved sitedir to /usr/lib/ruby/site_ruby again according as our perl and
    python.
  - ruby-1.6.7-resolv1.patch, ruby-1.6.7-resolv2.patch: applied to fix 'Too many
    open files - "/etc/resolv.conf"' issue. (Bug#64830)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-11
changelog:
  - use %configure macro instead of configure script.
  - use the latest config.{sub,guess}.
  - get archname from rbconfig.rb for %dir
  - applied some patches from Debian:
    - 801_extmk.rb-shellwords.patch: use Shellwords
    - 801_mkmf.rb-shellwords.patch: mkmf.rb creates bad Makefile. the Makefile
      links libruby.a to the target.
    - 803_sample-fix-shbang.patch: all sample codes should be
      s|/usr/local/bin|/usr/bin|g
    - 804_parse.y-new-bison.patch: fix syntax warning.
    - 805_uri-bugfix.patch: uri.rb could not handle correctly broken mailto-uri.
  - add ExcludeArch x86_64 temporarily to fix Bug#74581. Right now ruby can't be
    built on x86_64.


author: Elliot Lee <sopwith@redhat.com> 1.6.7-13
changelog:
  - Remove ExcludeArch: x86_64
  - Fix x86_64 ruby with long2int.patch (ruby was assuming that sizeof(long)
    == sizeof(int). The patch does not fix the source of the problem, just
    makes it a non-issue.)
  - _smp_mflags


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-1
changelog:
  - New upstream release.
  - removed some patches. it's no longer needed.
    - ruby-1.6.7-100.patch
    - ruby-1.6.7-101.patch
    - ruby-1.6.7-102.patch
    - ruby-1.6.7-103.patch
    - 801_extmk.rb-shellwords.patch
    - 801_mkmf.rb-shellwords.patch
    - 804_parse.y-new-bison.patch
    - 805_uri-bugfix.patch
    - ruby-1.6.6-900_XXX_strtod.patch
    - ruby-1.6.7-sux0rs.patch
    - ruby-1.6.7-libobj.patch


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-2
changelog:
  - ruby-1.6.8-require.patch: applied to fix the search bug in require.
  - don't apply long2int patch to s390 and s390x. it doesn't work.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-7
changelog:
  - fix the gcc warnings. (#82192)
  - ruby-1.6.8-fix-x86_64.patch: correct a patch.
    NOTE: DON'T USE THIS PATCH FOR BIG ENDIAN ARCHITECTURE.
  - ruby-1.6.7-long2int.patch: removed.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-9
changelog:
  - ruby-1.6.8-castnode.patch: handling the nodes with correct cast.
    use this patch now instead of ruby-1.6.8-fix-x86_64.patch.


author: Akira TAGOH <tagoh@redhat.com> 1.8.1-1
changelog:
  - New upstream release.
  - don't use any optimization for ia64 to avoid the build failure.
  - ruby-1.8.1-ia64-stack-limit.patch: applied to fix SystemStackError when the optimization is disabled.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-9
changelog:
  - ruby-1.8.1-cgi-dos.patch: security fix [CAN-2004-0983]
  - ruby-1.8.1-cgi_session_perms.patch: security fix [CAN-2004-0755]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-1
changelog:
  - New upstream release.
  - ruby-1.8.1-ia64-stack-limit.patch: removed - it's no longer needed.
  - ruby-1.8.1-cgi_session_perms.patch: likewise.
  - ruby-1.8.1-cgi-dos.patch: likewise.
  - generated Ruby interactive documentation - senarated package.
    it's now provided as ri package. (#141806)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-7
changelog:
  - ruby-1.8.2-deadcode.patch: removed the dead code from the source. (#146108)
  - make sure that all documentation files in ruby-docs are the world-
    readable. (#147279)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-9
changelog:
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: fixed the arbitrary command execution
    on XMLRPC server. (#161096)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-1
changelog:
  - New upstream release.
  - Build-Requires xorg-x11-devel instead of XFree86-devel.
  - ruby-multilib.patch: applied for only 64-bit archs.
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: removed. it has already been in upstream.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-3
changelog:
  - fixed the wrong file list. the external library for tcl/tk was included
    in ruby-libs unexpectedly.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-4
changelog:
  - moved the documents from ruby-libs to ruby-docs, which contains the arch
    specific thing and to be multilib support. (#168826)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-0.4.preview2
changelog:
  - updates to 1.8.4-preview2.
  - renamed the packages to ruby-* (#175765)
    - irb  -> ruby-irb
    - rdoc -> ruby-rdoc
    - ri   -> ruby-ri
  - added tcl-devel and tk-devel into BuildRequires.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-1
changelog:
  - New upstream release.
    - fixed a missing return statement. (#140833)
    - fixed an use of uninitialized variable. (#144890)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-3
changelog:
  - ruby-1.8.4-no-eaccess.patch: backported from ruby CVS to avoid conflict
    between newer glibc. (#179835)


author: Akira TAGOH <tagoh@redhat.com>
changelog:
  - ruby-rubyprefix.patch: moved all arch-independent modules under /usr/lib/ruby
    and keep arch-dependent modules under /usr/lib64/ruby for 64bit archs.
    so 'rubylibdir', 'sitelibdir' and 'sitedir' in Config::CONFIG points to
    the kind of /usr/lib/ruby now. (#184199)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-6
changelog:
  - ruby-deprecated-search-path.patch: added the deprecated installation paths
    to the search path for the backward compatibility.
  - added a Provides: ruby(abi) to ruby-libs.
  - ruby-1.8.4-64bit-pack.patch: backport patch from upstream to fix unpack("l")
    not working on 64bit arch and integer overflow on template "w". (#189350)
  - updated License tag to be more comfortable, and with a pointer to get more
    details, like Python package does. (#179933)
  - clean up.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-7
changelog:
  - exclude ppc64 to make ruby-mode package. right now emacs.ppc64 isn't provided
    and buildsys became much stricter.
  - ruby-deprecated-sitelib-search-path.patch: applied to add more search path
    for backward compatiblity.
  - added byacc to BuildReq. (#194161)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-11
changelog:
  - security fixes [CVE-2006-3694]
    - ruby-1.8.4-fix-insecure-dir-operation.patch:
    - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure
      operations in the certain safe-level restrictions. (#199538)
    - ruby-1.8.4-fix-alias-safe-level.patch: fixed to not bypass the certain
      safe-level restrictions. (#199543)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-1
changelog:
  - New upstream release.
  - removed the unnecessary patches:
    - ruby-1.8.4-no-eaccess.patch
    - ruby-1.8.4-64bit-pack.patch
    - ruby-1.8.4-fix-insecure-dir-operation.patch
    - ruby-1.8.4-fix-insecure-regexp-modification.patch
    - ruby-1.8.4-fix-alias-safe-level.patch
  - build with --enable-pthread except on ppc.
  - ruby-1.8.5-hash-memory-leak.patch: backported from CVS to fix a memory leak
    on Hash. [ruby-talk:211233]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-4
changelog:
  - security fix release.
  - ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that
    causes the denial of service. (#212396)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.36-3
changelog:
  - ruby-r12567.patch: backport patch from upstream svn to get rid of
    the unnecessary declarations. (#245446)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.110-1
changelog:
  - New upstream release.
    - ruby-r12567.patch: removed.
  - ruby-1.8.6-CVE-2007-5162.patch: security fix for Net::HTTP that is
    insufficient verification of SSL certificate.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.110-2
changelog:
  - Enable pthread support for ppc too. (#201452)
  - Fix unexpected dependencies appears in ruby-libs. (#253325)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.111-1
changelog:
  - New upstream release.
  - ruby-1.8.6.111-CVE-2007-5162.patch: Update a bit with backporting the changes
     at trunk to enable the fix without any modifications on the users' scripts.
     Note that Net::HTTP#enable_post_connection_check isn't available anymore.
     If you want to disable this post-check, you should give OpenSSL::SSL::VERIFY_NONE
     to Net::HTTP#verify_mode= instead of.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.111-3
changelog:
  - Clean up the spec file.
  - Remove ruby-man-1.4.6 stuff. this is entirely the out-dated document.
    this could be replaced by ri.
  - Disable the static library building.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.114-1
changelog:
  - Security fix for CVE-2008-1145.
  - Improve a spec file. (#226381)
    - Correct License tag.
    - Fix a timestamp issue.
    - Own a arch-specific directory.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.230-1
changelog:
  - New upstream release.
  - Security fixes. (#452295)
    - CVE-2008-1891: WEBrick CGI source disclosure.
    - CVE-2008-2662: Integer overflow in rb_str_buf_append().
    - CVE-2008-2663: Integer overflow in rb_ary_store().
    - CVE-2008-2664: Unsafe use of alloca in rb_str_format().
    - CVE-2008-2725: Integer overflow in rb_ary_splice().
    - CVE-2008-2726: Integer overflow in rb_ary_splice().
  - ruby-1.8.6.111-CVE-2007-5162.patch: removed.
  - Build ruby-mode package for all archtectures.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.230-3
changelog:
  - Backported from upstream SVN to fix a segfault issue. (#452825)
  - Backported from upstream SVN to fix an integer overflow in rb_ary_fill.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.287-1
changelog:
  - New upstream release.
  - Security fixes.
    - CVE-2008-3655: Ruby does not properly restrict access to critical
                     variables and methods at various safe levels.
    - CVE-2008-3656: DoS vulnerability in WEBrick.
    - CVE-2008-3657: Lack of taintness check in dl.
    - CVE-2008-1447: DNS spoofing vulnerability in resolv.rb.
    - CVE-2008-3443: Memory allocation failure in Ruby regex engine.
  - Remove the unnecessary backported patches.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.383-4
changelog:
  - Use bison to regenerate parse.c to keep the original format of error
    messages (bug 530275 comment 4)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.383-5
changelog:
  - Change mkmf.rb to use LIBRUBYARG_SHARED so that have_library() works
    without libruby-static.a (bug 428384)
  - And move libruby-static.a to -static subpackage


author: Jeroen van Meeuwen <j.van.meeuwen@ogd.nl> - 1.8.6.388-8
changelog:
  - Backport openssl/digest functions providing digest and hexdigest functions
    directly in OpenSSL::Digest.methods
  - Make sure that Red Hat people version their changelog entries
  - This is actually release #1, but now needs to be release #7


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-2
changelog:
  - tcltk: Give up using potentially unmaintained ruby_1_8_6 branch
    and instead completely replace with ruby_1_8 branch head
    (at this time, using rev 27738)
    (seems to fix 560053, 590503)
  - Fix Japanese encoding strings under ruby-tcltk/ext/tk/sample/


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-3
changelog:
  - ruby-1.8.x-null-class-must-be-Qnil.patch (bug 530407)
  - Recreate some patches using upstream svn when available, and
    add some comments for patches


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-4
changelog:
  - Patch36 (ruby-1.8.x-RHASH_SIZE-rb_hash_lookup-def.patch)
    also backport rb_hash_lookup definition (bug 592936)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-5
changelog:
  - Retry for bug 559158, Simplify the OpenSSL::Digest class
    pull more change commits from ruby_1_8 branch


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.249-3
changelog:
  - Integrated Jim Meyering's feedback and changes in to:
  - remove trailing blanks
  - placate rpmlint
  - ruby_* definitions: do not use trailing slashes in directory names
  - _normalized_cpu: simplify definition


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-1
changelog:
  - integrate more of jmeyering's and mtaska's feedback
  - removed emacs bits that are now shipped with the emacs package
  - various patch and spec cleanup
  - rebased to ruby 1.8.7 patch 299, removed patches no longer needed:
     ruby-1.8.7-openssl-1.0.patch, ruby-1.8.7-rb_gc_guard_ptr-optimization.patch


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-2
changelog:
  - readded bits to pull tk package from upstream source branch
  - removed unecessary .tk.old dir
  - renamed macros which may cause confusion, removed unused ones


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-3
changelog:
  - updated packaged based on feedback (from mtasaka)
  - added comments to all patches / sources
  - obsoleted ruby-mode, as it's now provided by the emacs package itself
  - readded missing documentation
  - various small compatability/regression fixes


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.7.299-4
changelog:
  - Cleanup spec file
  - Make -irb, -rdoc subpackage noarch
  - Make dependencies between arch-dependent subpackages isa specific
  - Improve sample documentation gathering


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.7.302-1
changelog:
  - Update to 1.8.7.302
  - CVE-2010-0541 (bug 587731) is fixed in this version
  - Update ext/tk to the latest head


author: Mamoru Tasaka <mtasaka@fedoraproject.org> - 1.8.7.352-1
changelog:
  - Update to 1.8.7 p352
  - CVE-2011-2686 is fixed in this version (bug 722415)
  - Update ext/tk to the latest git
  - Remove duplicate path entry (bug 718695)


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-2
changelog:
  - Install RubyGems outside of Ruby directory structure.
  - RubyGems has not its own -devel subpackage.
  - Enhanced macros.ruby and macros.rubygems.
  - All tests are green now (bkabrda).


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-4
changelog:
  - Bundled gems moved into dedicated directories and subpackages.
  - Create and own RubyGems directories for binary extensions.
  - Fix build with GCC 4.7.


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-5
changelog:
  - Initial release of Ruby 1.9.3.
  - Add rubygems dependency on io-console for user interactions.
  - Gems license clarification.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.286-19
changelog:
  - Update to 1.9.3 p286
  - Don't create files when NUL-containing path name is passed
    (bug 865940, CVE-2012-4522)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.327-21
changelog:
  - Update to 1.9.3.327
  - Fix Hash-flooding DoS vulnerability on MurmurHash function
    (CVE-2012-5371)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.374-27
changelog:
  - Update to 1.9.3 p374
  - Fix provided variables in pkgconfig (bug 789532:
    Vít Ondruch <vondruch@redhat.com>)


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-0.1.r39387
changelog:
  - Upgrade to Ruby 2.0.0 (r39387).
  - Introduce %gem_install macro.
  - Build against libdb instead of libdb4 (rhbz#894022).
  - Move native extensions from exts to ruby directory.
  - Enable most of the PPC test suite.
  - Change ruby(abi) -> ruby(release).
  - Rename ruby executable to ruby-mri, to be prepared for RubyPick.
  - Add ruby(runtime_executable) virtual provide, which is later used
    by RubyPick.
  - RDoc now depends on JSON.
  - Try to make -doc subpackage noarch again, since the new RDoc should resolve
    the arch dependent issues (https://github.com/rdoc/rdoc/issues/71).
  - Enable SystemTap support.
  - Add TapSet for Ruby.
  - Split Psych into rubygem-psych subpackage.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-1
changelog:
  - Update to Ruby 2.0.0-p0.
  - Change %{ruby_extdir} to %{ruby_extdir_mri} in preparation for better
    JRuby support.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-3
changelog:
  - Avoid "method redefined;" warnings due to modified operating_system.rb.
  - Fix strange paths created during build of binary gems.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-7
changelog:
  - Macro definition moved into macros.ruby and macros.rubygems files.
  - Added filtering macros.
  - Filter automatically generated provides of private libraries (rhbz#947408).


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.195-8
changelog:
  - Update to Ruby 2.0.0-p195 (rhbz#917374).
  - Fix object taint bypassing in DL and Fiddle (CVE-2013-2065).
  - Fix build against OpenSSL with enabled ECC curves.
  - Add aarch64 support (rhbz#926463).


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-9
changelog:
  - Update to Ruby 2.0.0-p247 (rhbz#979605).
  - Fix CVE-2013-4073.
  - Fix for wrong makefiles created by mkmf (rhbz#921650).
  - Add support for ABRT autoloading.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-13
changelog:
  - Fixes multilib conlicts of .gemspec files.
  - Make symlinks for psych gem to ruby stdlib dirs (rhbz#979133).
  - Use system-wide cert.pem.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-14
changelog:
  - Add forgotten psych.rb link into rubygem-psych to fix "private method `load'
    called for Psych:Moduler" error (rhbz#979133).


author: Vít Ondruch <vondruch@redhat.com> - 2.1.0-17
changelog:
  - Upgrade to Ruby 2.1.0.
  - Move RPM macros into /usr/lib/rpm/macros.d directory.
  - Allow MD5 in OpenSSL for tests.


author: Vít Ondruch <vondruch@redhat.com> - 2.1.0-18
changelog:
  - Don't generate documentation on unexpected places.
  - Detect if rubygems are running under rpmbuild and install gem binary
    extensions into appropriate place.
  - Add support for ppc64le arch (rhbz#1053263).
  - Re-enable some test cases, which are passing now with Kernel 3.12.8+.
  - Backport fix for floating point issues on i686.


author: Vít Ondruch <vondruch@redhat.com> - 2.1.1-20
changelog:
  - Remove useless exclude (rhbz#1065897).
  - Extract load macro into external file and include it.
  - Kill bundled certificates.


author: Vít Ondruch <vondruch@redhat.com> - 2.1.4-24
changelog:
  - Update to Ruby 2.1.4.
  - Include only vendor directories, not their content (rhbz#1114071).
  - Fix "invalid regex" warning for non-rubygem packages (rhbz#1154067).
  - Use load macro introduced in RPM 4.12.


author: Vít Ondruch <vondruch@redhat.com> - 2.2.0-1
changelog:
  - Upgrade to Ruby 2.2.0.
  - Explicitly list RubyGems directories to avoid accidentaly packaged content.
  - Split test-unit and power_assert gems into separate sub-packages.
  - Drop libdb dependency in favor of gdbm.


author: Vít Ondruch <vondruch@redhat.com> - 2.2.2-40
changelog:
  - Fix upgrade path (rubygem-io-console's version was recently bumped in F21
    and makes the higher release to win).


author: Vít Ondruch <vondruch@redhat.com> - 2.3.0-50
changelog:
  - Upgrade to Ruby 2.3.0.
  - Move gemified net-telnet into subpackage.
  - Add did_you_mean subpackage.
  - Add virtual provides for CCAN copylibs.
  - Use weak dependencies.


author: Vít Ondruch <vondruch@redhat.com> - 2.3.1-59
changelog:
  - Continue to use OpenSSL 1.0 for the moment.
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Harden package.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.0-70
changelog:
  - Upgrade to Ruby 2.4.0.
  - Move gemified xmlrpc into subpackage.
  - Move gemified openssl into subpackage.
  - Tk is removed from stdlib.
  - Extend 'gem_' macros for pre-release version support.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.1-83
changelog:
  - Fix "IOError: stream closed" errors affecting Puma.
  - Temporary disable checksec on PPC64LE (rhbz#1479302).


author: Vít Ondruch <vondruch@redhat.com> - 2.5.0-89
changelog:
  - Drop obsolete ldconfig scriptlets.
  - Add GMP dependency.
  - Use 'with' operator in RPM dependency generator.
  - Add conflicts RPM generator.
  - Fix thread_safe test suite segfaults.
  - Fix invalid licenses.


author: Pavel Valena <pvalena@redhat.com> - 2.5.0-89
changelog:
  - Fix: Multiple vulnerabilities in RubyGems
    https://bugzilla.redhat.com/show_bug.cgi?id=1547431
    https://www.ruby-lang.org/en/news/2018/02/17/multiple-vulnerabilities-in-rubygems/


author: Florian Weimer <fweimer@redhat.com> - 2.5.0-89
changelog:
  - Rebuild with new LDFLAGS from redhat-rpm-config
  - Use --with-setjmp-type=setjmp on aarch64 to work around gcc issue (#1545239)


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-92
changelog:
  - Conflict requirement needs to generate dependency.
  - Stop using --with-setjmp-type=setjmp on aarch64 (rhbz#1545239).


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-97
changelog:
  - Fix TLS 1.3 issues.
    * ruby-2.6.0-fix-test-failure-with-TLS-1.3.patch
    * ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with-TLS-1.3.patch
    Related: rhbz#1616213


author: Jun Aruga <jaruga@redhat.com> - 2.5.1-99
changelog:
  - Fix generated rdoc template issues.
    * ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch
    Resolves: rhbz#1612026


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-99
changelog:
  - Additional OpenSSL 1.1.1 fixes.
    * ruby-2.6.0-fix-test-failure-with-TLS-1.3-maint.patch
    * ruby-2.6.0-config-support-include-directive.patch
    * ruby-2.6.0-use-larger-keys-for-SSL-tests.patch
    Related: rhbz#1616213


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-100
changelog:
  - Properly harden package using -fstack-protector-strong.
    * ruby-2.6.0-configure-fstack-protector-strong.patch
    Resolves: rhbz#1624168


author: Vít Ondruch <vondruch@redhat.com> - 2.5.5-104
changelog:
  - Update to Ruby 2.5.5.
    * Remove Patch25: ruby-2.6.0-Update-for-tzdata-2018f.patch; subsumed
    * Remove Patch11: ruby-2.6.0-Try-to-update-cert.patch; subsumed
    * Remove Patch19: ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with
        -TLS-1.3.patch; subsumed
    Resolves: rhbz#1688758
  - Don't ship .stp files when SystemTap support is disabled.
    Related: rhbz#1657915
  - Fix CovScan issues.
    Resolves: rhbz#1628592


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-105
changelog:
  - Update to Ruby 2.6.3 by merging Fedora master branch (commit: 1cc2a49)
    * Properly generate "ruby(rubygems)" versioned dependencies.
    * Extract composition of dependecy strings into helper.
    * Loosen RDoc dependency.
    * Upstream fix adding -C flag instead of changing directory for gem build.
    * Remove obsolete Group tag
    * Fix ".include =" support in openssl.cnf.
    * Link IRB back to StdLib.
    * Link IRB files instead of directories.
    * Exclude irb.rb from ruby-libs.
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-106
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 2.7.1-132
changelog:
  - Update to Ruby 2.7.1 by merging Fedora master branch (commit: 2981648)
    * Skip unstable tests on s390x.
    * Skip JIT tests in RHEL 8.
    Resolves: rhbz#1817135


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-4
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-68632
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Pavel Valena <pvalena@redhat.com> - 2.5.9-107
changelog:
  - Update to Ruby 2.5.9.
    * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
    Resolves: rhbz#1757844
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1950308


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-108
changelog:
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810


author: Jun Aruga <jaruga@redhat.com> - 2.5.9-110
changelog:
  - Fix FTBFS due to an incompatible load directive.
  - Fix a fiddle import test on an optimized glibc on Power 9.
  - Fix by adding length limit option for methods that parses date strings.
    Resolves: CVE-2021-41817
  - CGI::Cookie.parse no longer decodes cookie names to prevent spoofing security
    prefixes in cookie names.
    Resolves: CVE-2021-41819


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-111
changelog:
  - Fix HTTP response splitting in CGI.
    Resolves: CVE-2021-33621
  - Fix Buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739
  - Fix ReDoS vulnerability in URI.
    Resolves: CVE-2023-28755
  - Fix ReDoS vulnerability in Time.
    Resolves: CVE-2023-28756


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-112
changelog:
  - Fix ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755.
    (CVE-2023-36617)
    Resolves: RHEL-5614
  - Fix Buffer overread vulnerability in StringIO.
    (CVE-2024-27280)
    Resolves: RHEL-34125
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    (CVE-2024-27281)
    Resolves: RHEL-34117
  - Fix Arbitrary memory address read vulnerability with Regex search.
    (CVE-2024-27282)
    Resolves: RHEL-33867
  - Fix REXML DoS parsing an XML with many `<`s in an attribute value.
    (CVE-2024-35176)
    Resolves: RHEL-37877


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 2.5.9-113.0.1
changelog:
  - Fix FTBFS due to glibc 2.31.9000 implementing lchmod(2), compatible with glibc2.28 also
    * Patch: ruby-2.8.0-Brace-the-fact-that-lchmod-can-EOPNOTSUPP.patch
    * Patch: ruby-2.8.0-Moved-not-implemented-method-tests.patch
  - Avoid possible timeout errors in TestBugReporter#test_bug_reporter_add.
    * Patch: ruby-2.7.1-Timeout-the-test_bug_reporter_add-witout-raising-err.patch


author: Jun Aruga <jaruga@redhat.com> - 2.5.5-105
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1688758
  - Fix rdoc gzipped javascript pages are not the same across multilib.
    Resolves: rhbz#1719647


author: Vít Ondruch <vondruch@redhat.com> - 2.5.9-114
changelog:
  - Fix integer overflow in search_in_range function in regexec.c (CVE-2019-19012).
    Resolves: RHEL-87505


author: Jarek Prokop <jprokop@redhat.com> - 2.6.7-107
changelog:
  - Upgrade to Ruby 2.6.7.
    Resolves: rhbz#1757846
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address
    containing leading zero
    Resolves: rhbz#1950307
  - Fix: Rubygem-bundler: Don't use insecure tmp directory as home
    allows for execution of malicious code.
    Resolves: CVE-2019-3881


author: Jun Aruga <jaruga@redhat.com> - 2.6.9-108
changelog:
  - Upgrade to Ruby 2.6.9.
  - Skip JIT tests in RHEL 8.
  - Fix the issues required to start the "make test-bundler" itself.
  - Fix Bundler dependency confusion.
    Resolves: CVE-2020-36327


author: Vít Ondruch <vondruch@redhat.com> - 2.6.10-109
changelog:
  - Upgrade to Ruby 2.6.10.
    Resolves: rhbz#2088415
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739
  - Fix FTBFS due to an incompatible load directive.
  - Fix a fiddle import test on an optimized glibc on Power 9.


author: Jun Aruga <jaruga@redhat.com> - 2.7.4-137
changelog:
  - Upgrade to Ruby 2.7.4.
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810
  - Fix StartTLS stripping vulnerability in Net::IMAP.
    Resolves: CVE-2021-32066
  - Upgrade to Bundler 2.2.24.
    Resolves: CVE-2020-36327


author: Jarek Prokop <jprokop@redhat.com> - 2.7.6-138
changelog:
  - Upgrade to Ruby 2.7.6.
    Resolves: rhbz#2109424
  - Fix FTBFS due to an incompatible load directive.
    Related: rhbz#2109424
  - Fix a fiddle import test on an optimized glibc on Power 9.
    Related: rhbz#2109424
  - Fix regular Expression Denial of Service Vulnerability of Date Parsing Methods.
    Resolves: CVE-2021-41817
  - Fix cookie prefix spoofing in CGI::Cookie.parse.
    Resolves: CVE-2021-41819
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jarek Prokop <jprokop@redhat.com> - 3.0.4-141
changelog:
  - Upgrade to Ruby 3.0.4.
    Resolves: rhbz#2096346
    Resolves: rhbz#2000056
  - Fix double free in Regexp compilation.
    Resolves: CVE-2022-28738
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jun Aruga <jaruga@redhat.com> - 3.0.7-142
changelog:
  - Upgrade to Ruby 3.0.7.
    Resolves: RHEL-36189
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-36193
  - Fix ReDoS vulnerability in URI.
    Resolves: RHEL-36196
  - Fix ReDoS vulnerability in Time.
    Resolves: RHEL-36205
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-36198
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-36200
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-36203


author: Jun Aruga <jaruga@redhat.com> - 0.5.2-1
changelog:
  - New upstream release 0.5.2 by merging Fedora master branch (commit: cc15309)
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-1
changelog:
  - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
    Resolves: rhbz#1817135


author: Jarek Prokop <jprokop@redhat.com> 0.5.3-2
changelog:
  - Update by merging Fedora rawhide branch (commit: 81e2cc9)
  - Fix Mysql2::Result test for Ruby 3.1.
  - Remove gem_make.out and mkmf.log files from the binary RPM package.
  - Fix test assertion for mariadb-connector-c.
    Related: rhbz#2063772


author: lihaipeng <lihaipeng@openanolis.org> - 1.0.0-3.0.1
changelog:
  - Changed the way how/when parameters are interpret
  - Reference https://github.com/ged/ruby-pg/commit/73cd5e158ba4af73243c22f8918b1754256db17b


author: Jun Aruga <jaruga@redhat.com> - 1.1.4-1
changelog:
  - Update to pg 1.1.4 by merging Fedora master branch (commit: 397796e)
    * BuildRequires: s/postgresql-devel/libpq-devel/
    * Add marking lines at the start and end of the setup.log
    Resolves: rhbz#1672575


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.10-1
changelog:
  - update to https://github.com/opencontainers/runc/releases/tag/v1.1.10
  - require container-selinux >= 2.224.0 for dmz feature
  - Related: Jira:RHEL-2110


author: Lokesh Mandvekar <lsm5@redhat.com> - 0.0.8-1.git4155b68
changelog:
  - Resolves: rhbz#1277245 - bump to 0.0.8
  - Resolves: rhbz#1302363 - criu is a runtime dep
  - Resolves: rhbz#1302348 - libseccomp-golang is bundled in Godeps
  - manpages included


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-1.rc2
changelog:
  - Resolves: #1412239 - *CVE-2016-9962* - set init processes as non-dumpable,
  runc patch from Michael Crosby <crosbymichael@gmail.com>


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-9.1.gitf8ce01d
changelog:
  - Resolves: #1447078 - change default root path
  - add commit e800860 from runc @projectatomic/change-root-path


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.0.0-24.rc4.dev.gitc6e4a1e.1
changelog:
  - rebase to c6e4a1ebeb1a72b529c6f1b6ee2b1ae5b868b14f
  - https://github.com/opencontainers/runc/pull/1651


author: Dan Walsh <dwalsh@redhat.com> - 2:1.0.0-40.rc5.dev.gitad0f525
changelog:
  - Remove sysclt handling, not needed in RHEL8
  - Make sure package built with seccomp flags
  - Remove rectty
  - Add completions


author: Dan Walsh <dwalsh@redhat.name> - 2:1.0.0-46.dev.gitb4e2ecb
changelog:
  - Add patch https://github.com/opencontainers/runc/pull/1807 to allow
  - runc and podman to work with sd_notify


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-68.rc92
changelog:
  - update to https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.3-6
changelog:
  - Fix every podman run invocation generates two "Couldn't stat device
    /dev/char/10:200: No such file or directory" lines in the journal
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.3-3
changelog:
  - fix "Error: runc: exec failed: unable to start container process:
    open /dev/pts/0: operation not permitted: OCI permission denied"
  - Related: #2061390


author: Matej Habrnal <mhabrnal@redhat.com> 0.21-1
changelog:
  - New upstream version
    - Introduce 'serial' field in uReport
    - normalization: actualize list of functions


author: Jakub Filak <jakub@thefilaks.net> 0.22-1
changelog:
  - New upstream version
    - Added support fof JavaScript (V8) stack traces
    - Most parts of the in-hook core unwinder callable under unprivileged user
    - GDB core unwinder limits number of unwound frames
    - Fixed a pair of compile warnings - Chris Redmon <credmonster@gmail.com>


author: Matej Habrnal <mhabrnal@redhat.com> 0.23-1
changelog:
  - New upstream version
    - Allow rpm to be optional at build time
    - Do not use deprecated fedorahosted.org


author: Julius Milan <jmilan@redhat.com> 0.24-1
changelog:
  - New upstream version
    - Allow to report unpackaged problems
    - apidoc: generate html docs using doxygen
    - Fix parsing of subset of arm kernel oopses


author: Martin Kutlak <mkutlak@redhat.com> 0.25-1
changelog:
  - New upstream version
   - Normalization: actualize list of functions
   - Fix some compilation warnings
   - Allow to build python3 for rhel8
   - Makefile: add make release-* subcommands
   - Elfutils: Add missing stubs from earlier commit


author: Matej Habrnal <mhabrnal@redhat.com> 0.26-1
changelog:
  - spec: fix Allow python2 to be optional at build time
  - Allow python2 to be optional at build time
  - normalization: actualize list of functions
  - Append Python interpreter as related package
  - makefile: create .tar.xz with make release


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-1
changelog:
  - rebase to upstream v1.4.2
  - make sbd default to do pacemakerd-api handshake
  - conflict with pacemaker-libs < 2.0.5-4 to assure pacemaker
    is defaulting to pacemakerd-api handshake

    Resolves: rhbz#1903730
    Resolves: rhbz#1873135


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-3
changelog:
  - change the default for SBD_WATCHDOG_TIMEOUT to 10s
    s390(x) stays at 15s as before

    Resolves: rhbz#1922143


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - reverted watchdog_timeout_default to 5s
    (slipped in via an unreleased change on 8.4.0 branch)

    Resolves: rhbz#1980797


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management

    Resolves: rhbz#2168567


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-2
changelog:
  - add required tests subdirectory in addition to gating.yaml
    that had already been brought over before

    Related: rhbz#2168567


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-10
changelog:
  - Fix docdir patch (patch Makefile.am, not Makefile.in)
  - Use correct short name for Eclipse Public License 1.0
  - Use %license
  - Add explicit dependencies for libraries in Makefile.am (fixes FTBFS)
    Resolves: #1606302


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions
    Resolves: #1776670


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.9-24
changelog:
  - Fix important coverity issues
    Resolves: #1989603
  - Fix incorrect use of temporary paths
    Resolves: #1989605


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.5.0-1
changelog:
  - Update to latest upstream version
  - Change license to Eclipse Public License 1.0
  - Use %license
  - Fix URL


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-10
changelog:
  - Fix null pointer (DoS) vulnerability via POST request to /cimom (CVE-2018-6644)
    (patch by Adam Majer)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-16
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Remove %defattr
    Resolves: #1638007


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-9
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Fix license tag
    Resolves: #1638015


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-2
changelog:
  - Optimize get_rpm_nvr_by_type by adding a cache (#1794807)
  - Stop building seappletlegacy (#1878792)
  - Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-1
changelog:
  - Revert "Replace pydbus with dasbus"
  - Fix typos in --help, man pages and developer's guide (#2028226)
  - Do not use Python slip package
  - Stop SetroubleshootFixit after 10 seconds of inactivity
  - Fix plugin exception reporting
  - export alert dbus signal
  - Make sure local_policy_package is not None
  - sealert: add "Last Seen" column to alert list


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-4
changelog:
  - Decrease setroubleshootd priority and limit RAM utilization to 1GB (#2064727)
  - doc: Document performance related changes


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-6
changelog:
  - Fix shebang of SetroubleshootPrivileged.py (#2231023)
  - Check that SELinux is enabled before running (#2178950)


author: Petr Pisar <ppisar@redhat.com> - 4.15.2-10
changelog:
  - License corrected to "GPLv3+ and (GPLv3+ and BSD) and (LGPLv3+ or BSD) and
    LGPLv2+ and Public Domain and GFDL"


author: Jindrich Novy <jnovy@redhat.com> - 1.1.7-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.8-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.1
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1.2.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 1.2.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
  - Related: Jira:RHEL-2110


author: Paul Wouters <pwouters@redhat.com> - 1.7.4.1-1
changelog:
  - Resolves: rhbz#1805132 socat does not recognize IP addresses of the SAN extensions in ssl mode
  - Resolves: rhbz#1870279 Transfer via socat fails with openssl enabled
  - Resolves: rhbz#1914989 Socat udp4-recvfrom cause endless loop error when target is not vaild


author: Paul Wouters <paul@xelerance.com> 1.5.0.0-4
changelog:
  - Some filesystem defines moved from their specific (ext2)
    filesystem defines into the generic <linux/fs.h>.


author: Caolán McNamara <caolanm@redhat.com> - 1.7.1.1-5
changelog:
  - recreate autoconf to get correct includes when determining type
    sizes in order to build correctly


author: Paul Wouters <paul@xelerance.com> - 1.7.1.2-1
changelog:
  - Upgraded to 1.7.1.2
  - Link against compat-readline5 for GPLv2 license (Miroslav Lichvar)
    (bz #511310)


author: Paul Wouters <paul@xelerance.com> - 1.7.1.3-1
changelog:
  - Upgrade to 1.7.1.3
  - Includes fix for CVE-2010-2799 Stack overflow by lexical scanning of nested
    character patterns
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=620430


author: Paul Wouters <paul@nohats.ca> - 1.7.2.0-1
changelog:
  - Upgraded to 1.7.2.0 which allows tun/tap interfaces without IP address
    and introduces options openssl-compress and max-children.


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.1-1
changelog:
  - Updated to 1.7.2.1 for CVE-2012-0219, rhbz#821553, rhbz#821688
  - Remove patch merged upstream
  - Remove --disable-fips from configure


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.2-2
changelog:
  - Added two patches that fixes some -Wformat warnings. these fix 2 of 3
    failing test cases from test.sh
  - Enabled hardening with full relro/pie
  - Switch from readline5 to readline(6)


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.4-1
changelog:
  - Updated to 1.7.2.4 which contains many bugfixes
  - Run tests in make check
  - Add build dependancies for make test


author: Paul Wouters <pwouters@redhat.com> - 1.7.3.2-1
changelog:
  - Resolves rhbz#1404290 socat build failure on rawhide
  - Resolves rhbz#1416597 socat-1.7.3.2 is available
  - Resolves rhbz#1417483 Failed DNS resolution causes SIGSEGV and endless loop
  - Removed obsoleted patch


author: Andreas Schneider <asn@redhat.com> - 1.1.8-1
changelog:
  - Update to version 1.1.8
    * Added support for openat()
    * Added support for open64() and fopen64()
    * Always enabled logging support
    * Increased maximum for wrapped interfaces to 64
    * Improved fd duplication code
    * Fixed strict-aliasing issues
    * Fixed some use after free issues
    * Fixed issues on ppc64le


author: Andreas Schneider <asn@redhat.com> - 1.2.0-1
changelog:
  - Update to vesrion 1.2.0
    * Added threading support
    * Moved to modern cmake
    * Several smaller bugfixes


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-1
changelog:
  - Fixes: rhbz#1818877 - rebase to softhsm 2.6.0+
  - Fixes: rhbz#1701233 - support setting supported signature methods on the token


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-3
changelog:
  - Fixes: rhbz#1834909 - softhsm use-after-free on process exit
  - Synchronize the final fix with Fedora


author: Hans de Goede <hdegoede@redhat.com> - 2.0.0-6
changelog:
  - The last round of security fixes also fixes CVE-2018-14044, CVE-2018-14045
    (rhbz#1601618, rhbz#1601620, rhbz#1601624, rhbz#1601625)


author: Sérgio Basto <sergio@serjux.com> - 2.1.1-1
changelog:
  - Update to 2.1.1
    Bugfixes: Fixed potential buffer overwrite bugs in WavFile routines. Replaced asserts with runtime exceptions.
    Android: Migrated the SoundTouch Android example to new Android Studio
    Automake: unset ACLOCAL in bootstrap script to avoid error in case earlier build script has set it


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-10
changelog:
  - Fixed CVE-2018-11805
  - Resolves: rhbz#1787514
  - Fixed CVE-2020-1930
  - Resolves: rhbz#1820649
  - Fixed CVE-2020-1931
  - Resolves: rhbz#1820650


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2.0-1
changelog:
  - update to 1.2.0
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - include soname in file list
  - use license macro


author: Uri Lublin <uril@redhat.com> - 0.21.0-2
changelog:
  - Build without pciaccess
    Resolves: rhbz#1964922
  - Fix g_memdup deprecation warning with glib >= 2.68


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - first build against glibc
  - patched out the use of setresuid(), which is available only on kernels
    2.1.44 and later


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the init script to use reconfigure option to restart squid instead
    of shutdown/restart (both safer and quicker)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - cache & log dirs shouldn't be world readable
  - remove preun script (leave logs & cache @ uninstall)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - switch to using group squid
  - turn off icmp (insecure)
  - update to 2.2.DEVEL3
  - build FAQ docs from source


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix compliance with ftp RFCs
    (http://www.wu-ftpd.org/broken-clients.html)
  - Work around a bug in some versions of autoconf
  - BuildPrereq sgml-tools - we're using sgml2html


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix init script again (#11699)
  - add --enable-delay-pools (#11695)
  - update to STABLE3
  - update FAQ


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix path references in QUICKSTART (#15114)
  - fix initscript translations (#24086)
  - fix shutdown logic (#24234), patch from <jos@xos.nl>
  - add /etc/sysconfig/squid for daemon options & shutdown timeouts
  - three more bugfixes from the Squid people
  - update FAQ.sgml
  - build and ship auth modules (#23611)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.STABLE1 + patches
  - enable some more configure options (#24981)
  - oops, ship /etc/sysconfig/squid


author: Bill Nottingham <notting@redhat.com>
changelog:
  - 2.4.STABLE3 + patches
  - turn off HTCP at request of maintainers
  - leave SNMP enabled in the build, but disabled in the default config


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE3-0
changelog:
  - Spec file change to enable the nul storage module. bugzilla #74654
  - Upgrade to 2.5STABLE3 with current official patches.
  - Added --enable-auth="basic,ntlm": closes bugzilla #90145
  - Added --with-winbind-auth-challenge: closes bugzilla #78691
  - Added --enable-useragent-log and --enable-referer-log, closes
  - bugzilla #91884


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-1
changelog:
  - New upstream version.
  - Fix the Source: line in this spec file to point to the correct URL.
  - redo the -location patch to work with the new upstream version.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Incorporate many upstream patches
  - Include many spec file changes from D.Johnson <dj@www.uk.linux.org>


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-3
changelog:
  - Clean up the spec file to work on 64-bit platforms (use %{_libdir}
    instead of /usr/lib, etc)
  - Make the release number in the changelog section agree with reality.
  - use -fPIE rather than -fpie.  s390 fails with just -fpie


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-1
changelog:
  - New upstream version, obsoletes many patches.
  - Fix --datadir passed to configure.  Configure automatically adds /squid
    so we shouldn't.
  - Remove the problematic triggerpostun trigger, since is's broken, and FC2
    never shipped with that old version.
  - add %{?_smp_mflags} to make line.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-2
changelog:
  - Include the first 10 upstream patches
  - Add a patch for the correct location of the winbindd pipe.  This closes
    bugzilla #107561
  - Remove the change to ssl_support.c from squid-2.5.STABLE3-build patch
    This closes #117851
  - Include /etc/pam.d/squid .  This closes #113404
  - Include a patch to close #111254 (assignment in assert)
  - Change squid.init to put output messages in /var/log/squid/squid.out
    This closes #104697
  - Only useradd the squid user if it doesn't already exist, and error out
    if the useradd fails.  This closes #118718.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5STABLE5-5
changelog:
  - Merge current upstream patches.
  - Fix the -pipe patch to have the correct name of the winbind pipe.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-1
changelog:
  - New upstream version, with 32 upstream patches.
    This closes #133970, #133931, #131728, #128143, #126726

  - Change the permissions on /etc/squid/squid.conf to 640.  This closes
    bugzilla #125007


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3
changelog:
  - include patch from Ulrich Drepper <drepper@redhat.com> to stop
    problems with O_NONBLOCK.  This closes #136049


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-1
changelog:
  - new upstream version, with 3 upstream patches.
    Updated the -build and -config patches
  - Include patch from Ulrich Drepper <frepper@redhat.com> to more
    intelligently close all file descriptors.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-2
changelog:
  - Add a triggerin on samba-common to make /var/cache/samba/winbindd_privileged
    accessable so that ntlm_auth will work.  It needs to be in this rpm,
    because the Samba RPM can't assume the squid user exists.
    Note that this will only work if the Samba RPM is recent enough to create
    that directory at install time instead of at winbindd startup time.
    That should be samba-common-3.0.0-15 or later.
    This fixes bugzilla #103726
  - Clean up extra whitespace in this spec file.
  - Add additional upstream patches. (Now 18 upstream patches).
  - patch #112 closes CAN-2005-0096 and CAN-2005-0097, remote DOS security holes.
  - patch #113 closes CAN-2005-0094, a remote buffer-overflow DOS security hole.
  - patch #114 closes CAN-2005-0095, a remote DOS security hole.
  - Remove the -nonbl (replaced by #104) and -close (replaced by #111) patches, since
    they're now fixed by upstream patches.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-4
changelog:
  - Include two more upstream patches for security vulns:
    bz#146783 Correct handling of oversized reply headers
    bz#146778 CAN-2005-0211 Buffer overflow in WCCP recvfrom() call


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE8-2
changelog:
  - new upstream version with 4 upstream patches.
  - Reorganize spec file to apply upstream patches first


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-4
changelog:
  - More upstream patches, including the fixed 2GB patch.
  - include the -libbind patch, which prevents squid from using the optional
    -lbind library, even if it's installed.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-6
changelog:
  - More upstream patches, including a fix for
    bz#157456 CAN-2005-1519 DNS lookups unreliable on untrusted networks


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-1
changelog:
  - new upstream version
  - enabled fakeauth utility (#154020)
  - enabled digest authentication scheme (#155882)
  - all error pages marked as config (#127836)
  - patch for 64bit statvfs interface (#153274)
  - added httpd config file for cachemgr.cgi (#112725)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-3
changelog:
  - removed "--enable-truncate" option (#165948)
  - added "--enable-cache-digests" option (#102134)
  - added "--enable-ident-lookups" option (#161640)
  - some clean up (#165949)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-5
changelog:
  - fix for #171213 - CVE-2005-3258 Squid crash due to malformed FTP response
  - more fixes from upstream


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE12-2
changelog:
  - rewriten patch squid-2.5.STABLE10-64bit.patch, it works with
    "--with-large-files" option now
  - fix for #72896 - squid does not support > 1024 file descriptors,
    new "--enable-fd-config" option for it.


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE1-1
changelog:
  - new upstream + the latest CVS snapshot from 2006/07/18
  - updated fd config patch
  - enabled epoll
  - fixed release format (#197405)
  - enabled WCCPv2 support (#198642)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-2
changelog:
  - upstream fixes:
    * Accept 00:00-24:00 as a valid time specification (upstream BZ #1794)
    * aioDone() could be called twice
    * Squid reconfiguration (upstream BZ #1800)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-3
changelog:
  - added fix for #183869 - squid can abort when getting status
  - added upstream fixes:
      * Bug #1796: Assertion error HttpHeader.c:914: "str"
      * Bug #1779: Delay pools fairness, correction to first patch
      * Bug #1802: Crash on exit in certain conditions where cache.log is not writeable
      * Bug #1779: Delay pools fairness when multiple connections compete for bandwidth
      * Clarify the select/poll/kqueue/epoll configure --enable/disable options
  - reworked fd patch for STABLE4


author: Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE16-2
changelog:
  - our fd_config patch was replaced by upstream's version 
  - Source1 (FAQ.sgml) points to local source (upstream's moved to wiki)


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE2-1
changelog:
  - upgrade to latest upstream 3.0.STABLE2
  - check config file before starting (#428998)
  - whitespace unification of init script
  - some minor path changes in the QUICKSTART file
  - configure with the --with-filedescriptors=16384 option


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE5-2
changelog:
  - fix configure detection of netfilter kernel headers (#435499),
    patch by aoliva@redhat.com
  - add support for negotiate authentication (#445337)


author: Jiri Skala <jskala@redhat.com> - 7:3.0.STABLE7-2
changelog:
  - used ncsa_auth.8 from man-pages. there will be this file removed due to conflict
  - fix #458593 noisy initscript
  - fix #463129 init script tests wrong conf file
  - fix #450352 - build.patch patches only generated files


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE13-2
changelog:
  - backported logfile.cc syslog parameters patch from 3.1 (b9443.patch)
  - GCC-4.4 workaround in src/wccp2.cc


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE17-2
changelog:
  - Bug #514014, update to 3.0.STABLE17 fixing the denial of service issues
    mentioned in Squid security advisory SQUID-2009_2.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-1
changelog:
  - Upgrade to next upstream release 3.1.0.13 with many new features
    * IPv6 support
    * NTLM-passthru
    * Kerberos/Negotiate authentication scheme support
    * Localized error pages based on browser language preferences
    * Follow X-Forwarded-For capability
    * and more..


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-7
changelog:
  - Include upstream patches fixing important operational issues
  - Enable ESI support now that it does not conflict with normal operation


author: Jiri Skala <jskala@redhat.com> 7:3.1.0.14-2
changelog:
  - fixed #532930 Syntactic error in /etc/init.d/squid
  - fixed #528453 cannot initialize cache_dir with user specified config file


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.15-3
changelog:
  - fixed #551302 PROXY needs libcap. Also increases security a little.
  - merged relevant upstream bugfixes waiting for next 3.1 release


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.16-4
changelog:
  - spec file modified to be fedora packaging guidline compliant
  - little shifting lines in init script header due to rpmlint complaint
  - fixes assertion during start up


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.16-6
changelog:
  - Patch for Squid security advisory SQUID-2010:2, denial of service
    issue in HTCP processing (CVE-2010-0639)


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.1-2
changelog:
  - Update to 3.1.1 Squid bug #2827 crash with assertion failed:
    FilledChecklist.cc:90: "conn() != NULL" under high load.


author: Jiri Skala <jskala@redhat.com>
changelog:
  - fixes #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.3-2
changelog:
  - Fully fix #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled
  - Various IPv6 related issues fixed, making tcp_outgoing_address behave
    as expected and no commResetFD warnings when using tproxy setups.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.4-1
changelog:
  - Upstream 3.1.4 bugfix release, issues relating to IPv6, TPROXY, Memory
    management, follow_x_forwarded_for, and stability fixes


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.5-2
changelog:
  - Upstream 3.1.5 bugfix release
  - Upstream patch for Bug #614665: Squid crashes with  ident auth
  - Upstream patches for various memory leaks


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.9-1
changelog:
  - upgrade to squid-3.2
  - fixes #720445 - Provide native systemd unit file
  - SysV initscript moved to subpackage
  - temproary disabled eCap


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.13-2
changelog:
  - fixes #747103 - squid does not start if /var/spool/squid is empty
  - fixes #747110 - squid does not start adding "memory_pools off"


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.2.0.14-6
changelog:
  - upstream gcc-4.7 patch
  - fix for bug #772483 running out of memory, mem_node growing out of bounds


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.3-2
changelog:
  - Resolved: #854356 - squid.service use PIDFile
  - Resolved: #859393 - Improve cache_swap script
  - Resolved: #791129 - disk space warning
  - Resolved: #862252 - reload on VPN or network up/down
  - Resolved: #867531 - run test suite during build
  - Resolved: #832684 - missing after dependency nss-lookup.target
  - Removed obsolete configure options


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.9-1
changelog:
  - Update to latest upstream version 3.2.9
  - Fixed: CVE-2013-1839
  - Removed: makefile-patch (+make check)


author: Ville Skyttä <ville.skytta@iki.fi> - 7:3.3.4-2
changelog:
  - Fix basic auth and log daemon DB helper builds.
  - Use xz compressed tarball, fix source URLs.
  - Fix bogus dates in %changelog.


author: Michal Luscon <mluscon@redhat.com> - 7:3.3.9-1
changelog:
  - Update to latest upstream version 3.3.9
  - Fixed #976815: file descriptors are hard coded to 16384
  - Fixed: active ftp crashing
  - Fixed: offset of patches


author: Michal Luscon <mluscon@redhat.com> - 7:3.4.1-1
changelog:
  - Rebase to latest stable upstream release 3.4.1
  - Fixed #1034306: fails to build for AArch64
  - Fixed: active ftp


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.4.12-1
changelog:
  - Update to latest upstream version 3.4.12
  - bug #1173946: Disable -march=native compile time optimization, use Fedora defaults.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.5.2-2
changelog:
  - Update to latest upstream version 3.5.2
  - Remove deprecated (and renamed) squid_msnt_auth basic auth helper. Only
    performs LM authentication and not considered useful in todays networks.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.13-3
changelog:
  - Resolves: #1308866 - CVE-2016-2390 squid: incorrect server error 
    handling resulting in denial of service


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.15-1
changelog:
  - new version 3.5.15
  - Resolves: #1311585 - squid: Multiple Denial of Service issues in
    HTTP Response processing
  - Resolves: #1312267 - squid: SQUID-2016_2 advisory, multiple DoS issues


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.23-5
changelog:
  - Resolves: #1585617 - Build against libdb only instead of libdb4
  - disabled strict checking for now (squid can not be built with GCC8)


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-1
changelog:
  - Resolves: #1656871 - squid rebase to 4.4
  - Resolves: #1645148 - CVE-2018-19131 squid: Cross-Site Scripting when
    generating HTTPS response messages about TLS errors
  - Resolves: #1645156 - CVE-2018-19132 squid: Memory leak in SNMP query
    rejection code


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-6
changelog:
  - Resolves: #1679526 - Missing detailed configuration file
  - Resolves: #1703117 - RHEL 7 to 8 fails with squid installed because dirs
    changed to symlinks
  - Resolves: #1691741 - Squid cache_peer DNS lookup failed when not all lower
    case
  - Resolves: #1683527 - "Reloading" message on a fresh reboot after enabling
    squid


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-8
changelog:
  - Resolves: # 1738485 - CVE-2019-12527 squid:4/squid: heap-based buffer overflow
    in HttpHeader::getAuth


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-9
changelog:
  - Resolves: #1738583 - CVE-2019-12525 squid:4/squid: parsing of header
    Proxy-Authentication leads to memory corruption
  - Resolves: #1828369 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution
  - Resolves: #1828370 - CVE-2019-12519 squid: improper check for new member in
    ESIExpression::Evaluate allows for stack buffer overflow


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-1
changelog:
  - new version 4.11
  - libsystemd integration
  - Resolves: #1829467 - squid:4 rebase
  - Resolves: #1828378 - CVE-2019-12521 squid:4/squid: off-by-one error in
    addStackElement allows for a heap buffer overflow and a crash
  - Resolves: #1828377 - CVE-2019-12520 squid:4/squid: improper input validation
    in request allows for proxy manipulation
  - Resolves: #1828375 - CVE-2019-12524 squid:4/squid: improper access restriction
    in url_regex may lead to security bypass
  - Resolves: #1820664 - CVE-2019-18860 squid: mishandles HTML in the host
    parameter to cachemgr.cgi which could result in squid behaving in unsecure way
  - Resolves: #1802514 - CVE-2020-8449 squid:4/squid: Improper input validation
    issues in HTTP Request processing
  - Resolves: #1802513 - CVE-2020-8450 squid:4/squid: Buffer overflow in a Squid
    acting as reverse-proxy
  - Resolves: #1802512 - CVE-2019-12528 squid:4/squid: Information Disclosure
    issue in FTP Gateway
  - Resolves: #1771288 - CVE-2019-18678 squid:4/squid: HTTP Request Splitting
    issue in HTTP message processing
  - Resolves: #1771283 - CVE-2019-18679 squid:4/squid: Information Disclosure
    issue in HTTP Digest Authentication
  - Resolves: #1771280 - CVE-2019-18677 squid:4/squid: Cross-Site Request Forgery
    issue in HTTP Request processing
  - Resolves: #1771275 - CVE-2019-12523 squid:4/squid: Improper input validation
    in URI processor
  - Resolves: #1771272 - CVE-2019-18676 squid:4/squid: Buffer overflow in URI
    processor
  - Resolves: #1771264 - CVE-2019-12526 squid:4/squid: Heap overflow issue in URN
    processing
  - Resolves: #1738581 - CVE-2019-12529 squid: OOB read in Proxy-Authorization
    header causes DoS


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-2
changelog:
  - Resolves: #1853130 - CVE-2020-15049 squid:4/squid: request smuggling and
    poisoning attack against the HTTP cache
  - Resolves: #1853136 - CVE-2020-14058 squid:4/squid: DoS in TLS handshake


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-3
changelog:
  - Resolves: #1871705 - CVE-2020-24606 squid: Improper Input Validation could
    result in a DoS
  - Resolves: #1871702 - CVE-2020-15811 squid: HTTP Request Splitting could result
    in cache poisoning
  - Resolves: #1871700 - CVE-2020-15810 squid: HTTP Request Smuggling could result
    in cache poisoning


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-5
changelog:
  - Resolves: #1944261 - CVE-2020-25097 squid:4/squid: improper input validation
    may allow a trusted client to perform HTTP Request Smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-2
changelog:
  - Resolves: #2006121 - SQUID shortens FTP Link wrong that contains a semi-colon
    and as a result is not able to download zip file.CODE 404 TO CLIENT)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-3
changelog:
  - Resolves: #1941506 - CVE-2021-28116 squid:4/squid: out-of-bounds read in WCCP
    protocol data may lead to information disclosure


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-5
changelog:
  - Resolves: #2130260 - CVE-2022-41318 squid:4/squid: buffer-over-read in SSPI and SMB
    authentication


author: Tomas Korbar <tkorbar@redhat.com> - 4.15-6
changelog:
  - Resolves: #2072988 - [RFE] Add the "IP_BIND_ADDRESS_NO_PORT"
    flag to sockets created for outgoing connections in the squid source code.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-8
changelog:
  - Resolves: RHEL-18351 - squid:4/squid: Buffer over-read in the HTTP Message
    processing feature (CVE-2023-49285)
  - Resolves: RHEL-18342 - squid:4/squid: Incorrect Check of Function Return
    Value In Helper Process management (CVE-2023-49286)
  - Resolves: RHEL-18230 - squid:4/squid: Denial of Service in SSL Certificate
    validation (CVE-2023-46724)
  - Resolves: RHEL-15911 - squid:4/squid: NULL pointer dereference in the gopher
    protocol code (CVE-2023-46728)
  - Resolves: RHEL-18251 - squid crashes in assertion when a parent peer exists
  - Resolves: RHEL-14794 - squid: squid multiple issues in HTTP response caching
    (CVE-2023-5824)
  - Resolves: RHEL-14803 - squid: squid: Denial of Service in HTTP Digest
    Authentication (CVE-2023-46847)
  - Resolves: RHEL-14777 - squid: squid: Request/Response smuggling in HTTP/1.1
    and ICAP (CVE-2023-46846)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-9
changelog:
  - Resolves: RHEL-19552 - squid:4/squid: denial of service in HTTP request 
    parsing (CVE-2023-50269)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-10
changelog:
  - Resolves: RHEL-28529 - squid:4/squid: Denial of Service in HTTP Chunked
    Decoding (CVE-2024-25111)
  - Resolves: RHEL-26088 - squid:4/squid: denial of service in HTTP header
    parser (CVE-2024-25617)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-10.1
changelog:
  - Resolves: RHEL-56024 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-10.2
changelog:
  - Disable ESI support
  - Resolves: RHEL-65075 - CVE-2024-45802 squid:4/squid: Denial of Service
    processing ESI response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-10.3
changelog:
  - Resolves: RHEL-22593 - CVE-2024-23638 squid:4/squid: vulnerable to
    a Denial of Service attack against Cache Manager error responses


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New stable upstream version 1.2.1
  - Resolves: rhbz#595529 - spec file should eschew %define in favor of
  -                         %global
  - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart.
  - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
  -                         keyring
  - Resolves: rhbz#599724 - sssd is broken on Rawhide


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
changelog:
  - New upstream version 1.2.91 (1.3.0rc1)
  - Improved LDAP failover
  - Synchronous sysdb API (provides performance enhancements)
  - Better online reconnection detection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
changelog:
  - Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
  -                         doesn't require it


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - New upstream release 1.4.0
  - Added support for netgroups to the LDAP provider
  - Performance improvements made to group processing of RFC2307 LDAP servers
  - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
  - Build-system improvements to support Gentoo
  - Split out several libraries into the ding-libs tarball
  - Manpage reviewed and updated


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
changelog:
  - New upstream release 1.4.1
  - Add support for netgroups to the proxy provider
  - Fixes a minor bug with UIDs/GIDs >= 2^31
  - Fixes a segfault in the kerberos provider
  - Fixes a segfault in the NSS responder if a data provider crashes
  - Correctly use sdap_netgroup_search_base


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
changelog:
  - Solve a shutdown race-condition that sometimes left processes running
  - Resolves: rhbz#606887 - SSSD stops on upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  -Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Fix nested group member filter sanitization for RFC2307bis
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#677768 - name service caches names, so id command shows
  -                         recently deleted users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
changelog:
  - New upstream release 1.5.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
  - Fixes for support of FreeIPA v2
  - Fixes for failover if DNS entries change
  - Improved sss_obfuscate tool with better interactive mode
  - Fix several crash bugs
  - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
  - Delete users from the local cache if initgroups calls return 'no such user'
  - (previously only worked for getpwnam/getpwuid)
  - Use new Transifex.net translations
  - Better support for automatic TGT renewal (now survives restart)
  - Netgroup fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
  - Fixes for Active Directory when not all users and groups have POSIX attributes
  - Fixes for handling users and groups that have name aliases (aliases are ignored)
  - Fix group memberships after initgroups in the IPA provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
  - Fixes for several crash bugs
  - LDAP group lookups will no longer abort if there is a zero-length member
  - attribute
  - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-3
changelog:
  - Fix systemd conversion. Upgrades from SysV to systemd weren't properly
  - enabling the systemd service.
  - Fix a serious memory leak in the memberOf plugin
  - Fix an issue where the user's full name would sometimes be removed
  - from the cache


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-5
changelog:
  - Resolves: rhbz#697057 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server
  - Upgrades from SysV should now maintain enabled/disabled status


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
  - Fixed a serious memory leak in the memberOf plugin
  - Fixed a regression with the negative cache that caused it to be essentially
  - nonfunctional
  - Fixed an issue where the user's full name would sometimes be removed from
  - the cache
  - Fixed an issue with password changes in the kerberos provider not working
  - with kpasswd


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-1
changelog:
  - Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
  -                         cached password with predicatable filename


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-3
changelog:
  - Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
  - Make sure to properly convert to systemd if upgrading from newer
  - updates for Fedora 14


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.8-1
changelog:
  - New upstream release 1.5.8
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
  - Support for the LDAP paging control
  - Support for multiple DNS servers for name resolution
  - Fixes for several group membership bugs
  - Fixes for rare crash bugs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.9-1
changelog:
  - New upstream release 1.5.9
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
  - Support for overriding home directory, shell and primary GID locally
  - Properly honor TTL values from SRV record lookups
  - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
  - servers)
  - Properly escape IPv6 addresses in the failover code
  - Do not crash if inotify fails (e.g. resource exhaustion)
  - Don't add multiple TGT renewal callbacks (too many log messages)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.10-1
changelog:
  - New upstream release 1.5.10
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
  - Fixed a regression introduced in 1.5.9 that could result in blocking calls
  - to LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
changelog:
  - New upstream release 1.5.11
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
  - Fix a serious regression that prevented SSSD from working with ldaps:// URIs
  - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
  - address being saved to the AAAA record


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release 1.6.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
  - Add host access control support for LDAP (similar to pam_host_attr)
  - Finer-grained control on principals used with Kerberos (such as for FAST or
  - validation)
  - Added a new tool sss_cache to allow selective expiring of cached entries
  - Added support for LDAP DEREF and ASQ controls
  - Added access control features for Novell Directory Server
  - FreeIPA dynamic DNS update now checks first to see if an update is needed
  - Complete rewrite of the HBAC library
  - New libraries: libipa_hbac and libipa_hbac-python


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
changelog:
  - New upstream release 1.6.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
  - Fixes a serious issue with LDAP connections when the communication is
    dropped (e.g. VPN disconnection, waking from sleep)
  - SSSD is now less strict when dealing with users/groups with multiple names
    when a definitive primary name cannot be determined
  - The LDAP provider will no longer attempt to canonicalize by default when
    using SASL. An option to re-enable this has been provided.
  - Fixes for non-standard LDAP attribute names (e.g. those used by Active
    Directory)
  - Three HBAC regressions have been fixed.
  - Fix for an infinite loop in the deref code


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Improved handling of users and groups with multi-valued name attributes
    (aliases)
  - Performance enhancements
      Initgroups on RFC2307bis/FreeIPA
      HBAC rule processing
  - Improved process-hang detection and restarting
  - Enabled the midpoint cache refresh by default (fewer cache misses on
    commonly-used entries)
  - Cleaned up the example configuration
  - New tool to change debug level on the fly


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-4
changelog:
  - Change selinux policy requirement to Conflicts: with the old version,
    rather than Requires: the supported version.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release 1.6.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
  - Fixes a major cache performance issue introduced in 1.6.2
  - Fixes a potential infinite-loop with certain LDAP layouts


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-4
changelog:
  - Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758425 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.4-1
changelog:
  - New upstream release 1.6.4
  - Rolls up previous patches applied to the 1.6.3 tarball
  - Fixes a rare issue causing crashes in the failover logic
  - Fixes an issue where SSSD would return the wrong PAM error code for users
    that it does not recognize.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-1
changelog:
  - New upstream release 1.7.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
  - Support for case-insensitive domains
  - Support for multiple search bases in the LDAP provider
  - Support for the native FreeIPA netgroup implementation
  - Reliability improvements to the process monitor
  - New DEBUG facility with more consistent log levels
  - New tool to change debug log levels without restarting SSSD
  - SSSD will now disconnect from LDAP server when idle
  - FreeIPA HBAC rules can choose to ignore srchost options for significant
    performance gains
  - Assorted performance improvements in the LDAP provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-3
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-5
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features - fix netgroups and sudo as well


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta1
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta2
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
  - Fix two minor manpage bugs
  - Include the IPA AutoFS provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - New upstream release 1.8.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed several memory-corruption bugs
  - Finalized the ABI for the autofs support
  - Fixed a regression in the proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - New upstream release 1.8.0
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)
  - Include the IPA AutoFS provider
  - Fixed several memory-corruption bugs
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed a regression in the proxy provider
  - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
  - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                            logged at each login
  - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-7
changelog:
  - New upstream release 1.8.1
  - Resolve issue where we could enter an infinite loop trying to connect to an
    auth server
  - Fix serious issue with complex (3+ levels) nested groups
  - Fix netgroup support for case-insensitivity and aliases
  - Fix serious issue with lookup bundling resulting in requests never
    completing
  - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
    in addition to pam_authenticate
  - Fix several regressions in the proxy provider
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-8
changelog:
  - Fix uninitialized value bug causing crashes throughout the code
  - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-9
changelog:
  - Don't duplicate libsss_autofs.so in two packages
  - Set explicit package contents instead of globbing


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.2-10
changelog:
  - New upstream release 1.8.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
  - Several fixes to case-insensitive domain functions
  - Fix for GSSAPI binds when the keytab contains unrelated principals
  - Fixed several segfaults
  - Workarounds added for LDAP servers with unreadable RootDSE
  - SSH knownhostproxy will no longer enter an infinite loop preventing login
  - The provided SYSV init script now starts SSSD earlier at startup and stops
    it later during shutdown
  - Assorted minor fixes for issues discovered by static analysis tools


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.3-11
changelog:
  - New upstream release 1.8.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
  - Numerous manpage and translation updates
  - LDAP: Handle situations where the RootDSE isn't available anonymously
  - LDAP: Fix regression for users using non-standard LDAP attributes for user
    information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-1.beta1
changelog:
  - New upstream release 1.9.0 beta 1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
  - Add native support for autofs to the IPA provider
  - Support for ID-mapping when connecting to Active Directory
  - Support for handling very large (> 1500 users) groups in Active Directory
  - Support for sub-domains (will be used for dealing with trust relationships)
  - Add a new fast in-memory cache to speed up lookups of cached data on
    repeated requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-2.beta1
changelog:
  - Fix several regressions since 1.5.x
  - Ensure that the RPM creates the /var/lib/sss/mc directory
  - Add support for Netscape password warning expiration control
  - Rebuild against libldb 1.1.6


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-5.beta2
changelog:
  - New upstream release 1.9.0 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
  - Add support for the Kerberos DIR cache for storing multiple TGTs
    automatically
  - Major performance enhancement when storing large groups in the cache
  - Major performance enhancement when performing initgroups() against Active
    Directory
  - SSSDConfig data file default locations can now be set during configure for
    easier packaging


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-7.beta2
changelog:
  - Switch unicode library from libunistring to Glib
  - Drop unnecessary explicit Requires on keyutils
  - Guarantee that versioned Requires include the correct architecture


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-8.beta3
changelog:
  - New upstream release 1.9.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
  - Add a new PAC responder for dealing with cross-realm Kerberos trusts
  - Terminate idle connections to the NSS and PAM responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-9.beta4
changelog:
  - New upstream release 1.9.0 beta 4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
  - Add a new AD provider to improve integration with Active Directory 2008 R2
    or later servers
  - SUDO integration was completely rewritten. The new implementation works
    with multiple domains and uses an improved refresh mechanism to download
    only the necessary rules
  - The IPA authentication provider now supports subdomains
  - Fixed regression for setups that were setting default_tkt_enctypes
    manually by reverting a previous workaround.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-12.beta5
changelog:
  - New upstream release 1.9.0 beta 5
  - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
  - Many fixes for the support for setting default SELinux user context from
    FreeIPA, most notably fixed the specificity evaluation
  - Fixed an incorrect default in the krb5_canonicalize option of the AD
    provider which was preventing password change operation
  - The shadowLastChange attribute value is now correctly updated with the
    number of days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-13.beta6
changelog:
  - New upstream release 1.9.0 beta 6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
  - A new option, override_shell was added. If this option is set, all users
    managed by SSSD will have their shell set to its value.
  - Fixes for the support for setting default SELinux user context from FreeIPA.
  - Fixed a regression introduced in beta 5 that broke LDAP SASL binds
  - The SSSD supports the concept of a Primary Server and a Back Up Server in
    failover
  - A new command-line tool sss_seed is available to help prime the cache with
    a user record when deploying a new machine
  - SSSD is now able to discover and save the domain-realm mappings
    between an IPA server and a trusted Active Directory server.
  - Packaging changes to fix ldconfig usage in subpackages (#843995)
  - Rebuild against libldb 1.1.9


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-14.beta6
changelog:
  - Don't discard HBAC rule processing result if SELinux is on
    Resolves: rhbz#846792 (CVE-2012-3462)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-18.beta6
changelog:
  - Change the default ccache location to DIR:/run/user/${UID}/krb5cc
    and patch man page accordingly
  - Resolves: rhbz#851304


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-3
changelog:
  - Recreate Kerberos ccache directory if it's missing
  - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                            directory /run/user/UID/ccdir does not exist


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-4.beta1
changelog:
  - Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug
    in ding-libs
  - Fix SSH integration with fully-qualified domains
  - Add the ability to dynamically discover the NetBIOS name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-6.beta1
changelog:
  - Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                            realm join
  - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                            default for AD Provider
  - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                            parent directory when logging in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-7.beta1
changelog:
  - Apply a couple of patches from upstream git that resolve crashes when
    ID mapping object was not initialized properly but needed later


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-8.beta2
changelog:
  - New upstream release 1.10 beta2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
  - BuildRequire libcmocka-devel in order to run all upstream tests during build
  - BuildRequire libnl3 instead of libnl1
  - No longer BuildRequire initscripts, we no longer use /sbin/service
  - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any
    older krb5-libs version


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-9.beta2
changelog:
  - Fix typo in Requires that prevented an upgrade (#973916)
  - Use a hardcoded version in Conflicts, not less-than-current


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-11.beta2
changelog:
  - Apply a number of patches from upstream to fix issues found post-beta,
    in particular:
    -- segfault with a high DEBUG level
    -- Fix IPA password migration (upstream #1873)
    -- Fix fail over when retrying SRV resolution (upstream #1886)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-14
changelog:
  - Fix Obsoletes: to account for dist tag
  - Convert post and pre scripts to run on the sssd-common subpackage
  - Remove old conversion from SYSV


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-16
changelog:
  - Move sssd_pac to the sssd-ipa and sssd-ad subpackages
  - Trim out RHEL5-specific macros since we don't build on RHEL 5
  - Trim out macros for Fedora older than F18
  - Update libldb requirement to 1.1.16
  - Trim RPM changelog down to the last year


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0.2beta2
changelog:
  - Resolves: #906427 - Do not use %{_lib} in specfile for the nss and
                        pam libraries


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-0.4.beta2
changelog:
  - Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid:
                        Process /usr/libexec/sssd/sssd_nss was killed by
                        signal 11 (SIGSEGV)
  - Resolves: #996214 - sssd proxy_child segfault


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-2
changelog:
  - Backport simplification of ccache management from 1.11.1
  - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-3
changelog:
  - Fix multicast checks in the SSSD
  - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source
                             code getting the host info


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-1
changelog:
  - New upstream release 1.11.2
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.3-1
changelog:
  - New upstream release 1.11.3
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.4-1
changelog:
  - New upstream release 1.11.4
  - Remove upstreamed patch
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.5-1
changelog:
  - New upstream release 1.11.5
  - Remove upstreamed patch
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.1-2
changelog:
  - Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user
                             private group from server


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.2-6
changelog:
  - Fix regressions and bugs in sssd upstream 1.12.2
  - https://fedorahosted.org/sssd/ticket/{id}
  - Regressions: #2471, #2475, #2483, #2487, #2529, #2535
  - Bugs: #2287, #2445


author: Sumit Bose <sbose@redhat.com> - 1.12.2-7
changelog:
  - Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes
                             crash in wbinfo
                             - in addition to the patch libwbclient.so is
                               filtered out of the Provides list of the package


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-1
changelog:
  - New upstream release 1.12.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3
  - Fix spelling errors in description (fedpkg lint)


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-2
changelog:
  - Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus
  - Resolves: rhbz#1179379 - gzip: stdin: file size changed while
                             zipping when rotating logfile


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-3
changelog:
  - Apply a number of patches from upstream to fix issues found 1.12.3
  - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple
                             interfaces, or isn't documented to be able to
  - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is
                            not running
  - Resolves: upstream #2557  authentication failure with user from AD


