# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 2.0.8-1
changelog:
  - Bump version to 2.0.8-1
  - Resolves: Bug 1992609 - EntryUUID syntax plugin breaks replication with older versions


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.8-2
changelog:
  - Bump version to 2.0.8-2
  - Resolves: Bug 1998464 - LDAP server crashes when dnaInterval attribute is set to 0


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.8-5
changelog:
  - Bump version to 2.0.8-5
  - Resolves: Bug 2000420 - Not able to preserve users using "ipa user-del --preserve"


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.8-6
changelog:
  - Bump version to 2.0.8-6
  - Resolves: Bug 2000420 - Not able to preserve users using "ipa user-del --preserve"


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.11-1
changelog:
  - Bump version to 2.0.11-1
  - Resolves: Bug 2024693 - Rebase RHEL 9.0 with 389-ds-base
  - Resolves: Bug 2015996 - Log the Auto Member invalid regex rules in the LDAP errors log
  - Resolves: Bug 2020554 - ipa user-add fails with "gecos: value invalid per syntax: Invalid syntax"
  - Resolves: Bug 1779685 - PBKDF2 hashing does not work in FIPS mode


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.13-1
changelog:
  - Bump version to 2.0.13-1
  - Resolves: Bug 2034880 - ipa-restore command is failing when restore after uninstalling the server
  - Resolves: Bug 2045098 - Demoting a supplier to a consumer crashes the server


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.14-1
changelog:
  - Bump version to 2.0.14-1
  - Resolves: Bug 2034880 - ipa-restore command is failing when restore after uninstalling the server (part2)


author: Mark Reynolds <mreynolds@redhat.com> - 2.1.3-1
changelog:
  - Bump version to 2.1.3-1
  - Resolves: Bug 2061801 - rebase 389-ds-base to 2.1.3
  - Resolves: Bug 1872451 - RFE - run as non-root
  - Resolves: Bug 2052527 - RFE - Provide an option to abort an Auto Member rebuild task
  - Resolves: Bug 2057056 - Import may break the replication because changelog starting csn may not be created
  - Resolves: Bug 2057063 - Add support for recursively deleting subentries
  - Resolves: Bug 2062778 - sending crafted message could result in DoS
  - Resolves: Bug 2064781 - expired password was still allowed to access the database
  - Resolves: Bug 2100337 - dsconf backend export userroot fails ldap.DECODING_ERROR


author: Mark Reynolds <mreynolds@redhat.com> - 2.2.4-2
changelog:
  - Bump version to 2.2.4-2
  - Resolves: Bug 1859271 - RFE - Extend log of operations statistics in access log
  - Resolves: Bug 2093981 - RFE - Create Security Audit Log
  - Resolves: Bug 2109891 - Migrate 389 to pcre2
  - Resolves: Bug 2112361 - Supplier should do periodic update to avoid slow replication when a new direct update happen
  - Resolves: Bug 2112998 - performance search rate: checking if an entry is a referral is expensive
  - Resolves: Bug 2114039 - Current pbkdf2 hardcoded parameters are no longer secure
  - Resolves: Bug 2124660 - Retro changelog trimming uses maxage incorrectly
  - Resolves: Bug 2132697 - RFE - run as non-root
  - Resolves: Bug 2142636 - pam mutex lock causing high etimes, affecting red hat internal sso


author: Mark Reynolds <mreynolds@redhat.com> - 2.2.4-3
changelog:
  - Bump version to 2.2.4-3
  - Resolves: rhbz#2142636 - pam mutex lock causing high etimes, affecting red hat internal sso
  - Resolves: rhbz#2093981 - RFE - Create Security Audit Log
  - Resolves: rhbz#2132697 - [RFE] 389ds: run as non-root
  - Resolves: rhbz#2124660 - Retro changelog trimming uses maxage incorrectly
  - Resolves: rhbz#2114039 - Current pbkdf2 hardcoded parameters are no longer secure
  - Resolves: rhbz#2112998 - performance search rate: checking if an entry is a referral is expensive
  - Resolves: rhbz#2112361 - Supplier should do periodic update to avoid slow replication when a new direct update happen
  - Resolves: rhbz#2109891 - Migrate 389 to pcre2


author: Mark Reynolds <mreynolds@redhat.com> - 2.3.4-3
changelog:
  - Bump version to 2.3.4-3
  - Resolves: rhbz#2189954 - RFE Improve reponse time to filters containing 'nsrole'
  - Resolves: rhbz#2189946 - RFE support of slapi_memberof for plugins/core server
  - Resolves: rhbz#1974242 - Paged search impacts performance


author: Mark Reynolds <mreynolds@redhat.com> - 2.3.6-2
changelog:
  - Bump version to 2.3.6-2
  - Resolves: rhbz#2225532 - 389-ds-base FTBFS with rust-1.71.0
  - Resolves: rhbz#2218209 - useradd: invalid user ID '389:389': installing 389-ds-base in container fails to create the dirsrv user
  - Resolves: rhbz#2207691 - python3-lib389: Python tarfile extraction needs change to avoid a warning
  - Resolves: rhbz#2179278 - dirsrv failed to start after reboot because "dirsrv" did not have access on /run/dirsrv


author: Simon Pichugin <spichugi@redhat.com> - 2.3.6-3
changelog:
  - Bump version to 2.3.6-3
  - Resolves: rhbz#2236163 - Regression: replication can't be enabled for consumer or hub role


author: Alan Steinberg <alan.steinberg@oracle.com> - 2.3.6-5.0.1
changelog:
  - Resolves: RHEL-17178 - Crash on open/close connections
  - Resolves: RHEL-16833 - ns-slapd crash in slapi_attr_basetype


author: James Chapman <jachapma@redhat.com> - 2.4.4-1
changelog:
  - Bump version to 2.4.4-1
  - Resolves: RHEL-15907 - Rebase 389-ds-base-2.4 in RHEL 9.4
  - Resolves: RHEL-16830 - ns-slapd crash in slapi_attr_basetype


author: James Chapman <jachapma@redhat.com> - 2.4.5-1
changelog:
  - Bump version to 2.4.5-1
  - Resolves: RHEL-15907 - Rebase 389-ds-base in RHEL 9.4
  - Resolves: RHEL-5142  - RFE Disable Transparent Huge Pages when using large caches
  - Resolves: RHEL-5130  - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix
  - Resolves: RHEL-5133  - RFE Provide a history for 'LastLoginTime'
  - Resolves: RHEL-16984 - RFE inChain Matching Rule


author: James Chapman <jachapma@redhat.com> - 2.4.5-2
changelog:
  - Bump version to 2.4.5-2
  - Resolves: RHEL-15907 - Rebase 389-ds-base in RHEL 9.4
  - Resolves: RHEL-5142  - RFE Disable Transparent Huge Pages when using large caches
  - Resolves: RHEL-5130  - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix
  - Resolves: RHEL-5133  - RFE Provide a history for 'LastLoginTime'
  - Resolves: RHEL-16984 - RFE inChain Matching Rule


author: Simon Pichugin <spichugi@redhat.com> - 2.4.5-4
changelog:
  - Bump version to 2.4.5-4
  - Resolves: RHEL-5130  - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix


author: Viktor Ashirov <vashirov@redhat.com> - 2.4.5-6
changelog:
  - Bump version to 2.4.5-6
  - Resolves: RHEL-30588 - [RFE] allows plugins to log multi-factor authentication notification


author: James Chapman <jachapma@redhat.com> - 2.4.5-7
changelog:
  - Bump version to 2.4.5-7
  - Resolves: RHEL-34819 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c
  - Resolves: RHEL-34825 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ requ


author: James Chapman <jachapma@redhat.com> - 2.4.5-9
changelog:
  - Bump version to 2.4.5-9
  - Resolves: RHEL-44323 - unauthenticated user can trigger a DoS by sending a specific extended search request
  - Resolves: RHEL-40945 - Malformed userPassword hash may cause Denial of Service
  - Resolves: RHEL-49457 - perf search result investigation for many large static groups and members 
  - Resolves: RHEL-49459 - subsuffix are not returned in one level scoped search


author: James Chapman <jachapma@redhat.com> - 2.5.1-1
changelog:
  - Bump version to 2.5.1-1
  - Resolves: RHEL-31777 - Rebase 389-ds-base.2.5.1 in RHEL 9.5
  - Resolves: RHEL-33348 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ requ


author: James Chapman <jachapma@redhat.com> - 2.5.1-2
changelog:
  - Bump version to 2.5.1-2
  - Resolves: RHEL-44324 - unauthenticated user can trigger a DoS by sending a specific extended search request
  - Resolves: RHEL-40946 - Malformed userPassword hash may cause Denial of Service
  - Resolves: RHEL-33087 - dsconf schema does not show inChain matching rule
  - Resolves: RHEL-28177 - Malformed userPassword may cause crash at do_modify in slapd/modify.c
  - Resolves: RHEL-25070 - nsslapd-haproxy-trusted-ip is not in schema


author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-1
changelog:
  - Bump version to 2.5.2-1
  - Resolves: RHEL-5108 - ns-slapd crash in referint_get_config
  - Resolves: RHEL-5113 - nsslapd-numlisteners limit is not enforced
  - Resolves: RHEL-5115 - `dscreate ds-root` accepts relative path
  - Resolves: RHEL-5131 - ldif2db can be very slow
  - Resolves: RHEL-5138 - Logconv.pl CSV file contains mismatched header and data columns
  - Resolves: RHEL-14760 - ns-slapd crash in vlvIndex_delete
  - Resolves: RHEL-17511 - nsslapd-idletimeout is ignored
  - Resolves: RHEL-49454 - perf search result investigation for many large static groups and members
  - Resolves: RHEL-49458 - subsuffix are not returned in one level scoped search


author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-2
changelog:
  - Bump version to 2.5.2-2
  - Resolves: RHEL-55744 - ipahealthcheck.ds.backends.BackendsCheck.DSBLE0006: BDB is deprecated and should not be used as a backend


author: James Chapman <jachapma@redhat.com> - 2.5.2-3
changelog:
  - Bump version to 2.5.2-3
  - Resolves: RHEL-65775 - Wrong set of entries returned for some search filters [rhel-9.5.z]
  - Resolves: RHEL-66138 - deadlock during cleanAllRuv [rhel-9.5.z]
  - Resolves: RHEL-67163 - cleanallruv consums CPU and is slow [rhel-9.5.z]
  - Resolves: RHEL-70257 - Freelist ordering causes high wtime [rhel-9.5.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-5
changelog:
  - Resolves: RHEL-74350 - Some nsslapd-haproxy-trusted-ip values are discarded upon a restart. [rhel-9.5.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-6
changelog:
  - Resolves: RHEL-69825 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-9.5.z]
  - Resolves: RHEL-70126 - Crash in attrlist_find() when the Account Policy plugin is enabled. [rhel-9.5.z]
  - Resolves: RHEL-74152 - backup/restore broken [rhel-9.5.z]
  - Resolves: RHEL-74157 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex [rhel-9.5.z]
  - Resolves: RHEL-74167 - On replica consumer, account policy plugin fails to manage the last login history [rhel-9.5.z]
  - Resolves: RHEL-78343 - During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) [rhel-9.5.z]
  - Resolves: RHEL-79497 - Failed to set sslversionmax to TLS1.3  in FIPS mode with dsconf $INSTANCE security set --tls-protocol-max TLS1.3 [rhel-9.5.z]
  - Resolves: RHEL-81102 - After an initial failure, subsequent online backups will not work. [rhel-9.5.z]
  - Resolves: RHEL-81107 - Online backup hangs sporadically. [rhel-9.5.z]
  - Resolves: RHEL-81113 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-9.5.z]
  - Resolves: RHEL-81139 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9.5.z]
  - Resolves: RHEL-81146 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index [rhel-9.5.z]
  - Resolves: RHEL-81157 - AddressSanitizer: double-free  [rhel-9.5.z]
  - Resolves: RHEL-81171 - leaked_storage: Variable "childelems" going out of scope leaks the storage it points to. [rhel-9.5.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-9
changelog:
  - Resolves: RHEL-83874 - CVE-2025-2487 389-ds-base: null pointer dereference leads to denial of service [rhel-9.5.z]
  - Resolves: RHEL-80712 - Increased memory consumption caused by NDN cache [rhel-9.5.z]
  - Resolves: RHEL-87194 - Some replication status data are reset upon a restart. [rhel-9.5.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-1
changelog:
  - Update to 2.6.1
  - Resolves: RHEL-5151 - [RFE] defer memberof nested updates
  - Resolves: RHEL-54148 - leaked_storage: Variable "childelems" going out of scope leaks the storage it points to.
  - Resolves: RHEL-60135 - deadlock during cleanAllRuv
  - Resolves: RHEL-61341 - After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-61349 - Remove deprecated setting for HR time stamps in logs
  - Resolves: RHEL-62875 - Passwords are not being updated to use the configured storage scheme ( nsslapd-enable-upgrade-hash is enabled ).
  - Resolves: RHEL-64438 - VLV errors with RSNv3 and pruning enabled [rhel-9]
  - Resolves: RHEL-64854 - cleanallruv consums CPU and is slow
  - Resolves: RHEL-65506 - AddressSanitizer: double-free
  - Resolves: RHEL-65512 - AddressSanitizer: heap-use-after-free in import_abort_all
  - Resolves: RHEL-65561 - LeakSanitizer: detected memory leaks in dbmdb_public_db_op
  - Resolves: RHEL-65662 - Replication issue between masters using cert based authentication
  - Resolves: RHEL-65664 - LDAP unprotected search query during certificate based authentication
  - Resolves: RHEL-65665 - Ambiguous warning about SELinux in dscreate for non-root user
  - Resolves: RHEL-65741 - LeakSanitizer: memory leak in ldbm_entryrdn.c
  - Resolves: RHEL-65776 - Wrong set of entries returned for some search filters [rhel-9]
  - Resolves: RHEL-67004 - "dsconf config replace" should handle multivalued attributes.
  - Resolves: RHEL-67005 - Online backup hangs sporadically.
  - Resolves: RHEL-67008 - Some replication status data are reset upon a restart.
  - Resolves: RHEL-67020 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index
  - Resolves: RHEL-67024 - Some nsslapd-haproxy-trusted-ip values are discarded upon a restart.
  - Resolves: RHEL-69806 - ipahealthcheck.ds.replication displays WARNING '1 conflict entries found under the replication suffix'
  - Resolves: RHEL-69826 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-9]
  - Resolves: RHEL-70127 - Crash in attrlist_find() when the Account Policy plugin is enabled. [rhel-9]
  - Resolves: RHEL-70252 - Freelist ordering causes high wtime
  - Resolves: RHEL-71218 - Sub suffix causes "id2entry - Could not open id2entry err 0" error when the Directory Server starts [rhel-9]
  - Resolves: RHEL-74153 - backup/restore broken [rhel-9]
  - Resolves: RHEL-74158 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex [rhel-9]
  - Resolves: RHEL-74163 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set [rhel-9]
  - Resolves: RHEL-74168 - On replica consumer, account policy plugin fails to manage the last login history [rhel-9]
  - Resolves: RHEL-74174 - Replication broken after backup restore with freeipa configuration [rhel-9]
  - Resolves: RHEL-74353 - nsslapd-haproxy-trusted-ip is not in schema [rhel-9]
  - Resolves: RHEL-76019 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-3
changelog:
  - Resolves: RHEL-18333 Can't rename users member of automember rule
  - Resolves: RHEL-61341 After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-63887 nsslapd-mdb-max-dbs autotuning doesn't work properly
  - Resolves: RHEL-63891 dbscan crashes when showing statistics for MDB
  - Resolves: RHEL-63998 dsconf should check for number of available named databases
  - Resolves: RHEL-78344 During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-4
changelog:
  - Resolves: RHEL-78722 - Failed to set sslversionmax to TLS1.3 in FIPS mode with dsconf $INSTANCE security set --tls-protocol-max TLS1.3


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-6
changelog:
  - Resolves: RHEL-86065 - Backport lib389 fixes required for WebUI [rhel-9.6.z]
  - Resolves: RHEL-80713 - Increased memory consumption caused by NDN cache [rhel-9.6.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-8
changelog:
  - Resolves: RHEL-83876 - CVE-2025-2487 389-ds-base: null pointer dereference leads to denial of service [rhel-9.6]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-9
changelog:
  - Reverts: RHEL-80713 - Increased memory consumption caused by NDN cache [rhel-9.6.z]
  - Resolves: RHEL-95443 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9.6.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-10
changelog:
  - Resolves: RHEL-89735 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9.6.z]
  - Resolves: RHEL-89746 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9.6.z]
  - Resolves: RHEL-89752 - Nested group does not receive memberOf attribute [rhel-9.6.z]
  - Resolves: RHEL-89761 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9.6.z]
  - Resolves: RHEL-89768 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9.6.z]
  - Resolves: RHEL-89773 - Improve the "result" field of ipa-healthcheck if replicas are busy [rhel-9.6.z]
  - Resolves: RHEL-89781 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9.6.z]
  - Resolves: RHEL-95767 - Improve  error message when bulk import connection is closed [rhel-9.6.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-11
changelog:
  - Resolves: RHEL-18333 - Can't rename users member of automember rule [rhel-9.6.z]
  - Resolves: RHEL-81140 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9.6.z]
  - Resolves: RHEL-92052 - Memory leak in roles_cache_create_object_from_entry [rhel-9.6.z]
  - Resolves: RHEL-95384 - Getting error messages while migration to LMDB.
  - Resolves: RHEL-106582 - Failure to gather database statistics with LMDB.
  - Resolves: RHEL-106793 - LDAP healthcheck complains about needed parameters when using LMDB.
  - Resolves: RHEL-107004 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9.6.z]
  - Resolves: RHEL-109033 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9.6.z]
  - Resolves: RHEL-109884 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9.6.z]
  - Resolves: RHEL-109888 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9.6.z]
  - Resolves: RHEL-109891 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9.6.z]
  - Resolves: RHEL-109896 - AddressSanitizer: leak in do_search [rhel-9.6.z]
  - Resolves: RHEL-109904 - ns-slapd crashed when we add nsslapd-referral [rhel-9.6.z]
  - Resolves: RHEL-109945 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9.6.z]
  - Resolves: RHEL-109954 - CWE-532 Created user password hash available to see in audit log [rhel-9.6.z]
  - Resolves: RHEL-109957 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9.6.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-12
changelog:
  - Resolves: RHEL-104590 - RHDS12: Web console doesn't show Server Version [rhel-9.6.z]
  - Resolves: RHEL-104592 - The numSubordinates value is not matching the number of direct children. [rhel-9.6.z]
  - Resolves: RHEL-111227 - Error showing local password policy on web UI [rhel-9.6.z]
  - Resolves: RHEL-112678 - Statistics about index lookup report a wrong duration [rhel-9.6.z]
  - Resolves: RHEL-112692 - Crash if repl keep alive entry can not be created [rhel-9.6.z]
  - Resolves: RHEL-112725 - Exception thrown by dsconf instance repl get_ruv [rhel-9.6.z]
  - Resolves: RHEL-113979 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9.6.z]
  - Resolves: RHEL-114952 - lib389/replica.py is using unexisting datetime.UTC in python3.9 [rhel-9.6.z]
  - Resolves: RHEL-117048 - Replication online reinitialization of a large database gets stalled. [rhel-9.6.z]
  - Resolves: RHEL-117769 - When the server restarts after a crash, the RFE assumes memberof should be recomputed. It triggers a memberof fixup task, dirsrv became unresponsive. [rhel-9.6.z]
  - Resolves: RHEL-117778 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9.6.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-3
changelog:
  - Resolves: RHEL-77983 - Defects found by OpenScanHub
  - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy
  - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9]
  - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9]
  - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9]
  - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9]
  - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9]
  - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9]
  - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9]
  - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9]
  - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-4
changelog:
  - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-5
changelog:
  - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
  - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
  - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
  - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
  - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
  - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
  - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
  - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
  - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
  - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-7
changelog:
  - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
  - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
  - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9]
  - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
  - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
  - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
  - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-8
changelog:
  - Resolves: RHEL-111228 - Error showing local password policy on web UI [rhel-9.7.z]
  - Resolves: RHEL-117049 - Replication online reinitialization of a large database gets stalled. [rhel-9.7.z]
  - Resolves: RHEL-117770 - When the server restarts after a crash, the RFE assumes memberof should be recomputed. It triggers a memberof fixup task, dirsrv became unresponsive. [rhel-9.7.z]
  - Resolves: RHEL-123230 - Improve the way to detect asynchronous operations in the access logs [rhel-9.7.z]
  - Resolves: RHEL-123243 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9.7.z]
  - Resolves: RHEL-123257 - Typo in errors log after a Memberof fixup task. [rhel-9.7.z]
  - Resolves: RHEL-123278 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9.7.z]
  - Resolves: RHEL-123367 - IPA health check up script shows time skew is over 24 hours [rhel-9.7.z]
  - Resolves: RHEL-123765 - 389-ds-base OpenScanHub Leaks Detected [rhel-9.7.z]
  - Resolves: RHEL-123852 - Units for changing MDB max size are not consistent across different tools [rhel-9.7.z]
  - Resolves: RHEL-123892 - Improve output dsctl dbverify when backend does not exist [rhel-9.7.z]
  - Resolves: RHEL-123896 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9.7.z]
  - Resolves: RHEL-123922 - Changelog trimming - add number of scanned entries to the log [rhel-9.7.z]
  - Resolves: RHEL-126551 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9.7.z]
  - Resolves: RHEL-129558 - Online initialization of consumers fails with error -23 [rhel-9.7.z]
  - Resolves: RHEL-129579 - Fix paged result search locking [rhel-9.7.z]
  - Resolves: RHEL-138480 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9.7.z]
  - Resolves: RHEL-140088 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9.7.z]
  - Resolves: RHEL-140274 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9.7.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-9
changelog:
  - Resolves: RHEL-116425 - RetroCL plugin generates invalid LDIF [rhel-9.7.z]
  - Resolves: RHEL-123243 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9.7.z]
  - Resolves: RHEL-123765 - 389-ds-base OpenScanHub Leaks Detected [rhel-9.7.z]
  - Resolves: RHEL-123896 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9.7.z]
  - Resolves: RHEL-129558 - Online initialization of consumers fails with error -23 [rhel-9.7.z]
  - Resolves: RHEL-140088 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9.7.z]
  - Resolves: RHEL-142979 - Scalability issue of replication online initialization with large database [rhel-9.7.z]
  - Resolves: RHEL-146898 - memory corruption in alias entry plugin [rhel-9.7.z]
  - Resolves: RHEL-147211 - Access logs are not getting deleted as configured. [rhel-9.7.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-10
changelog:
  - Resolves: RHEL-123243 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9.7.z]
  - Resolves: RHEL-123765 - 389-ds-base OpenScanHub Leaks Detected [rhel-9.7.z]
  - Resolves: RHEL-137083 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.7.z]
  - Resolves: RHEL-140088 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9.7.z]
  - Resolves: RHEL-150906 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9.7.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-12
changelog:
  - Resolves: RHEL-153553 - 389-ds-base-2.7.0-10.el9_7 updates dse.ldif with lowercase DNs causing ipa-healthcheck errors


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-1
changelog:
  - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
  - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
  - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
  - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
  - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
  - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
  - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
  - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
  - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
  - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
  - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
  - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
  - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
  - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
  - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
  - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
  - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
  - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
  - Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-2
changelog:
  - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-3
changelog:
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
  - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
  - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
  - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-4
changelog:
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
  - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
  - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
  - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
  - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-5
changelog:
  - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8]
  - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
  - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-7
changelog:
  - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z]
  - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z]
  - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z]
  - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z]
  - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8]
  - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z]
  - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-8
changelog:
  - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z]
  - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z]


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-0.6
changelog:
  - Upgrade to 1.35.6 release (development)
  - Move ifup/ifdown scripts to new NetworkManager-initscripts-updown package (rh #2022418)
  - wwan: fix assertion failure in modem/ppp code (rh #2028385)
  - core: fix performance regression with 500vlans test (rh #2028849)
  - core: drop defective BPF filter for netlink sockets that caused hangs (rh #2037411)
  - initrd: add support for rd.znet_ifnames (rh #1980387)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-0.7
changelog:
  - Upgrade to 1.35.7 release (development)
  - core: fix crash related to DHCPv6 leases (rh #2028849)
  - wifi: fix stale ActiveAccessPoint in D-Bus (rh #1983735)
  - libnm: fix dangling pointer in NMObject (rh #2039331)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.8
changelog:
  - Upgrade to 1.35.90 release (release candidate)
  - ovs: remove ovsdb entry on interface removal (rh #2047302)
  - ovs: properly clean up devices on daemon shutdown (rh #2029937)
  - core: avoid losing addresses on handover from initrd to ral root (rh #2047302)
  - core: fix a possibe assertion failure in ACD (rh #2047788)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.9
changelog:
  - Upgrade to 1.35.91 release (release candidate)
  - bond: fix duplicate IPv4 address detection (rh #2028751)
  - core: add support for blackhole routes (rh #1937823) (rh #2013587)
  - core: re-assess IP configuration if one IP family times out (rh #2051904)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.10
changelog:
  - Upgrade to 1.35.92 (release candidate)
  - ppp: increase disconnect timeout (rh #2049596)
  - core: finish activation after all objects are committed (rh #2043133)
  - ipv6: add support for multipath routes (rh #1837254)
  - keyfile: do not write empty string list properties (rh #2022623)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-1
changelog:
  - Upgrade to 1.36.0 release
  - core: avoid losing L3 configuration the second time it's applied (rh #2043514)
  - ovs: avoid removing OVSDB entries on daemon shutdown (rh #2055665)
  - nmcli: fix defaults for some properties on interactive add (rh #2053603)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-3
changelog:
  - core: preserve external bridge ports during checkpoint rollback (rh #2061711)
  - ovs-port: fix removal of ovsdb entry if the interface goes away (rh #2061709)


author: EL Errata <el-errata_ww@oracle.com> - 1.36.0-4.0.1
changelog:
  - add connectivity check via Oracle servers [Orabug: 32051972]
  - Disable the build of NetworkManager-config-connectivity-* subpackage for 9.0


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.36.0-5
changelog:
  - Fix DHCP loses lease when restarting (rh #2094715)
  - core: set "src" attribute for routes from DHCPv4 (rh #2094778)
  - platform: workaround for preserving IPv6 address order (rh #2094715)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.39.7-1
changelog:
  - Update to 1.39.7 release (development)
  - core: cancel the IP check on deactivation (rh #2080928)
  - core: ensure DHCP is restarted every time the link goes up (rh #2079406)
  - core: fix a leak of L3 configuration memory (rh #2083453)
  - ppp: fix a race with pppd when removing addresses (rh #2085382)
  - wifi: fix a crash when checking WEP supplicant capability (rh #2092782)


author: Thomas Haller <thaller@redhat.com> - 1:1.39.7-2
changelog:
  - fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097293)
  - reverse order of priority for static IPv6 addresses in "ipv6.addresses" (rh #2097293)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.39.8-1
changelog:
  - Update to 1.39.8 release (development)
  - core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
  - dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
  - core: add connection.wait-activation-delay property (rh #2008337)


author: Vojtech Bubela <vbubela@redhat.com> - 1:1.39.10-1
changelog:
  - Update to 1.39.10 release (development)
  - add support for {rto_min,quickack,advmss} route attributes (rh #2068525)
  - fix empty hostname for "SaveHostname" and make setting hostname async (rh #2090946)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.39.11-1
changelog:
  - Update to 1.39.11 release (development)
  - core: support nm.debug kernel command line option (rh #2102313)
  - ovs: don't ever move unactivated devices to failed state (rh #2077950)
  - dhclient: fix EXTENDED DHCP event handling (rh #2109285)
  - core: make "nmcli net off/on" more robust (rh #2093175)
  - bridge: add reapply support (rh #2092762)
  - bridge: don't reset vlan filtering on external connections (rh #2107647)


author: Ana Cabral <acabral@redhat.com> - 1:1.39.90-1
changelog:
  - Update to 1.39.90 release (release candidate)
  - Add support for MPTCP (rh #2029636)
  - nmcli: fix assertion failure (rh #2092323)
  - bond: fix arp_ip_target option (rh #2117202)
  - nmci: fix test restart_L2_only_lacp (rh #2092361)


author: EL Errata <el-errata_ww@oracle.com> - 1.40.0-2.0.1
changelog:
  - disable MPTCP handling by default [Orabug: 34801142]
  - add connectivity check via Oracle servers [Orabug: 32051972]
  - Disable the build of NetworkManager-config-connectivity-* subpackage for 9.0


author: Thomas Haller <thaller@redhat.com> - 1:1.41.6-1
changelog:
  - Update to 1.41.6 release (development)
  - add support for loopback interfaces (rh #2073512)
  - ovs: support VLAN trunks for OVS port (rh #2111959)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.41.7-1
changelog:
  - Update to 1.41.7 release (development)
  - macsec: fix tracking of parent ifindex (rh #2122564)
  - cloud-setup: set preserve-external-ip flag during reapply (rh #2132754)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.41.8-1
changelog:
  - Update to 1.41.8 release (development)
  - core: add support for equal-cost multi-path (ECMP) routes (rh #2081302)
  - device: preserve the DHCP lease during reapply (rh #2117352)
  - ovs: add support for 'other_config' settings (rh #2151455)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.41.90-1
changelog:
  - Update to 1.41.90 release (release candidate)
  - l3cfg: schedule an update after every commit-type/config-data register/unregister (rh #2158394)
  - all: add support for ovs-dpdk n-rxq-desc and n-txq-desc (rh #2156385)
  - core: fix consistency for internal cache for IPv6 routes (rh #2060684)


author: Lubomir Rintel <lkundrak@v3.sk> - - 1:1.41.91-1
changelog:
  - Update to 1.41.91 release (release candidate)
  - core: retry if a rtnetlink socket runs out of buffer space (rh #2154350)
  - dns: allow changing resolv.conf options alone via global-dns (rh #2019306)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.42.2-1
changelog:
  - Update to 1.42.2 release
  - fix hostname lookup from IPv6 address (rh #2167816)
  - add new connection property to remove the autogenerated local route rule (rh #2167805)
  - fix race condition while setting the MAC of a OVS interface (rh #2168477)
  - expose the DHCP IAID in the lease information (rh #2169869)


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 1:1.42.2-6.0.1
changelog:
  - VLAN of bond will not get autoconnect when bond port link revived (BZ#2217903)
  - Reapply on disabled ipv6 will cause auto ipv4 lose DNS nameserver (BZ#2219847)
  - [NMCI] bond_set_balance_slb_options test failure (BZ#2220952)


author: Thomas Haller <thaller@redhat.com> - 1:1.43.7-1
changelog:
  - Update to 1.43.7 release (development)
  - bond: support port priorities (rh #2152304)
  - ovs: fix autoconnect race (rh #2152864)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.43.8-1
changelog:
  - Update to 1.43.8 release (development)
  - ipv6ll: don't regenerate the address when it's removed externally (rh #2196441)


author: Thomas Haller <thaller@redhat.com> - 1:1.43.9-1
changelog:
  - Update to 1.43.9 release (development)
  - improve autoconnect logic for port/controller configurations (rh #2121451)
  - fix handling external devices during network off/on (rh #2149012)


author: Thomas Haller <thaller@redhat.com> - 1:1.43.10-1
changelog:
  - Update to 1.43.10 release (development)
  - fix reading infiniband p-key from ifcfg files (rh #2209974)
  - improve autoconnect when selecting controller (rh #2121451)
  - fix managing devices after network reconnect (rh #2149012)
  - better handle ignore-carrier for bond/bridge/team (rh #2180363)
  - cloud-setup: block wait-online while configuration is ongoing (rh #2151040)
  - cloud-setup: avoid leaving half configured system (rh #2207812)
  - cloud-setup: log warning when no provider detected (rh #2214880)
  - cloud-setup: fix RPM description (rh #2214491)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.43.11-1
changelog:
  - update to 1.43.11 release (development)
  - fix assertion about missing ifindex when resetting MAC (rh #2215022)
  - fix wrong order of entries in resolv.conf after reconnect (rh #2218448)
  - do not fail activation when SR-IOV VF parameters can't be applied (rh #2210164)
  - warn that the ifcfg-rh plugin is deprecated (rh #2190375)


author: Wen Liang <wenliang@redhat.com> - 1:1.43.90-1
changelog:
  - update to 1.43.90 release (release candidate)
  - manager: allow controller activation if device is deactivating (rh #2125615)
  - assume: change IPv6 method from "ignore" and "disabled" into "auto" for loopback device (rh #2207878)
  - device: delete software device when lose carrier and is controller (rh #2224479)
  - core: better handle ignore-carrier=no for bond/bridge/team devices (rh #2180363)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.44.0-1
changelog:
  - update to 1.44.0 release
  - nmcli: add nmcli version mismatch warning (rh #2173196)
  - checkpoint: preserve devices that were removed and readded (rh #2177590)


author: Craig Guiller <craig.guiller@oracle.com> - 1:1.44.0-3.0.1
changelog:
  - disable MPTCP handling by default [Orabug: 34801142]
  - add connectivity check via Oracle servers [Orabug: 32051972]


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.46.0-16
changelog:
  - Revert OVS checkpoint rollback patches.
  - Fix OVS stage3 activation without DHCP client initialized (RHEL-49799)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.46.0-18
changelog:
  - Fix crash dereferencing NULL pointer during debug logging (RHEL-46200)
  - Use /etc/hosts for hostname reesolution (RHEL-53202)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.46.0-19
changelog:
  - Retry hostname resolutions when it fails (RHEL-55397)
  - cloud-setup: allow bigger restart bursts (RHEL-56739)
  - cloud-setup: Fix Azure primary and secondary address swap (RHEL-56386)


author: Beniamino Galvani <bgalvani@redhat.com> - 1.45.8-1
changelog:
  - Update to 1.45.8 (development)
  - Introduce "stable-ssid" option for wifi.cloned-mac-address property (RHEL-16470)


author: Ján Václav <jvaclav@redhat.com> - 1.45.9-1
changelog:
  - Update to 1.45.9 (development)
  - Add support for PRP/HSR interface (RHEL-5852)
  - Drop support for the 'slaves-order' option in NetworkManager.conf (RHEL-19437)
  - Return error when setting invalid IP addresses or properties via D-Bus (RHEL-19315)
  - Fix extra route being created besides ECMP route (RHEL-1682)


author: Stanislas FAYE <sfaye@redhat.com> - 1.45.10-1
changelog:
  - Update to 1.45.10 (development)
  - Deprecate and Replace connection.master in libnm-core and libnm (RHEL-17619)


author: Stanislas FAYE <sfaye@redhat.com> - 1.45.90-1
changelog:
  - Update to 1.45.90 release (release candidate)
  - Deprecate and Replace connection.slave-type in libnm-core and libnm (RHEL-17620)
  - [RFE] Support assigning IPv4 static route to interface without IPv4 address (RHEL-5098)


author: Íñigo Huguet <ihuguet@redhat.com> - 1.45.91-1
changelog:
  - Update to 1.45.91 release (release candidate)
  - Support changing the DSCP header field for DHCP packets, and set the default to CS0 (RHEL-16040)
  - Deprecate connection.autoconnect-slaves in favour of autoconnect-ports (RHEL-17621)
  - Don't reset bridge's PVID in reapply if it didn't change (RHEL-21576)


author: Stanislas FAYE <sfaye@redhat.com> - 1.46.0-1
changelog:
  - Update to 1.46.0 release
  - Fix DHCPv4 lease can't be renewed after it expires (RHEL-24127)
  - Support the MACsec offload mode (RHEL-24337)
  - Support creating generic devices via external "device-handler" dispatcher (RHEL-1567)
  - Support changing the eswitch mode (RHEL-1441)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1.46.0-2
changelog:
  - Drop PrivateUser directive from nm-cloud-setup service (RHEL-27503)
  - Support rollback on global DNS (RHEL-29725)
  - Do not allow OVS bridge or port to be parent (RHEL-28545)


author: Beniamino Galvani <bgalvani@redhat.com> 1:1.48.2-1
changelog:
  - Update to 1.48.2 release
  - Save connection timestamps when shutting down (RHEL-35539)
  - Fix regression with OpenVPN dynamic challenge (RHEL-43720)


author: Stanislas Faye <sfaye@redhat.com> 1:1.48.4-1
changelog:
  - Update to 1.48.4 release
  - Support matching a OVS system interface by MAC address (RHEL-34617)
  - When looking up the system hostname from the reverse DNS lookup of
    addresses configured on interfaces, NetworkManager now takes into
    account the content of /etc/hosts (RHEL-33435)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.48.6-1
changelog:
  - Wait until link is ready before activating for ovs-interface (RHEL-49796)
  - Fix rollback on OVS checkpoint (RHEL-31972)
  - Assert that the auto-activate list is empty on dispose (RHEL-44345)


author: Fernando Fernandez Mancera <ferferna@redha.com> - 1:1.46.8-1
changelog:
  - Stop writing offensive terms into keyfiles (RHEL-52597)
  - Remove offensive words (RHEL-33368)
  - Fix cloned-mac-address race condition with DHCP on ovs-interfaces (RHEL-49796)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.48.10-1
changelog:
  - Unblock the autoconnect for children when parent is available (RHEL-46904)
  - Fix crash produced by malformed LLDP package when debug logging (RHEL-46199)
  - Support reapplying bridge-port VLANs (RHEL-26750)
  - Add small backoff time before resync (RHEL-29902)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.48.10-2
changelog:
  - cloud-setup: Allow bigger restart bursts (RHEL-56740)
  - cloud-setup: Fix Azure swap of primary and secondary IP addresses (RHEL-56387)


author: Alex Burmashev <alexander.burmashev@oracle.com> - - 1.48.10-3.0.1
changelog:
  - libnm-core: fix validation of ovs-dpdk interface name
  - device: fix bug when deactivating port connections asynchronously
  - sriov: only valid sriov capacity when enabled


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.48.10-3
changelog:
  - Only validate the SR-IOV device capability when SR-IOV is enabled (RHEL-58397)
  - Fix bug when deactivating port connections (RHEL-50747)
  - Fix validation of ovs-dpdk interface name (RHEL-60022)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.48.10-4
changelog:
  - Remove routes added by NetworkManager when doing reapply, also those not in main table (RHEL-73013)


author: Wen Liang <wenliang@redhat.com> - 1:1.48.10-5
changelog:
  - vpn: Support routing rules in vpn conenctions (RHEL-73167)
  - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73166)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.48.10-8
changelog:
  - policy: always reset retries when unblocking children or ports (RHEL-78748)
  - core: prevent the activation of unavailable OVS interfaces only (RHEL-79995)


author: Craig Guiller <craig.guiller@oracle.com> - 1:1.48.10-8.0.1
changelog:
  - Drop 777 permissions from the NetworkManager-dispatcher drop-in directory [Orabug: 37581907]
  - Add a dropin file to make Networkmanager-dispatcher persistent [Orabug: 36989910]
  - disable MPTCP handling by default [Orabug: 34801142]
  - add connectivity check via Oracle servers [Orabug: 32051972]


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Add support for creating VLANs for secondary VNICs in nm-cloud-setup (RHEL-36423)
  - Always reset retries when unblocking children or ports (RHEL-78122)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79997)


author: Darren Archibald <darren.archibald@oracle.com> - 1:1.52.0-1.0.1
changelog:
  - disable MPTCP handling by default [Orabug: 34801142]
  - add connectivity check via Oracle servers [Orabug: 32051972]
  - Add a dropin file to make Networkmanager-dispatcher persistent [Orabug: 36989910]
  - Drop 777 permissions from the NetworkManager-dispatcher drop-in directory [Orabug: 37581907]


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.52.0-3
changelog:
  - Invalid memory access on Dnsconfd DBUS error (RHEL-84692)
  - Support IP configuration for secondary interfaces on Oracle VM from metadata (RHEL-84695)


author: Wen Liang <wenliang@redhat.com> - 1:1.52.0-4
changelog:
  - ovs: allow reapplying ovs-bridge and ovs-port properties (RHEL-87595)
  - core: ovs: fix NULL pointer dereference in ovsdb read timeout callback (RHEL-87347)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.52.0-6
changelog:
  - ovs: only keep bridges and ports with NM interfaces attached (RHEL-87167)
  - device: update the external-down unmanaged flag on port attach/release (RHEL-93183)
  - ovs: set the tun interface up before stage3 (RHEL-98550)
  - bridge: fix reapplying port VLANs (RHEL-102742)
  - device: don't disable IPv6 in stage3 on reapply (RHEL-102771)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.53.1-1
changelog:
  - Update to 1.53.1 (dev)
  - Update MPTCP endpoints creation order (RHEL-78752)
  - Print all warnings from nmcli to stderr (RHEL-74255)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-85765)
  - Fix order of parsing port/controller properties in nmcli (RHEL-85767)
  - Improve interface activation logic (RHEL-85766)
  - Fix WireGuard IPv6 firewall rules (RHEL-85763)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83061)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-85770)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

  Resolves: RHEL-83061
  Resolves: RHEL-59083
  Resolves: RHEL-87596
  Resolves: RHEL-85770
  Resolves: RHEL-85764
  Resolves: RHEL-85778
  Resolves: RHEL-87168


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-93108)
  - Crash on _l3cfg_notify_cb (RHEL-92314)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
  - Fix a race condition in ovs tun interface (RHEL-98551)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102772)
  - Allow setting IP method to disabled in port connection (RHEL-102768)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102743)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83061)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-85770)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)


author: Vladimír Beneš <vbenes@redhat.com>- 1:1.54.1-1
changelog:
  - Update to 1.54.1
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-115973)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.54.2-1
changelog:
  - Update to 1.54.2
  - Support setting protocol version of HSR/PRP (RHEL-122172)
  - Support interlink for HSR/PRP (RHEL-122175)
  - Improve logging of networking off (RHEL-122173 )
  - Don't delete unrelated OVS ports (RHEL-121104)


author: Alan Steinberg <alan.steinberg@oracle.com> - 1.2.14-3.0.1
changelog:
  - Support point-to-point IPSec tunnel (RHEL-20690)
  - Fix crash in libreswan_nmstate_iface_dpd_rsa (RHEL-21221)
  - Support configuring IPSec mode with 'type' (RHEL-21554)


author: Vladimír Beneš <vbenes@redhat.com 1.2.27-1
changelog:
  - Update to 1.2.27 version
  - Support leftsendcert in X.509-Based VPN (RHEL-110771)
  - Add support for nm-auto-defaults + symetric import/export
  - Support rightca in ipsec section
  - Esp param properly exported


author: Vladimír Beneš <vbenes@redhat.com 1.2.27-1
changelog:
  - Update to 1.2.27 version
  - Add support for nm-auto-defaults + symetric import/export (RHEL-118843)
  - Support leftsendcert in X.509-Based VPN (RHEL-110772)
  - Support rightca in ipsec section
  - Esp param properly exported


author: Gris Ge <fge@redhat.com> - 1.2.29-1
changelog:
  - Upgrade to 1.2.29
  - Fix error on duplicate key 'phase2alg'. (RHEL-131232)
  - Fix import connection with RSA key. (RHEL-127865)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-1
changelog:
  - Update to later upstream release to address regressions (RHEL-56551)
  - Support rightca in ipsec section (RHEL-118819)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-2
changelog:
  - Symetric import/export with nm-auto-default (RHEL-122306)
  - Esp param properly exported (RHEL-122626)
  - Correct leftid export when it contains @


author: Gris Ge <fge@redhat.com> - 1.2.29-1
changelog:
  - Upgrade to 1.2.29
  - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-85789)
  - Support leftprotoport and rightprotoport options. (RHEL-130907)
  - Fix error on duplicate key 'phase2alg'. (RHEL-131233)
  - Fix import connection with RSA key. (RHEL-127863)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-2
changelog:
  - Resolve issues found by rpmdiff
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-3
changelog:
  - Add a patch to resolve one more issue found by rpmdiff/rpminspect:
    fix getaddrinfo detection to avoid using gethostbyname.


author: Alan Steinberg <alan.steinberg@oracle.com> - 2.0.32-3.0.1
changelog:
  - IPMI SMB kernel module name is ipmi_ssif in all modern kernels.
    openipmi-helper script fixed. [Orabug: 27093288] (alexey.petrenko@oracle.com)


author: Mridula Shastry <mridula.c.shastry@oracle.com> - 2.0.36-1.0.2
changelog:
  - Correct the patch that fixes openipmi-helper with the right module name
    for modern kernels [Orabug: 37862189]


author: Richard Hughes <rhughes@redhat.com> - 1.2.3-1
changelog:
  - New upstream release
  - Add support for coercing upgrade to distupgrade
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon disappears
  - Remove large transaction size sanity check


author: Milan Crha <mcrha@redhat.com> - 1.2.4-1
changelog:
  - New upstream release
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Honor install_weak_deps=False
  - Improve thread safety on an operation cancellation
  - Let the finish understand the 'cancelled' exit code
  - Only set polkit interactive flag if method call has too
  - Read update information also when getting list of updates
  - Use 'hy_query_get_advisory_pkgs', if available


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-10
changelog:
  - wla-Disable-automatic-log-collector.patch [RHEL-7273]
  - Resolves: RHEL-7273
    ([Azure][WALA] Consider to disable Log collector)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-11
changelog:
  - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-5880]
  - Resolves: RHEL-5880
    ([Azure][RHEL-9]68-azure-sriov-nm-unmanaged.rules cannot stop NetworkManager-wait-online.service checking SRIOV interface)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-12
changelog:
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-40957]
  - Resolves: RHEL-40957
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-2
changelog:
  - wla-docs-add-waagent-manpage-3401.patch [RHEL-109496]
  - Resolves: RHEL-109496
    ([Azure][WALA][RHEL-9] Missing man page)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-3
changelog:
  - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-97572]
  - Resolves: RHEL-97572
    ([Azure][RHEL-9][WALA][Image mode] Cannot find 'service' command)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-3.el9_7.1
changelog:
  - wla-Support-for-FIPS-140-3-3324.patch [RHEL-124949]
  - Resolves: RHEL-124949
    (Update walagent to 2.14 to support FIPS 140-3 on Azure [rhel-9.7.z])


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-3.el9_7.2
changelog:
  - wla-Jira-https-issues.redhat.com-browse-RHEL-134939.patch [RHEL-134939]
  - Resolves: RHEL-134939
    (Backport ConditionVirtualization=|microsoft for waagent in RHEL 9.x [rhel-9.7.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.14.0.1-2
changelog:
  - wla-Remove-10-azure-unmanaged-sriov.rules.patch [RHEL-124218]
  - Resolves: RHEL-124218
    ([Azure][WALA][RHEL-9] Remove 10-azure-unmanaged-sriov.rules)


author: Jon Maloy <jmaloy@redhat.com> - 2.14.0.1-3
changelog:
  - wla-Jira-https-issues.redhat.com-browse-RHEL-133507.patch [RHEL-133507]
  - Resolves: RHEL-133507
    (Backport ConditionVirtualization=|microsoft for waagent in RHEL 9.x)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.14.0.1-4
changelog:
  - wla-Change-redhat-waagent-network-setup.service-path-to-.patch [RHEL-82232]
  - Resolves: RHEL-82232
    ([Azure][image mode][WALA][RHEL-9] Unable to setup the persistent firewall rules)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-1
changelog:
  - Rebase to 2.3.0.2 [bz#1972101]
  - Resolves: bz#1972101
    ([Azure][RHEL-9]Rebase WALinuxAgent to 2.3.0.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-2
changelog:
  - wala-Require-iptables-package.patch [bz#1978572]
  - Resolves: bz#1978572
    ([Azure][WALA][RHEL-9] WALA needs iptables package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-1.el9_0
changelog:
  - Rebase to 2.7.0.6-1 [bz#2110415]
  - Resolves: bz#2110415
    ([Azure][WALA][RHEL-9] [9.0.z]The latest RHEL 9 repositories contain a buggy old version of WALinuxAgent : 2.3.0.2, latest version is v2.7.0.6 [rhel-9.0.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-7
changelog:
  - wla-redhat-Azure-CVM-specific-udev-rules.patch [bz#2162668]
  - Resolves: bz#2162668
    (Add support for importing remotely sealed TPM2 objects)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-8
changelog:
  - wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [bz#2165042]
  - Resolves: bz#2165042
    ([9.0.z] /dev/disk/azure/ is created as symlink to sr0 or sda and not as a directory[Azure])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-9
changelog:
  - wla-redhat-Adjust-tpm2_createprimary-key-attributes-to-m.patch [bz#2167322]
  - Resolves: bz#2167322
    (Adjust TPM primary key creation parameters to match Azure)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-11.el9_6.1
changelog:
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-88808]
  - Resolves: RHEL-88808
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs [rhel-9.6.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-1
changelog:
  - Rebase to 2.7.0.6-1 [bz#2083464]
  - Adding restart_if implementation for RHEL [bz#2081944]
  - Resolves: bz#2083464
    ([Azure][RHEL-9]Rebase WALinuxAgent to v2.7.0.6)
  - Resolves: bz#2081944
    ([Azure][WALA][9.0] WALA provisions VM failed because of no "ifdown")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-2
changelog:
  - wla-redhat-Fix-command-sequence-for-restarting-net-inter.patch [bz#2098233]
  - Resolves: bz#2098233
    ([Azure][WALA][RHEL-9] [9.1] walinuxagent kills network during boot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-3
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [bz#2114830]
  - wla-Update-Log-Collector-default-in-Comments-and-Readme-.patch [bz#2093965]
  - Resolves: bz#2114830
    ([Azure][WALA][RHEL-9.1] Provisioning failed if no ifcfg-eth0)
  - Resolves: bz#2093965
    ([Azure][WALA][RHEL-9] The description of "Logs.Collect" is incorrect)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-4
changelog:
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-5
changelog:
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-6
changelog:
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-6.el9_1.1
changelog:
  - wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [bz#2168913]
  - Resolves: bz#2168913
    (/dev/disk/azure/ is created as symlink to sr0 or sda and not as a directory[Azure] [rhel-9.1.0.z])


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-27
changelog:
  - do not specify infra_image in containers.conf
  - needed to resolve gating test failures
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 2:1-32
changelog:
  - build rust packages with RUSTFLAGS set to make ExecShield happy (Lokesh Mandvekar)
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 2:1-33
changelog:
  - Removal of invalid vendored project with unwanted license in aardvark-dns/netavark
  - Resolves: #2065706


author: Jindrich Novy <jnovy@redhat.com> - 2:1-34
changelog:
  - update vendored tarballs to avoid unwanted licenses
    (thanks to Brent Baude)
  - Resolves: #2065706


author: EL Errata <el-errata_ww@oracle.com> - 1-34.0.1
changelog:
  - Updated removed references [Orabug: 33473101] (Alex Burmashev)
  - Adjust registries.conf (Nikita Gerasimov)
  - remove references to RedHat registry (Nikita Gerasimov)


author: Jindrich Novy <jnovy@redhat.com> - 2:1.1.0-5
changelog:
  - fix "Two aardvark-dns instances trying to use the same port
    on the same interface"
  - Resolves: #2136306


author: Jindrich Novy <jnovy@redhat.com> - 2:1.8.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.8.0
  - Related: Jira:RHEL-2112


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.9.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0
  - Related: Jira:RHEL-2112


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Sohan Kunkerkar <skunkerk@redhat.com> - 4.6.0-2
changelog:
  - Rebuild because of Fedora infra issues last week to see if a new build fixes some 
    problems we are seeing.


author: Zoltan Fridrich <zfridric@redhat.com> - 0.16-19
changelog:
  - use gating and config file from rhel-8.5
  - remove check of periodically changing files
    Resolves: rhbz#1957656
  - config cleanup
    Resolves: rhbz#1957654


author: Zoltan Fridrich <zfridric@redhat.com> - 0.16-20
changelog:
  - fix configuration option with-dbhmactype
  - do not use sha1 and md5 by default
    Resolves: rhbz#1935457
  - fix important static analysis issues
    Resolves: rhbz#1938676


author: Radovan Sroka <rsroka@redhat.com> - 0.16-102
changelog:
  RHEL 9.5.0 ERRATUM
  - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly
  Resolves: RHEL-27606
  - AIDE fails when using root_prefix option
  Resolves: RHEL-28882


author: Radovan Sroka <rsroka@redhat.com> - 0.16-103
changelog:
  RHEL 9.6.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4331


author: Attila Lakatos <alakatos@redhat.com> - 0.16-103.2
changelog:
  RHEL 9.6.Z ERRATUM
  - CVE-2025-54389 aide: improper output neutralization enables bypassing
  Resolves: RHEL-109910


author: Attila Lakatos <alakatos@redhat.com> - 0.16-105
changelog:
  RHEL 9.7 ERRATUM
  - CVE-2025-54389 aide: improper output neutralization enables bypassing
  Resolves: RHEL-109912


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-1
changelog:
  RHEL 9.8.0 ERRATUM
  - rebase to 0.19.2
  Resolves: RHEL-110573
  - Switch to libnettle for hashing
  - prevent aide from crashing if database is a HTTPS URL
  Resolves: RHEL-76014
  - prevent aide from exiting if a file is truncated during check
  Resolves: RHEL-1569


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-4
changelog:
  - /boot/grub2/grubenv is excluded from check due to boot_success implementation
  Resolves: RHEL-83776


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-5.1
changelog:
  - Re-add syslog_format config option dropped during rebase to 0.19.2
  Resolves: RHEL-178539
  - Add aide-migrate-config to automate config migration from pre-0.19 syntax


author: Jaroslav Kysela <perex@perex.cz> - 2.2.5-2
changelog:
  - add sof-rpl-rt711-l0-rt1316-l12-rt714-l3.tplg for Dell SKU 0BDA
  - add xz compression support (with CRC32)


author: Martin Kolman <mkolman@redhat.com> - 34.25.0.22-1
changelog:
  - Add base repo name for CentOS Stream after repository renaming (jkonecny)
    Resolves: rhbz#1955331
  - The OPAL compatibility with XFS features is mandatory (vponcova)
    Resolves: rhbz#2008792


author: Vladimir Slavik <vslavik@redhat.com> - 34.25.0.24-1
changelog:
  - Create the LVM devices file (vslavik)
    Resolves: rhbz#2011329
  - Update outdated system purpose related strings (mkolman)
    Related: rhbz#2015059
  - Always set system purpose from GUI (mkolman)
    Resolves: rhbz#2015059


author: Vladimir Slavik <vslavik@redhat.com> - 34.25.0.25-1
changelog:
  - Hide the help button on the progress spoke (vponcova)
    Related: rhbz#1995945
  - Enable the built-in help content (vponcova)
    Resolves: rhbz#1995945
  - Remove the provides_web_browser property (vponcova)
    Related: rhbz#1995945
  - Cache the parsed content of the help mapping files (vponcova)
    Related: rhbz#1995945
  - Remove the default_help_pages configuration option (vponcova)
    Related: rhbz#1995945
  - Remove the helpFile attribute (vponcova)
    Related: rhbz#1995945
  - Implement the unified help support (vponcova)
    Related: rhbz#1995945
  - Define a unique id in the main spokes and hubs (vponcova)
    Related: rhbz#1995945
  - Add the Screen class (vponcova)
    Related: rhbz#1995945
  - Enable Closest mirror on CentOS Stream 9 (jkonecny)
    Related: rhbz#1955331
  - Do not modify boot order on UEFI if asked (vslavik)
    Resolves: rhbz#2025953


author: Vladimir Slavik <vslavik@redhat.com> - 34.25.0.26-1
changelog:
  - Write all PVs to LVM devices file (vslavik)
    Resolves: rhbz#2040302
  - Fix the status of the root configuration screen (vponcova)
    Related: rhbz#2026916
  - Fix the condition for entering the root configuration (vponcova)
    Resolves: rhbz#2026916
  - Move tests for pyanaconda.ui.lib.users to a new file (vponcova)
    Related: rhbz#2026916


author: Vendula Poncova <vponcova@redhat.com> - 34.25.0.27-1
changelog:
  - Use cache when fetching organization data from the GUI (mkolman)
    Resolves: rhbz#2044258
  - Bump subscription-manager version (mkolman)
    Related: rhbz#2048449
  - Improve UX in Simple Content Access mode (mkolman)
    Resolves: rhbz#2048449
  - Add IsSimpleContentAccessEnabled property (mkolman)
    Related: rhbz#2048449
  - Add support for SCA mode detection from registration data (mkolman)
    Related: rhbz#2048449


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.0.29-1
changelog:
  - Make failure in generating of dracut arguments for iSCSI device non-fatal.
    (rvykydal)
    Resolves: rhbz#2055985
  - Do not generate dracut arguments multiple times for some storage devices
    (rvykydal)
    Related: rhbz#2055985
  - Skip /etc/machine-info during live installs (awilliam)
    Resolves: rhbz#2059565


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 34.25.0.29-1.0.1
changelog:
  - Remove visible upstream references
  - Install UEK as the default kernel [Orabug: 18177078]
  - Use XFS as the default filesystem for /
  - Fix the background of an install page [Orabug: 18777681]
  - Use /etc/os-release first when finding the product name [Orabug: 29373100]
  - Add patch to use bls config file to setup default kernel instead of index [Orabug: 21957916]
  - Prevent rescue bootloader entry from becoming the default [Orabug: 29439753]
  - Use OL9 for the kickstart version [Orabug: 29373077]
  - iscsid service should not be running when transition to anaconda.target [Orabug: 29446153] (fred.herard@oracle.com)
  - Update reference to URL with info about SMT [Orabug: 30390135]
  - Work around filesystem full error when / is on btrfs
  - Enable support of /boot on btrfs and make it the default option.
  - Use UEK for the rescue image on x86_64 [Orabug: 31587690], [Orabug: 31988381]
  - Add product.d config file for Oracle Linux [Orabug: 31863588]
  - Disable rhsm and syspurpose kickstart commands
  - Remove CDN from install source screen [Orabug: 31839682]
  - Enable grub2 BLS for XEN guests [Orabug: 31857289]
  - When BTRFS autopartitioning type is used, make sure /boot is on BTRFS [Orabug: 31839671]
  - Remove dependency on subscription-manager and libreport-rhel-anaconda-bugzilla
  - Fix exception when starting installer.
  - Fix path to help files [Orabug: 33788565]
  - Fix error message if /run/anaconda/initrd_errors.txt is empty [Orabug: 33803232]


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.1.6-1
changelog:
  - Report registration errors from kickstart (mkolman)
    Resolves: rhbz#2000652
  - GUI: Show the dialog for a missing passphrase in an enlight box (vponcova)
    Related: rhbz#2087218
  - GUI: Ask for a missing passphrase during automated installations (vponcova)
    Resolves: rhbz#2087218
  - Create functions for a missing passphrase in pyanaconda.ui.lib (vponcova)
    Related: rhbz#2087218
  - Add missing period when concatenating password error strings (jkonecny)
    Resolves: rhbz#2075417
  - Enable bootloader hiding on RHEL (rharwood)
    Resolves: rhbz#2059414


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.1.7-1
changelog:
  - tests: update the order of commands (rootpw) in generated kickstart
    (rvykydal)
    Related: rhbz#2033849
  - dnf: apply the /etc/dnf/dnf.conf configuration file in the installer
    (rvykydal)
    Resolves: rhbz#2053710
  - Add support for rootpw --allow-ssh (rvykydal)
    Resolves: rhbz#2033849


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.1.8-1
changelog:
  - bootloader: do not consider non-ibft iscsi disk as usable for bootloader
    (rvykydal)
    Resolves: rhbz#2003519
  - Fix kickstart command order in new version (vslavik)
    Resolves: rhbz#2100463
  - TUI software spoke is ready with failing repos, too (vslavik)
    Resolves: rhbz#2020299


author: Martin Kolman <mkolman@redhat.com> - 34.25.1.9-1
changelog:
  - Allow to omit WWPN and LUN for NPIV-enabled zFCP devices (jstodola)
    Resolves: rhbz#1937032
  - Reduce the width of the zFCP dialog (jstodola)
    Related: rhbz#1937032
  - Fix product config product_name for Rocky Linux (tucklesepk)
    Resolves: rhbz#2096046
  - Add Circle Linux profile to Anaconda(rhel-9) (bella)
    Resolves: rhbz#2095351


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.1.10-1
changelog:
  - Communicate media verification result clearly (vslavik)
    Related: rhbz#2057469
  - Media verification dialog button reflects state (vslavik)
    Resolves: rhbz#2057469
  - Add tooltip to the Insights checkbox (jkonecny)
    Resolves: rhbz#2071665
  - Increase the minimal suggested size for /boot (vslavik)
    Resolves: rhbz#2042431


author: Vladimir Slavik <vslavik@redhat.com> - 34.25.1.11-1
changelog:
  - Disable the Unregister button during unregistration (mkolman)
    Resolves: rhbz#2068192
  - Install rdma-core if infiniband network device is found (rvykydal)
    Resolves: rhbz#2050331


author: EL Errata <el-errata_ww@oracle.com> - 34.25.1.14-1.0.1
changelog:
  - Default to hiding GRUB2 boot menu
    [Orabug: 34728591]
  - Preserve nvme_core.multipath kernel commandline options [Orabug: 34401439]
  - Drop patch with change to help files path [Orabug: 34233011]
  - Remove visible upstream references
  - Install UEK as the default kernel [Orabug: 18177078]
  - Use XFS as the default filesystem for /
  - Fix the background of an install page [Orabug: 18777681]
  - Use /etc/os-release first when finding the product name [Orabug: 29373100]
  - Add patch to use bls config file to setup default kernel instead of index [Orabug: 21957916]
  - Prevent rescue bootloader entry from becoming the default [Orabug: 29439753]
  - Use OL9 for the kickstart version [Orabug: 29373077]
  - iscsid service should not be running when transition to anaconda.target [Orabug: 29446153] (fred.herard@oracle.com)
  - Update reference to URL with info about SMT [Orabug: 30390135]
  - Work around filesystem full error when / is on btrfs
  - Enable support of /boot on btrfs and make it the default option.
  - Use UEK for the rescue image on x86_64 [Orabug: 31587690], [Orabug: 31988381]
  - Add product.d config file for Oracle Linux [Orabug: 31863588]
  - Disable rhsm and syspurpose kickstart commands
  - Remove CDN from install source screen [Orabug: 31839682]
  - Enable grub2 BLS for XEN guests [Orabug: 31857289]
  - When BTRFS autopartitioning type is used, make sure /boot is on BTRFS [Orabug: 31839671]
  - Remove dependency on subscription-manager and libreport-rhel-anaconda-bugzilla
  - Fix exception when starting installer.
  - Fix path to help files [Orabug: 33788565]
  - Fix error message if /run/anaconda/initrd_errors.txt is empty [Orabug: 33803232]


author: Martin Kolman <mkolman@redhat.com> - 34.25.2.2-1
changelog:
  - Initialize empty disks on the Manual Partitioning screen (vponcova)
    Resolves: rhbz#2127100
  - infra: Set test vars from templates (vslavik)
  - infra: Port check for matching templates from master (vslavik)
  - infra: Port templating mechanism from master (vslavik)
  - dracut: read filename dhcp option from dhcpopts file (rvykydal)
    Related: rhbz#1991843


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.2.3-1
changelog:
  - Disable the concurrency check in the error dialog in TUI (vponcova)
    Resolves: rhbz#2070920
  - Support bond device activated in initramfs from kickstart (rvykydal)
    Resolves: rhbz#2133053


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.2.4-1
changelog:
  - Delegate auto-attach handling to RHSM (mkolman)
    Resolves: rhbz#2083319
  - Use RHEL9_SshKeyData to fix sshkey quoting problem (bcl)
    Resolves: rhbz#2149362
  - Test the InstallerStorage.copy method (vponcova)
    Related: rhbz#2093793
  - Show multiple bootloader devices on the Manual Partitioning screen (vponcova)
    Resolves: rhbz#2093793
  - Implement the Root.copy method (vponcova)
    Related: rhbz#2093793
  - Redefine the Blivet.roots attribute (vponcova)
    Related: rhbz#2093793
  - Redefine the Blivet.copy method (vponcova)
    Related: rhbz#2093793
  - Use correct hint for VNC password boot option (jstodola)
    Resolves: rhbz#2124818


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.2.5-1
changelog:
  - payload: fix repo --includepkgs option (rvykydal)
    Resolves: rhbz#2158210
  - bootloader/zipl.py: update for zipl >= 2.25.0 (dan)
    Resolves: rhbz#2157916


author: Vladimír Slávik <vslavik@redhat.com> - 34.25.2.6-1
changelog:
  - Add a NVMe-FC tab to the Advanced Storage screen (vslavik)
    Resolves: rhbz#2107346
  - Update the .glade file for the Advanced Storage screen (vponcova)
    Related: rhbz#2107346
  - Filter out NVMe over Fibre Channel from local disks (vslavik)
    Resolves: rhbz#2107346
  - Install nvme-cli on boot.iso (vslavik)
    Resolves: rhbz#2107346


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.2.7-1
changelog:
  - Show an error message when subscription token transfer fails (mkolman)
    Resolves: rhbz#2057472
  - Bump blivet version for NVMe-oF support (vslavik)
    Resolves: rhbz#2164343
  - Make text in custom_storage_helper more accurate (ozobal)
    Resolves: rhbz#2133046
  - Fix infobar colors in GTK GUI (ozobal)
    Resolves: rhbz#2074827


author: EL Errata <el-errata_ww@oracle.com> - 34.25.2.10-1.0.1
changelog:
  - When using the minimal or UEK boot ISOs, use public YUM as the install source.
    [OLDIS: 2397]
  - Default to hiding GRUB2 boot menu
    [Orabug: 34728591]
  - Preserve nvme_core.multipath kernel commandline options [Orabug: 34401439]
  - Drop patch with change to help files path [Orabug: 34233011]
  - Remove visible upstream references
  - Install UEK as the default kernel [Orabug: 18177078]
  - Use XFS as the default filesystem for /
  - Fix the background of an install page [Orabug: 18777681]
  - Use /etc/os-release first when finding the product name [Orabug: 29373100]
  - Add patch to use bls config file to setup default kernel instead of index [Orabug: 21957916]
  - Prevent rescue bootloader entry from becoming the default [Orabug: 29439753]
  - Use OL9 for the kickstart version [Orabug: 29373077]
  - iscsid service should not be running when transition to anaconda.target [Orabug: 29446153] (fred.herard@oracle.com)
  - Update reference to URL with info about SMT [Orabug: 30390135]
  - Work around filesystem full error when / is on btrfs
  - Enable support of /boot on btrfs and make it the default option.
  - Use UEK for the rescue image on x86_64 [Orabug: 31587690], [Orabug: 31988381]
  - Add product.d config file for Oracle Linux [Orabug: 31863588]
  - Disable rhsm and syspurpose kickstart commands
  - Remove CDN from install source screen [Orabug: 31839682]
  - Enable grub2 BLS for XEN guests [Orabug: 31857289]
  - When BTRFS autopartitioning type is used, make sure /boot is on BTRFS [Orabug: 31839671]
  - Remove dependency on subscription-manager and libreport-rhel-anaconda-bugzilla
  - Fix exception when starting installer.
  - Fix path to help files [Orabug: 33788565]
  - Fix error message if /run/anaconda/initrd_errors.txt is empty [Orabug: 33803232]


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.3.1-1
changelog:
  - Add DNS search and ignore options from kickstart (vslavik)
    Resolves: rhbz#2065754
  - driver_updates: migrate driver_updates.py to pep8 format (jkonecny)
    Related: rhbz#2154906
  - driver_updates: adding tests for the new logging solution (jkonecny)
    Related: rhbz#2154906
  - driver_updates: add lot of debug logs for easier debugging (jkonecny)
    Related: rhbz#2154906
  - driver_updates: extend where we print log messages (jkonecny)
    Resolves: rhbz#2154906
  - Add missing documentation about OEMDRV (jkonecny)
    Related: rhbz#2171811
  - oemdrv: wait up to 5 seconds for disks to be handled (rmetrich)
    Resolves: rhbz#2171811


author: Vladimír Slávik <vslavik@redhat.com> - 34.25.3.2-1
changelog:
  - Fix kickstart proxy cmd in stage1 (jkonecny)
    Resolves: rhbz#2177219
  - Check minimal LUKS passphrase length in FIPS mode for Kickstart (vslavik)
    Resolves: rhbz#2163497
  - GUI: Require 8 chars of LUKS passwords in FIPS mode (vslavik)
    Resolves: rhbz#2163497
  - Use inst.proxy in stage1 (jkonecny)
    Resolves: rhbz#2177219
  - Change driver_updates exit info messages to debug (jkonecny)
    Related: rhbz#2154906


author: Vladimír Slávik <vslavik@redhat.com> - 34.25.3.3-1
changelog:
  - Stop infinite wait for CDROM when KS is processed (jkonecny)
    Resolves: rhbz#2209599
  - Apply --noverifyssl option for liveimg kickstart command (jstodola)
    Resolves: rhbz#2157921


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.3.4-1
changelog:
  - Warn about deprecated inst.geoloc=provider_... (vslavik)
    Resolves: rhbz#2127473
  - Improve doc strings for geolocation (vslavik)
    Related: rhbz#2127473
  - Do not run geolocation for TUI (vslavik)
    Resolves: rhbz#2127473
  - gui: Simplify invalid timezone handling. (vslavik)
    Related: rhbz#2127473
  - Try to set timezone from language on welcome spoke (vslavik)
    Resolves: rhbz#2127473
  - Always set timezone with priority (vslavik)
    Resolves: rhbz#2127473
  - Add timezone priority to module backend and interface (vslavik)
    Resolves: rhbz#2127473
  - Use existing locale in welcome spoke (vslavik)
    Resolves: rhbz#2127473
  - Apply geolocation in main process (vslavik)
    Related: rhbz#2127473
  - Add back waiting for geolocation (vslavik)
    Related: rhbz#2127473
  - Add wait_for_task() to wait for a Task with timeout (vslavik)
    Related: rhbz#2127473
  - Don't fall back to default timezone in welcome spoke (vslavik)
    Related: rhbz#2127473
  - Use directly URLs in conf geoloc provider field (vslavik)
    Related: rhbz#2127473
  - Remove unmodularized geolocation (vslavik)
    Related: rhbz#2127473
  - Use modularized geolocation instead of unmodularized (vslavik)
    Related: rhbz#2127473
  - Hide the geolocation task in Timezone's interface (vslavik)
    Related: rhbz#2127473
  - Add GeolocationTask to the Timezone module (vslavik)
    Related: rhbz#2127473
  - Add a D-Bus structure for geolocation data (vslavik)
    Related: rhbz#2127473
  - Add conf option for geolocation provider (vslavik)
    Related: rhbz#2127473
  - Retranslate welcome screen more simply (vslavik)
    Related: rhbz#2127473
  - Fix translations of the pre-release warning dialog (vponcova)
    Resolves: rhbz#2165762
    Related: rhbz#2127473
  - Split Timezone module tests for tasks to new file (vslavik)
    Related: rhbz#2127473
  - Make check for geolocation start a standalone helper (vslavik)
    Related: rhbz#2127473
  - Keep Timezone proxy in Welcome spoke (vslavik)
    Related: rhbz#2127473
  - Split starting locales in welcome spoke to a helper (vslavik)
    Related: rhbz#2127473
  - Rename constant to reflect its usage (vslavik)
    Related: rhbz#2127473
  - Fix "proxy" boot option is printing inst. warning (jkonecny)
    Related: rhbz#2177219
  - Allow showing proxy passwords on the installation source spoke (jstodola)
    Resolves: rhbz#2013190
  - Allow showing passwords on the subscription spoke (jstodola)
    Resolves: rhbz#2013190
  - Always hide the user password by default (jstodola)
    Related: rhbz#2013190
  - Always hide the root password by default (jstodola)
    Related: rhbz#2013190


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.3.5-1
changelog:
  - Add option for installing RedHat kernel (ozobal)
    Related: rhbz#2164819
    Resolves: rhbz#2214266
  - Add TUI for installing non-standard kernels (ozobal)
    Resolves: rhbz#2214266
    Resolves: rhbz#2164819
  - Add GUI option for installing 64k ARM kernel (ozobal)
    Resolves: rhbz#2214266
    Resolves: rhbz#2164819
  - Add match_available_packages to dnf_manager (ozobal)
    Related: rhbz#2214266
    Related: rhbz#2164819


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.3.6-1
changelog:
  - Remove unused variable in TUI software selection (ozobal)
    Related: rhbz#2214266
    Related: rhbz#2164819
  - Fix aarch64 architecture detection (jstodola)
    Resolves: rhbz#2164819


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.3.7-1
changelog:
  - Allow showing passphrase when unlocking LUKS device (jstodola)
    Resolves: rhbz#2013190
  - Be more indulgent when reclaiming disk space (jstodola)
    Resolves: rhbz#2187371
  - Do not print error on inst.ks=cdrom|hd (jkonecny)
    Resolves: rhbz#2077045


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.3.8-1
changelog:
  - iscsi: Allow changing iSCSI initiator name once set (vtrefny)
    Resolves: rhbz#2223977
  - Missing translation for button labels in Beta dialog
    Resolves: rhbz#2225450


author: Martin Kolman <mkolman@redhat.com> - 34.25.4.2-1
changelog:
  - tests: Add a test case for the NVMe module (vtrefny)
    Resolves: RHEL-11543
    Resolves: RHEL-11544
  - Add a simple NVMe module for NVMe Fabrics support (vtrefny)
    Resolves: RHEL-11543
    Resolves: RHEL-11544
  - network: ignore BOOTIF connections when creating device configurations
    (rvykydal)
    Resolves: RHEL-4766
  - network: ignore BOOTIF connections when looking for initramfs bond ports
    (rvykydal)
    Resolves: RHEL-4766


author: Martin Kolman <mkolman@redhat.com> - 34.25.4.3-1
changelog:
  - Fix missing emit of zfcp kickstart statements (maier)
    Related: RHEL-11384
  - DeviceTreeViewer: Add path-id attribute to zfcp-attached SCSI disks (maier)
    Related: RHEL-11384
  - Fix missing WWID values for multipath devices in advanced storage UI
    (#2046654) (maier)
    Resolves: RHEL-11384
  - rescue: Don't allow to mount systems without a root device (vponcova)
    Resolves: RHEL-14696
  - Do not crash on default None values of ostreecontainer command (rvykydal)
    Related: RHEL-2250
  - Fix wrong dracut timeout message (jkonecny)
    Resolves: RHEL-5638
  - Move rpm-ostree deps from Lorax to Anaconda (#2125655) (jkonecny)
    Related: RHEL-2250
  - Implement needs_network for rpm_ostree_container (#2125655) (jkonecny)
    Related: RHEL-2250
  - Add tests for RPM Ostree payload with source from container (#2125655)
    (rvykydal)
    Related: RHEL-2250
  - Enable RPM OSTree from container source in payload (#2125655) (rvykydal)
    Resolves: RHEL-2250
  - Add RPM OSTree source from container (#2125655) (rvykydal)
    Related: RHEL-2250


author: Martin Kolman <mkolman@redhat.com> - 34.25.4.5-1
changelog:
  - bootupd: Use --write-uuid (walters)
    Related: RHEL-17205
  - bootloader: Detect bootupd and skip regular install (vslavik)
    Related: RHEL-17205
  - ostree: Use bootupd if installed by payload (vslavik)
    Resolves: RHEL-17205
  - bootloader: Create an installation task for collecting kernel arguments
    (vponcova)
    Related: RHEL-17205
  - bootloader: Add the collect_arguments method (vponcova)
    Related: RHEL-17205
  - bootloader: Remove the install_boot_loader function (vponcova)
    Related: RHEL-17205
  - Apply the bootloader options before the installation (vponcova)
    Related: RHEL-17205


author: Martin Kolman <mkolman@redhat.com> - 34.25.4.6-1
changelog:
  - Disable bug reporting to Bugzilla from anaconda (kkoukiou)
    Resolves: RHEL-24419
  - Fixed file-write operation to a public directory (ataf)
    Resolves: RHEL-23345


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.4.7-1
changelog:
  - Lower log file permission in /tmp (jkonecny)
    Resolves: RHEL-23345
  - Add utility function to set file mode (jkonecny)
    Related: RHEL-23345


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 34.25.4.9-1.0.1
changelog:
  - Disable the Kernel Options section [Orabug: 36540716]
  - Removed missed upstream references. [Orabug: 36528262]
  - When using the minimal or UEK boot ISOs, use public YUM as the install source.
    [OLDIS: 2397]
  - Default to hiding GRUB2 boot menu
    [Orabug: 34728591]
  - Preserve nvme_core.multipath kernel commandline options [Orabug: 34401439]
  - Drop patch with change to help files path [Orabug: 34233011]
  - Remove visible upstream references
  - Install UEK as the default kernel [Orabug: 18177078]
  - Use XFS as the default filesystem for /
  - Fix the background of an install page [Orabug: 18777681]
  - Use /etc/os-release first when finding the product name [Orabug: 29373100]
  - Add patch to use bls config file to setup default kernel instead of index [Orabug: 21957916]
  - Prevent rescue bootloader entry from becoming the default [Orabug: 29439753]
  - Use OL9 for the kickstart version [Orabug: 29373077]
  - iscsid service should not be running when transition to anaconda.target [Orabug: 29446153] (fred.herard@oracle.com)
  - Update reference to URL with info about SMT [Orabug: 30390135]
  - Work around filesystem full error when / is on btrfs
  - Enable support of /boot on btrfs and make it the default option.
  - Use UEK for the rescue image on x86_64 [Orabug: 31587690], [Orabug: 31988381]
  - Add product.d config file for Oracle Linux [Orabug: 31863588]
  - Disable rhsm and syspurpose kickstart commands
  - Remove CDN from install source screen [Orabug: 31839682]
  - Enable grub2 BLS for XEN guests [Orabug: 31857289]
  - When BTRFS autopartitioning type is used, make sure /boot is on BTRFS [Orabug: 31839671]
  - Remove dependency on subscription-manager and libreport-rhel-anaconda-bugzilla
  - Fix exception when starting installer.
  - Fix path to help files [Orabug: 33788565]


author: Martin Kolman <mkolman@redhat.com> - 34.25.5.10-1
changelog:
  - Fix check for biosboot partition in GRUB2.check (vtrefny)
    Resolves: RHEL-55922
  - Ignore all storage errors when trying to activate swaps (vtrefny)
    Resolves: RHEL-55922


author: Martin Kolman <mkolman@redhat.com> - 34.25.5.11-1
changelog:
  - security: call /usr/libexec/fips-setup-helper (asosedkin)
    Resolves: RHEL-58667
  - release-notes: Document support for compressed kernel modules in Driver Discs
    (peter.georg)
    Related: RHEL-9913
  - Add documentation about support for compressed kernel modules (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Update test info to reflect added support for compressed kernel
    modules (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add test for zstd compressed kernel module (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add test for xz compressed kernel module (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add support for compressed kernel modules (peter.georg)
    Resolves: RHEL-9913
  - New version - 34.25.5.10 (k.koukiou)


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.5.13-1
changelog:
  - security: require pykickstart version with %certificates support (rvykydal)
    Resolves: RHEL-61430
  - security: do not crash initramfs ks parsing on failing certificate dump
    (rvykydal)
    Resolves: RHEL-61430
  - security: add service to transfer certificates from initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates in initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates in pre-install phase only for dnf payload
    (rvykydal)
    Resolves: RHEL-61430
  - security: raise exception if certificate destination is unknown (rvykydal)
    Resolves: RHEL-61430
  - security: log a warning when dumping certificate over an existing file
    (rvykydal)
    Resolves: RHEL-61430
  - security: pre-install certificates before payload installation (rvykydal)
    Resolves: RHEL-61430
  - security: add API to install certificates early before payload (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates on target system (rvykydal)
    Resolves: RHEL-61430
  - security: Add API for installation on target system (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates early after Anaconda start (rvykydal)
    Resolves: RHEL-61430
  - security: add API to import certificates to Anaconda environment (rvykydal)
    Resolves: RHEL-61430
  - security: add API: Certificate getter (rvykydal)
    Resolves: RHEL-61430
  - kickstart: extend section specification for list of section data (rvykydal)
  - security: implement the support to install certificates to Anaconda
    (rvykydal)
    Resolves: RHEL-61430
  - translations: bump dependency to l10n repo because of branch switch
    (k.koukiou)
  - util: correct errors and suppress stderr for common cases (riehecky)
  - util: Add additional information for EFI systems (riehecky)
    Resolves: RHEL-55128


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.15-1
changelog:
  - security: add a development note for certificates import in initramfs
    (rvykydal)
    Related: RHEL-77155
  - security: do not issue warning on existing certificate file during dump
    (rvykydal)
    Resolves: RHEL-77155
  - network: pass NM global dns configuration to the installed system (rvykydal)
    Resolves: RHEL-71824
  - network: pass global dns initrd option to the installed system (rvykydal)
    Resolves: RHEL-71824


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.16-1
changelog:
  - network: add dnsconfd to selected packages if used in installer (rvykydal)
    Resolves: RHEL-79803
  - network: add dnsconfd to installer environment (rvykydal)
    Resolves: RHEL-79804


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.17-1
changelog:
  - network: start dnsconfd in initramfs (rvykydal)
    Resolves: RHEL-80303
  - network: enable dnsconfd service on installed system if required (rvykydal)
    Resolves: RHEL-80023
  - network: pass 16-dns-backend.conf to target system (rvykydal)
    Resolves: RHEL-80233
  - netowrk: enable dnsconfd service in installer environment (rvykydal)
    Resolves: RHEL-80023


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 34.25.5.17-1.0.1
changelog:
  - Fix empty help during install [Orabug: 37243419]
  - Use same default partitioning as upstream. [Orabug: 37260885]
  - Do not exclude bootloader dirs during live image processing [Orabug: 36591851]
  - Removed missed upstream references. [Orabug: 36575077]
  - Disable the Kernel Options section [Orabug: 36540716]
  - Removed missed upstream references. [Orabug: 36528262]
  - When using the minimal or UEK boot ISOs, use public YUM as the install source.
    [OLDIS: 2397]
  - Default to hiding GRUB2 boot menu
    [Orabug: 34728591]
  - Preserve nvme_core.multipath kernel commandline options [Orabug: 34401439]
  - Drop patch with change to help files path [Orabug: 34233011]
  - Remove visible upstream references
  - Install UEK as the default kernel [Orabug: 18177078]
  - Use XFS as the default filesystem for /
  - Fix the background of an install page [Orabug: 18777681]
  - Use /etc/os-release first when finding the product name [Orabug: 29373100]
  - Add patch to use bls config file to setup default kernel instead of index [Orabug: 21957916]
  - Prevent rescue bootloader entry from becoming the default [Orabug: 29439753]
  - Use OL9 for the kickstart version [Orabug: 29373077]
  - iscsid service should not be running when transition to anaconda.target [Orabug: 29446153] (fred.herard@oracle.com)
  - Update reference to URL with info about SMT [Orabug: 30390135]
  - Work around filesystem full error when / is on btrfs
  - Enable support of /boot on btrfs and make it the default option.
  - Use UEK for the rescue image on x86_64 [Orabug: 31587690], [Orabug: 31988381]
  - Add product.d config file for Oracle Linux [Orabug: 31863588]
  - Disable rhsm and syspurpose kickstart commands
  - Remove CDN from install source screen [Orabug: 31839682]
  - Enable grub2 BLS for XEN guests [Orabug: 31857289]
  - When BTRFS autopartitioning type is used, make sure /boot is on BTRFS [Orabug: 31839671]
  - Remove dependency on subscription-manager and libreport-rhel-anaconda-bugzilla
  - Fix exception when starting installer.
  - Fix path to help files [Orabug: 33788565]


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 34.25.5.17-1.0.2
changelog:
  - Enable UEKR8 repositories by default [Orabug: 37596843]
  - Point to the UEK R8 repo for closest mirror installations
    [Orabug: 37771834]


author: Katerina Koukiou <kkoukiou@redhat.com> - 34.25.5.3-1
changelog:
  - Fix Source0 in spec to point to upstream source URL (kkoukiou)
  - Do not try to load sha256 module in intramfs (rvykydal)
    Resolves: RHEL-4747
  - Do not try to load the floppy kernel module (jstodola)
    Resolves: RHEL-4747
  - anaconda-modprobe: don't try and load cramfs (awilliam)
    Resolves: RHEL-4747


author: Katerina Koukiou <kkoukiou@redhat.com> - 34.25.5.5-1
changelog:
  - Update translations from Weblate for rhel-9
  - Do not rewrite logs in rescue mode (jstodola)
    Resolves: RHEL-4794
  - Write a warning rescue selinux (akankovs)
    Resolves: RHEL-14005
  - Fix kickstart --dhcpclass option application (rvykydal)
    Resolves: RHEL-30406


author: Katerina Koukiou <kkoukiou@redhat.com> - 34.25.5.6-1
changelog:
  - Update translations from Weblate for rhel-9
  - Change location of rescue mode flag file (jstodola)
    Resolves: RHEL-4794


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.7-1
changelog:
  - Fix source spoke being inaccessible if payload thread errors out (mkolman)
    Resolves: RHEL-4721
  - Do not create default wired connections for bond ports (rvykydal)
    Resolves: RHEL-38451
  - Consolidate code for dumping network connections (rvykydal)
    Related: RHEL-38451


author: Martin Kolman <mkolman@redhat.com> - 34.25.5.8-1
changelog:
  - Use proxy server also for FTP .treeinfo download (jkonecny)
    Resolves: RHEL-27938
  - Update translations from Weblate for rhel-9 (github-actions)


author: Martin Kolman <mkolman@redhat.com> - 34.25.5.9-1
changelog:
  - network: ignore kickstart configuration of nBFT devices (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: do not dump configurations of nBFT devices (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: ignore nBFT devices connections in network configuration (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: add a test for ignoring ifname=nbft* for device renaming (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: do not create empty dir for only ifname=nbft* options (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: Avoid creating link files for 'nbft' interfaces (tbzatek)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - Update translations from Weblate for rhel-9 (github-actions)


author: EL Errata <el-errata_ww@oracle.com> - 34.25.5.9-1.0.1
changelog:
  - Do not exclude bootloader dirs during live image processing [Orabug: 36591851]
  - Removed missed upstream references. [Orabug: 36575077]
  - Disable the Kernel Options section [Orabug: 36540716]
  - Removed missed upstream references. [Orabug: 36528262]
  - When using the minimal or UEK boot ISOs, use public YUM as the install source.
    [OLDIS: 2397]
  - Default to hiding GRUB2 boot menu
    [Orabug: 34728591]
  - Preserve nvme_core.multipath kernel commandline options [Orabug: 34401439]
  - Drop patch with change to help files path [Orabug: 34233011]
  - Remove visible upstream references
  - Install UEK as the default kernel [Orabug: 18177078]
  - Use XFS as the default filesystem for /
  - Fix the background of an install page [Orabug: 18777681]
  - Use /etc/os-release first when finding the product name [Orabug: 29373100]
  - Add patch to use bls config file to setup default kernel instead of index [Orabug: 21957916]
  - Prevent rescue bootloader entry from becoming the default [Orabug: 29439753]
  - Use OL9 for the kickstart version [Orabug: 29373077]
  - iscsid service should not be running when transition to anaconda.target [Orabug: 29446153] (fred.herard@oracle.com)
  - Update reference to URL with info about SMT [Orabug: 30390135]
  - Work around filesystem full error when / is on btrfs
  - Enable support of /boot on btrfs and make it the default option.
  - Use UEK for the rescue image on x86_64 [Orabug: 31587690], [Orabug: 31988381]
  - Add product.d config file for Oracle Linux [Orabug: 31863588]
  - Disable rhsm and syspurpose kickstart commands
  - Remove CDN from install source screen [Orabug: 31839682]
  - Enable grub2 BLS for XEN guests [Orabug: 31857289]
  - When BTRFS autopartitioning type is used, make sure /boot is on BTRFS [Orabug: 31839671]
  - Remove dependency on subscription-manager and libreport-rhel-anaconda-bugzilla
  - Fix exception when starting installer.
  - Fix path to help files [Orabug: 33788565]


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.6-1
changelog:
  - Fix vconsole layout doesn't work for ostree (jkonecny)
    Resolves: RHEL-101057
  - test: make dnf substitutions test check only relevant values (rvykydal)
  - test: add new substitution members in dnf tests (rvykydal)


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.7-1
changelog:
  - pyanaconda: payload: return exception details for payload failures
    (k.koukiou)
  - ui: tui: installation_source: show error message in the TUI screen
    (k.koukiou)
    Resolves: RHEL-4705
  - storage: fix mount point assignment of non-formatted swap partitions
    (rvykydal)
    Related: RHEL-16355
  - storage: include only fstab devices in fsset swap devices property (rvykydal)
    Resolves: RHEL-16355


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.8-1
changelog:
  - Fix: UnboundLocalError: local variable 'e' referenced before assignment
    (k.koukiou)
    Related to: RHEL-4705
  - Emit authselect in KS when fingerprint is enabled (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.9-1
changelog:
  - Set Authselect agruments after run in Security module (adamkankovsky)
    Resolves: RHEL-85175
  - Authselect code simplification (adamkankovsky)
    Resolves: RHEL-85175
  - custom: Reallocate partitions when removing a partition (vtrefny)
    Resolves: RHEL-114169


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.10-1
changelog:
  - Fixing authselect logical differences not resolved during backporting
    (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.11-1
changelog:
  - bootloader: efi: utilize grub2-common script for handling config file
    generation (k.koukiou)
    Resolves: RHEL-36187


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.12-1
changelog:
  - Fix permissions of the ssh config created by Anaconda (ppolawsk)
    Resolves: RHEL-129787
  - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues
    (k.koukiou)
    Related: RHEL-74145
  - ostree needs to have /boot be bindmounted into sysroot. (a.badger)
    Resolves: RHEL-74145


author: Kevin Lyons <kevin.x.lyon@oracle.com> - 34.25.7.14-1.0.1
changelog:
  - Enable UEKR8 repositories by default [Orabug: 37596843]
  - Point to the UEK R8 repo for closest mirror installations
    [Orabug: 37771834]
  - Fix empty help during install [Orabug: 37243419]
  - Use same default partitioning as upstream. [Orabug: 37260885]
  - Do not exclude bootloader dirs during live image processing [Orabug: 36591851]
  - Removed missed upstream references. [Orabug: 36575077]
  - Disable the Kernel Options section [Orabug: 36540716]
  - Removed missed upstream references. [Orabug: 36528262]
  - When using the minimal or UEK boot ISOs, use public YUM as the install source.
    [OLDIS: 2397]
  - Default to hiding GRUB2 boot menu
    [Orabug: 34728591]
  - Preserve nvme_core.multipath kernel commandline options [Orabug: 34401439]
  - Drop patch with change to help files path [Orabug: 34233011]
  - Remove visible upstream references
  - Install UEK as the default kernel [Orabug: 18177078]
  - Use XFS as the default filesystem for /
  - Fix the background of an install page [Orabug: 18777681]
  - Use /etc/os-release first when finding the product name [Orabug: 29373100]
  - Add patch to use bls config file to setup default kernel instead of index [Orabug: 21957916]
  - Prevent rescue bootloader entry from becoming the default [Orabug: 29439753]
  - Use OL9 for the kickstart version [Orabug: 29373077]
  - iscsid service should not be running when transition to anaconda.target [Orabug: 29446153] (fred.herard@oracle.com)
  - Update reference to URL with info about SMT [Orabug: 30390135]
  - Work around filesystem full error when / is on btrfs
  - Enable support of /boot on btrfs and make it the default option.
  - Use UEK for the rescue image on x86_64 [Orabug: 31587690], [Orabug: 31988381]
  - Add product.d config file for Oracle Linux [Orabug: 31863588]
  - Disable rhsm and syspurpose kickstart commands
  - Remove CDN from install source screen [Orabug: 31839682]
  - Enable grub2 BLS for XEN guests [Orabug: 31857289]
  - When BTRFS autopartitioning type is used, make sure /boot is on BTRFS [Orabug: 31839671]
  - Remove dependency on subscription-manager and libreport-rhel-anaconda-bugzilla
  - Fix exception when starting installer.
  - Fix path to help files [Orabug: 33788565]


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.1-1
changelog:
  - network: disable NM autoconnections also when BOOTIF is used (rvykydal)
    Resolves: RHEL-78272
  - network: support inst.net.noautodefault option (rvykydal)
    Related: RHEL-78272
  - security: fix dnsconfd backend option check in initramfs (rvykydal)
    Resolves: RHEL-83214
  - Support leavebootorder for bootupd (jkonecny)
    Resolves: RHEL-40897
  - bootupd: call bootupctl with --update-firmware (awilliam)
    Resolves: RHEL-40897


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.2-1
changelog:
  - Fix typo in systemd service (jstodola)
    Resolves: RHEL-78272
  - s390x - enable raid1 as a stage2 device (dan)
    Resolves: INSTALLER-4148
    Resolves: RHEL-21691
  - edns: restart dnsconfd only after the first kickstart parsing (rvykydal)
    Resolves: RHEL-82694
  - edns: allow dnsconfd name resolution for kickstart fetching (rvykydal)
    Resolves: RHEL-82694


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.3-1
changelog:
  - Sort RPM versions via rpm.labelCompare() and not via
    packaging.version.LegacyVersion() (miro)
    Resolves: RHEL-87358
  - rpm_ostree/installation.py: fix image deployment on s390x (rvykydal)
    Resolves: RHEL-63237
  - Add additional config_get Dracut function tests (jkonecny)
    Related: RHEL-48837
  - Update the tests/README.rst file (jkonecny)
    Related: RHEL-48837
  - Move shell testing to a separated directory (jkonecny)
    Related: RHEL-48837
  - Enable dynamic bash commands disable for tests (jkonecny)
    Related: RHEL-48837
  - Add test for config_get dracut function (jkonecny)
    Related: RHEL-48837
  - Fix trailing `/` when downloading stage2 image (jkonecny)
    Resolves: RHEL-48837
  - Fix whitespace chars broke Dracut config parsing (jkonecny)
    Related: RHEL-48837


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.4-1
changelog:
  - Revert "s390x - enable raid1 as a stage2 device" (jkonecny)
    Reverts: RHEL-21691
  - test_module_part_blivet: fix pylint disable (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module.common.task fix cyclic import (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module_manager: fix ciclic import (k.koukiou)
    Related: RHEL-85416
  - pyanaconda: bootloader: fix ImportError (k.koukiou)
    Related: RHEL-85416
  - ruff: enable isort rules and autofix all isort warnings Autofixed with: ruff
    check --exclude pyanaconda/core/kickstart/commands.py --fix --select I .
    (jkonecny)
    Resolves: RHEL-85416
  - Add ruff, a very fast linter (vslavik)
    Related: RHEL-85416
  - Relabel /var/log/ and /root/original-ks.cfg (champetier.etienne)
    Resolves: RHEL-85298


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.5-1
changelog:
  - bootloader: drop write_config_console, just preserve console= (awilliam)
    Resolves: RHEL-98670
  - payload/rpm-ostree: Include program output in exception (walters)
    Resolves: RHEL-45184


author: Nick Clifton <nickc@redhat.com> - 10.44-1
changelog:
  - Annocheck: Add even more glibc function names. (#2037333)
  - Annocheck: ARM: Do not fail tests that rely upon annobin notes.


author: Nick Clifton <nickc@redhat.com> - 10.46-1
changelog:
  - Annocheck: Add option to disable instrumentation test.
  - GCC Plugin: Fix building with gcc-12.
  - Spec file: Add requirement on cpio for annocheck.  (#2039747)


author: Nick Clifton <nickc@redhat.com> - 10.47-1
changelog:
  - Annocheck: Improve detection of kernel modules.
  - GCC Plugin: Only default to link-once when using gcc-12 or later.  (#2039297)


author: Nick Clifton <nickc@redhat.com> - 10.50-1
changelog:
  - Annocheck: Skip property note test for GO binaries.  (#204300)
  - Annocheck: Add another glibc static library symbol.  (#2043047)
  - Spec File: Use gcc --print-file-name=rpmver for the gcc version info.


author: Nick Clifton <nickc@redhat.com> - 10.51-1
changelog:
  - Annocheck: Add an option to disable the use of debuginfod (if available).
  - Annocheck: Add more glibc special file names.
  - Annocheck: Skip some tests for BPF binaries.  (#2044897)


author: Nick Clifton <nickc@redhat.com> - 10.53-1
changelog:
  - gcc-plugin: Fix libtool so that extraneous runpaths are not added to the plugin.  (#2047356)
  - gcc-plugin: Use canonical_option field of save_decoded_options array. (#2047148)


author: Nick Clifton <nickc@redhat.com> - 10.57-1
changelog:
  - Rebuild to work with LLVM14.  (#2061050)
  - Annocheck: Update documentation and fix typo in annocheck.  (#2061291)
  - Annocheck: Add option to enable/disable following symbolic links.
  - Always identify Rust binaries, even if built on a host that does not know about Rust.  (#2057737)


author: Nick Clifton <nickc@redhat.com> - 10.68-1
changelog:
  - Annocheck: Add more glibc exceptions + check PT_TLS segments.  (#2081131)
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled by golang.
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled in LTO mode.
  - gcc-plugin: Add support for CLVC_INTEGER options.
  - Annocheck: Even more special cases for AArch64 glibc on RHEL-8.  (#2072082)
  - Annocheck: Add more special cases for AArch64 glibc on RHEL-8.  (#2072082)
  - llvm-plugin: Fix a thinko in the sources.
  - gcc-plugin: Add remap of OPT_Wall.
  - configure: Fix typo in top level configure.ac.
  - Add support for building using meson+ninja.
  - Annocheck: Fix test for AArch64 property notes.  (#2068657)


author: Nick Clifton <nickc@redhat.com> - 10.70-1
changelog:
  - Annocheck: Add another special case for glibc rpms.  (#2083070)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)


author: Nick Clifton <nickc@redhat.com> - 10.73-1
changelog:
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.94-1
changelog:
  - Rebase to 10.94.  (#2151308)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - GCC Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 11.04-1
changelog:
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.


author: Nick Clifton <nickc@redhat.com> - 11.12-1
changelog:
  - Annocheck: Add code to handle another glibc function built without LTO.
  - GCC Plugin: Do not run if other plugins are active.  (#2175768)
  - Annocheck: Add code to handle glibc functions built without LTO.
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate dbeuginfo files.
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - LLVM & Clang Plugins: Build with branch protection on AArch64.  (#2164364)
  - Libannocheck: Fix bug causing infinite looping when running tests.
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)


author: Nick Clifton <nickc@redhat.com> - 12.07-1
changelog:
  - Annocheck: Fix lto testing.  (#2177140)
  - gcc-plugin: generate warnings about misspelt -D_FORTIFY_SOURCE and/or -D_GLIBCXX_ASSERTIONS options.
  - gcc-plugin: use a bigger buffer for constructing notes.
  - llvm-plugin: Fix detection of optimization level.  Improve test.
  - clang-plugin: Improve test.
  - configure: More improvements.
  - annocheck: Fix seg-fault when checking for glibc components in string format notes.
  - configure: Simplify.
  - gcc plugin: Add filenames to string notes.  Allow use of ANNOBIN environment variable.
  - llvm plugin: Add workaround for building with LLVM-16.
  - clang plugin: Fix for building with Clang-16.
  - gcc plugin: Keep ELF notes at protocol version 3.
  - Protocol Version 4: String format notes.
  - Annocheck: Update message for LTO tests.  (#2177140)


author: Nick Clifton <nickc@redhat.com> - 12.09-1
changelog:
  - Annocheck: Fix detection of missing plugin options.  (#2189492)
  - Fix generation of auto-generated files.
  - Fix covscan reported errors.


author: Nick Clifton <nickc@redhat.com> - 12.12-1
changelog:
  - Rebuild against LLVM-16.  (#2212739)
  - Annocheck: Check for string notes in separate debug info files.  (#2211694)
  - Annocheck: Add support for el10 and rhel-10 profiles.  (RHEL-526)
  - Annocheck: Suppress more tests for Rust binaries.


author: Nick Clifton <nickc@redhat.com> - 12.28-1
changelog:
  - Tests: Fix obsoleted syntax in plans/ci.fmf  (RHEL-12194)
  - Spec File: Use SPDX licensing.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - LLVM Plugin: Fix building with LLVM version 17.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.
  - Annocheck: Remove dependency upon binutils-devel.
  - Annocheck: Add detection of known parts of libstdc++-nonshared.a that contain gaps.  (#2217864)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)


author: Nick Clifron <nickc@redhat.com> - 12.31-1
changelog:
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.


author: Nick Clifron <nickc@redhat.com> - 12.64-1
changelog:
  - Rebase to 12.64, allowing build with LLVM 18.  (RHEL-49953)
  - Retire: annobin-strings-no-attach.patch
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)
  - Annocheck: Add OpenSSL Engine test.  (PTG-319)
  - Annocheck: Test for gaps even when only one note is present.
  - Annocheck: Skip AArch64 branch protection test for GO binaries.
  - GCC Plugin: Disable active check for -Wimplicit-int for non-C sources.  (#2275884)
  - Annocheck: Ignore stack checks for AMD GPU binaries.
  - Annocheck: Do not produce FAIL result for i686 binaries in the RHEL-10 profile.
  - Annocheck: Test for __stack_chk_guard being writeable.
  - Annocheck: Update heuristics for detecting glibc code in executables.  (RHEL-30579)
  - Clang & LLVM Plugins: Allow environment to override fortification level.  (RHEL-30579)
  - Annocheck: Improve detection of -mbranch-protection option.
  - Clang Plugin: Add global-file-syms option.
  - LLVM Plugin: Add global-file-syms option.
  - Plugins: Add support for ANNOBIN environment variable.
  - GCC Plugin: Fix bug extracing the value of target specific command line options.
  - Configure: Remove check for FrontendPluginRegistry.h header as it is stored in a non-standard location on Debian systems.
  - Debuginfod test: Allow for the libdwfl library silently contacting the debuginfod server.
  - LLVM Plugin: Use llvm-config to get the correct paths and options for building executables.
  - Clang Plugin: Likewise.
  - Enable silent rules for most building.
  - Annocheck: Correctly extract DWARF attributes from DT_REL files.
  - Annocheck: Improve heuristics for locating debug info files.  (#2267097)
  - Configure: Harmonize configure options.    
  - Clang Plugin: Fix building with Clang 18.  (#31414)
  - GCC Plugin: Add support for MIPS specific target functions.
  - GCC Plugin: Use .dc.a for address expressions in 64-bit ELF format notes.
  - Annocheck: Improve heuristic for skipping LTO and FORTIFY tests.  (#2264000)
  - Annocheck: Also skip property note test for i686 binaries. (#2258571)
  - Annocheck: Also skip the entry point test for i686 binaries. (#2258571)
  - GCC Plugin: Do not use section groups with string format notes.
  - Annocheck: Disable cf-protection test for i686 architecture. (#2258571)
  - Annocheck: Improve detection of FIPS compliant GO binaries.
  - GCC Plugin: Fix recording of the -Wimplicit-int and -Wimplicit-function-declaration warnings.  Add active checks for when they are deliberately disabled.
  - Tests: Fix implicit-values test so that it will compile with gcc 14+.
  - GCC Plugin: Add support for -fhardended.


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - Spec File: Add LTO option to clang and llvm plugin builds.  (RHEL-50796)


author: Nick Clifton <nickc@redhat.com> - 12.83-1
changelog:
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.
  - Clang & LLVM Plugins: Include install directory in binary.  (RHEL-54069)
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76809)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-76040)


author: Nick Clifton <nickc@redhat.com> - 12.91-1
changelog:
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)


author: Nick Clifton <nickc@redhat.com> - 12.93-1
changelog:
  - Rebuild against LLVM v20.  (RHEL-82001)
  - Rebase to 12.93.
  - Annocheck: Fix test for GO revision.  (RHEL-56031)


author: Nick Clifton <nickc@redhat.com> - 12.96-1
changelog:
  - Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
  - Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
  - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)


author: Nick Clifton <nickc@redhat.com> - 12.98-1
changelog:
  - Rebase to 12.98.  (RHEL-105574)
  - Improve configure and meson files for consistent builds.
  - Annocheck: Delete the temporary debug info directory after the tests have finished.


author: Christian Adams <chadams@redhat.com> - 2.11.6-1
changelog:
  - ansible-core 2.11.6-1, fix CVE-2021-3620, ansible-connection module
    no long discloses sensitive info.


author: Dimitri Savineau <dsavinea@redhat.com> - 2.14.2-4
changelog:
  - rebuild with python 3.11 (rhbz#2169466)
  - remove bundled dependencies from requirements file (rhbz#2152615)
  - add bundled version of resolvelib
  - use PyPi sources
  - remove straightplugin
  - add missing obsoletes constraint


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.0-1
changelog:
  - ansible-core 2.15.0 release (rhbz#2204510)
  - update bundled markupsafe to 2.1.2.
  - update bundled packaging to 21.3.
  - update bundled pyparsing to 3.0.7.
  - update bundled resolvelib to 1.0.1.
  - remove six runtime dependency.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.7-1
changelog:
  - ansible-core 2.14.7 release (rhbz#2221820)
  - rebuild with python 3.9 (rhbz#2221820)
  - remove bundled packaging, pyparsing and resolvelib.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.9-1
changelog:
  - ansible-core 2.14.9 release (rhbz#2232432)
  - Use docs and examples from ansible-documentation project.
  - Build the manpages.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.14-1
changelog:
  - ansible-core 2.14.14 release (RHEL-23783)
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22124)


author: Thomas Woerner <twoerner@redhat.com> - 1.8.1-1
changelog:
  - Update to version 1.8.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.1
    Related: RHBZ#2080322
  - ipa server deploys failing with latest IPA compose
    Resolves: RHBZ#2103924
  - ipaserver_external_cert_files failes to copy with ansible 2.13
    Resolves: RHBZ#2104142


author: Thomas Woerner <twoerner@redhat.com> - 1.8.2-1
changelog:
  - Update to version 1.8.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.2
    Related: RHBZ#2080322
  - SIDs are always generated for server and replica deployments
    Resolves: RHBZ#2110478
  - Random Serial Numbers are not enabled by default any more
    Resolves: RHBZ#2110523
  - Fixes comparison of bool values in IPA 4.9.10+ for ipadnsconfig
    Resolves: RHBZ#2110538


author: Thomas Woerner <twoerner@redhat.com> - 1.8.3-1
changelog:
  - Update to version 1.8.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.3
    Related: RHBZ#2080322
  - Fixes replica deployment issue for domains without SID support.
    Related: RHBZ#2110478


author: Thomas Woerner <twoerner@redhat.com> - 1.8.4-1
changelog:
  - Update to version 1.8.4
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.4
    Resolves: RHBZ#2125592
  - 'ansible-doc' -l lists most idm modules as 'UNDOCUMENTED'
    Resolves: RHBZ#2125603
  - ansible-freeipa Replica Install Setup DNS fails
    Resolves: RHBZ#2125616
  - ipaconfig does not support SID and netbios attributes
    Resolves: RHBZ#2069184


author: Thomas Woerner <twoerner@redhat.com> - 1.9.0-1
changelog:
  - Update to version 1.9.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.0
    Related: RHBZ#2125592
  - pwpolicy: Add support for password check and grace limit
    Resolves: RHBZ#2127911
  - ipaconfig: Do not allow enable_sid set to False
    Resolves: RHBZ#2127446
  - ipaclient: No kinit on controller for deployment using OTP
    Resolves: RHBZ#2127887
  - ipaclient: Configure DNS resolver
    Resolves: RHBZ#2127895
  - New netgroup management module
    Resolves: RHBZ#2127910
  - sudorule: Add support for 'hostmask' parameter
    Resolves: RHBZ#2127913
  - ipaconfig: Fix fail_json calls
    Resolves: RHBZ#2134375
  - ipaconfig: Do not require enable_sid for add_sids or netbios_name
    Resolves: RHBZ#2134505
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132731


author: Thomas Woerner <twoerner@redhat.com> - 1.9.1-1
changelog:
  - Update to version 1.9.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.1
    Resolves: RHBZ#2125592
  - pwpolicy: Allow clearing policy values
    Resolves: RHBZ#2150334
  - Use netgroup_find instead of netgroup_show to workaround IPA bug
    Resolves: RHBZ#2144725


author: Thomas Woerner <twoerner@redhat.com> - 1.9.2-1
changelog:
  - Update to version 1.9.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.2
    Resolves: RHBZ#2125592
  - ipabackup: Use ipabackup_item again in copy_backup_to_server
    Resolves: RHBZ#2165953


author: Thomas Woerner <twoerner@redhat.com> - 1.10.0-1
changelog:
  - Update to version 1.10.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.10.0
    Resolves: RHBZ#2170373
  - ipareplica/server: Enable removal from domain with undeployment
    Resolves: RHBZ#2127903
  - ipagroup: Allow multiple group management
    Resolves: RHBZ#2175763
  - ipaserver: Allow deployments with random serial numbers
    Resolves: RHBZ#2127905
  - ipagroup: Fix ensuring external group members (without trust-ad)
    Resolves: RHBZ#2183822
  - ipaclient: Add subid option to select the sssd profile with-subid
    Resolves: RHBZ#2175767
  - ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup
    Resolves: RHBZ#2127883
  - ipaclient: Keep server affinity while deploying as long as possible
    Resolves: RHBZ#2175757


author: Thomas Woerner <twoerner@redhat.com> - 1.11.0-1
changelog:
  - Update to version 1.11.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.0
    Resolves: RHBZ#2170373
  - Multiple service management
    Resolves: RHBZ#2175771
  - New ipacert module
    Resolves: RHBZ#2127907
  - Fix maxsequence handling in ipapwpolicy module
    Resolves: RHBZ#2214294


author: Thomas Woerner <twoerner@redhat.com> - 1.11.1-1
changelog:
  - Update to version 1.11.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.1
    Resolves: RHBZ#2170373
  - ipaautomountmap: add support for indirect maps
    Resolves: RHBZ#2050176
  - ipauser: Add support to modify GECOS field
    Resolves: RHBZ#2169372
  - ipauser: Add support for parameter "street"
    Resolves: RHBZ#2215531
  - ipauser: Add support for SMB attributes
    Resolves: RHBZ#2215533
  - ipauser: Support for External IdP attributes
    Resolves: RHBZ#2215536
  - Fix handling of ipapwpolicy attributes usercheck and dictcheck
    Resolves: RHBZ#2215542
  - Update authtypes authind
    Resolves: RHBZ#2215538


author: Thomas Woerner <twoerner@redhat.com> - 1.12.0-1
changelog:
  - Update to version 1.12.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.0
    Resolves: RHEL-13744
  - New idoverridegroup management module.
    Resolves: RHEL-16937
  - New idoverrideuser management module.
    Resolves: RHEL-16942
  - New idview management module.
    Resolves: RHEL-16934
  - New idp management module.
    Resolves: RHEL-16939
  - idoverride{user,group}: Fix delete_continue with state absent
    Resolves: RHEL-16680


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
changelog:
  - Update to version 1.12.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
    Resolves: RHEL-13744
  - ipauser module lacks the "rename" field.
    Resolves: RHEL-4962
  - Add missing support for rename in ipagroup module
    Resolves: RHEL-13758
  - The IDP module does not support the modification of IDP options
    Resolves: RHEL-17954
  - The IDP module does not support resetting IDP options
    Resolves: RHEL-17957
  - ipauser is not idempotent when random is defined
    Resolves: RHEL-19123
  - ipasudorule: Allow setting groups for runasuser
    Resolves: RHEL-19130
  - Idempotency fixes
    Resolves: RHEL-19132
  - ipadnszone: Add support for per-zone privilege delegation
    Resolves: RHEL-19134
  - Handle data type or empty string in module_utils
    Resolves: RHEL-19136


author: Thomas Woerner <twoerner@redhat.com> - 1.13.1-1
changelog:
  - Update to version 1.13.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.1
    Resolves: RHEL-35565
  - New inventory plugin
    Resolves: RHEL-35541
  - Enable batch command as backend
    Resolves: RHEL-38943
  - New collection sub package
    Resolves: RHEL-38931


author: Thomas Woerner <twoerner@redhat.com> - 1.13.2-1
changelog:
  - Update to version 1.13.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.2
    Resolves: RHEL-35565
  - Convert input certificates
    Resolves: RHEL-44614
  - Fix rolesdeployment with IPA 4.12
    Resolves: RHEL-40869


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    Resolves: RHEL-67566
  - Multi sudorule management with the ipasudorule module
    Resolves: RHEL-61431


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67566
  - Fix requirements for ansible-core
    Resolves: RHEL-69146


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67566
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40227
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-25009
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68439
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70016
  - Collection: No more role module duplication
    Resolves: RHEL-71123


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    Resolves: RHEL-67566
  - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
    Resolves: RHEL-78230


author: Thomas Woerner <twoerner@redhat.com> - 1.15.0-1
changelog:
  - Update to version 1.15.0
    Resolves: RHEL-104652
  - ipaclient: Fix AttributeError by defaulting dns_over_tls to False
    Resolves: RHEL-92844
  - Provide compatibility for AAH naming
    Resolves: RHEL-94769
  - Ensure ipaidrange required parameters are correct on recent versions of IPA
    Resolves: RHEL-79820
  - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles
    Resolves: RHEL-78636


author: Thomas Woerner <twoerner@redhat.com> - 1.15.1-1
changelog:
  - Update to version 1.15.1
    Resolves: RHEL-104652
  - ipaclient: client_dns has new statestore arg with IPA change e6445b8
    Resolves: RHEL-106558


author: Thomas Woerner <twoerner@redhat.com> - 1.16.0-1
changelog:
  - Update to version 1.16.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0
    Resolves: RHEL-139144
  - Add suppport for passkey management
    Resolves: RHEL-139257
  - Add suppport for sysaccount management
    Resolves: RHEL-140601
  - ipadnsrecord: Allow to set any IP address if create_reverse is false
    Resolves: RHEL-140607


author: Thomas Woerner <twoerner@redhat.com> - 0.3.6-1
changelog:
  - Update to version 0.3.6
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.6
    Resolves: RHBZ#1972178
  - ansible-freeipa-tests not in the compose
    Resolves: RHBZ#1940014
  - Remove unsupported parameter for (ipapermission) module: perm_rights from
    permission-present.yml
    Resolves: RHBZ#1973167
  - Sample playbook included for selfservice module is incorrect
    Resolves: RHBZ#1973166
  - ipa-client-install failing with error code 7(keytab: /usr/sbin/ipa-rmkeytab
    returned 7)
    Resolves: RHBZ#1973169
  - New management module ipaserver
    Resolves: RHBZ#1973171
  - New management module ipaautomember
    Resolves: RHBZ#1973172


author: Thomas Woerner <twoerner@redhat.com> - 0.3.6-3
changelog:
  - Apply fix for ipabackup: Use module to get IPA_BACKUP_DIR from ipaplatform
    Resolves: RRBZ#1973173


author: Thomas Woerner <twoerner@redhat.com> - 0.3.8-1
changelog:
  - Update to version 0.3.7 and 0.3.8
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.7
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.8
    Related: RHBZ#1972178
  - automember: Verify condition keys
    Resolves: RHBZ#1981713
  - automember: Fix result["failed"] issues with conditions
    Resolves: RHBZ#1981713
  - automember: Fix action to be automember or member, not service
    Resolves: RHBZ#1981711


author: Thomas Woerner <twoerner@redhat.com> - 0.3.8-3
changelog:
  - Add requirement for ansible-core
    Resolves: RHBZ#1993857
  - Remove python3, pip and ansible installation from sanity test
    Related: RHBZ#1993857
  - Replace json_query in tests/user/test_users_absent.yml
    Resolves: RHBZ#1992997


author: Thomas Woerner <twoerner@redhat.com> - 0.4.0-1
changelog:
  - Update to version 0.4.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.4.0
    Resolves: RHBZ#2010622
  - Add ability to run modules remotely
    Resolves: RHBZ#2010633
  - New management module ipaautomountlocation
    Resolves: RHBZ#2010643


author: Thomas Woerner <twoerner@redhat.com> - 1.5.3-1
changelog:
  - Update to version 1.5.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.0
    Related: RHBZ#2010622
  - automember set default group/hostgroup is missing from the automember module
    Resolves: RHBZ#2021947
  - automember remove default group/hostgroup is missing from the automember
    module
    Resolves: RHBZ#2021952
  - automember rebuild is missing from the automember module
    Resolves: RHBZ#2021954
  - automember remove orphans group/hostgroup is missing from the automember
    module
    Resolves: RHBZ#2021955
  - Not able to update existing automember rule description
    Resolves: RHBZ#1976922


author: Thomas Woerner <twoerner@redhat.com> - 1.6.1-1
changelog:
  - Update to version 1.6.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.0
    Related: RHBZ#2010622
  - Add module to manage automount maps
    Resolves: RHBZ#2040701
  - Add module to manage automount keys
    Resolves: RHBZ#2040702


author: Thomas Woerner <twoerner@redhat.com> - 1.6.2-1
changelog:
  - Update to version 1.6.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.2
    Related: RHBZ#2010622


author: Thomas Woerner <twoerner@redhat.com> - 1.6.3-1
changelog:
  - Update to version 1.6.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.3
    Related: RHBZ#2010622


author: Thomas Woerner <twoerner@redhat.com> - 1.6.3-2
changelog:
  - ipatrust: fix range_type and set valid choices for trust_type
    Resolves: RHBZ#2132968
  - ipaserver/ipareplica: Always generate SIDs
    Resolves: RHBZ#2132971
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132977
  - ansible-freeipa Replica Install Setup DNS fails
    Resolves: RHBZ#2132991
  - ipaconfig does not support SID and netbios attributes
    Resolves: RHBZ#2132997


author: Thomas Woerner <twoerner@redhat.com> - 1.7.0-1
changelog:
  - Update to version 1.7.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.7.0
    Resolves: RHBZ#2080322
  - New idrange management module.
    Resolves: RHBZ#2069188
  - Not able to update empty descriptions in automount maps.a
    Resolves: RHBZ#2050179
  - New servicedelegationrule management module.
    Resolves: RHBZ#2069179
  - New servicedelegationtarget management module.
    Resolves: RHBZ#2069180
  - Add support for managing idoverrideusers in ipagroup.
    Resolves: RHBZ#2069183


author: Thomas Woerner <twoerner@redhat.com> - 1.8.0-1
changelog:
  - idrange: Fix usage of dom_name when idrange doesn't exist.
    Resolves: RHBZ#2086994
  - smartcard roles for ansible-freeipa
    Resolves: RHBZ#2076567


author: Thomas Woerner <twoerner@redhat.com> - 1.8.3-2
changelog:
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132976
  - Replica Install Setup DNS fails
    Resolves: RHBZ#2132990
  - ipaconfig: Add support for SID related attributes
    Resolves: RHBZ#2132996
  - paconfig: Fix fail_json calls
    Resolves: RHBZ#2135756
  - ipaconfig: Do not allow enable_sid set to False
    Resolves: RHBZ#2135757
  - ipaconfig: Do not require enable_sid for add_sids or netbios_name
    Resolves: RHBZ#2135776


author: Thomas Woerner <twoerner@redhat.com> - 1.9.2-2
changelog:
  - ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup
    Resolves: RHBZ#2189229
  - ipaclient: Defer creating the final krb5.conf on clients
    Resolves: RHBZ#2189232


author: Darren Archibald <darren.archibald@oracle.com> - 1.9.2-3
changelog:
  - Fix typo in ipapwpolicy.py
    Resolves: RHBZ#2218186
  - pwpolicy test: Fix maxsequence test
    Resolves: RHBZ#2218186


author: Nathan Scott <nathans@redhat.com> 2.0.3-1
changelog:
  - Updated for new version with changed namespace
  - Ansible collection macros now used in the spec
  - Added ansible-lint checking in %check section


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.10.9-15
changelog:
  - Implement new Java bindings and fix ant-manual license
  - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Richard Hughes <richard@hughsie.com> 1:9-20240827
changelog:
  - New metadata version
  - Do not ship fedora-specific files
  - Resolves: #RHEL-4522
  - Resolves: #RHEL-19012


author: Tom Stellard <tstellar@redhat.com> - 1.6.1-13
changelog:
  - Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Omair Majid <omajid@redhat.com> - 10.0.100~rc.2.25502.107-0.10
changelog:
  - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
  - Resolves: RHEL-121559


author: Apoorva Eliza John <apoorva.eliza.john@oracle.com> - 6.0.128-2.0.1
changelog:
  - Update to .NET 6.0 to SDK 6.0.128 and Runtime 6.0.28
  - Resolves RHEL-27540
  - CheckCertificateRevocationList flag for SHA1 CAs : Allow certificate validation with SHA-1 signatures
  - Resolves RHEL-28359 and RHEL-25254


author: Tom Deseyn <tom.deseyn@gmail.com> - 6.0.128-2
changelog:
  - We disable checking the signature of the last certificate in a chain
    if the certificate is supposedly self-signed. A side effect of not
    checking the self-signature of such a certificate is that disabled
    or unsupported message digests used for the signature are not
    treated as fatal errors.
  - Resolves: RHEL-28359


author: John McWalters <john.mcwalters@oracle.com> - 7.0.100-0.2.rc1.0.1
changelog:
  - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152]


author: Alex Burmashev <alexander.burmashev@oracle.com> - - 7.0.117-1.0.1
changelog:
  - Update to .NET SDK 7.0.117 and Runtime 7.0.17
  - Port revert "Disable implicit rejection for RSA PKCS#1 (#95217)" patch


author: Omair Majid <omajid@redhat.com> - 8.0.100~rc.1-0.2
changelog:
  - Add patches to fix mono and arm64 issues
  - Include libmono-*.a files in the SDK
  - Fix CI configuration
  - Related: RHEL-4074


author: Tom Deseyn <tom.deseyn@gmail.com> - 8.0.103-3
changelog:
  - We disable checking the signature of the last certificate in a chain if the certificate is supposedly self-signed.
    A side effect of not checking the self-signature of such a certificate is that disabled or unsupported message
    digests used for the signature are not treated as fatal errors.
  - Resolves: RHEL-28344


author: Alex Burmashev <alexander.burmashev@oracle.com> - 8.0.102-2.0.1
changelog:
  - Update to .NET SDK 8.0.102 and Runtime 8.0.2
  - Add -dbg subpackages for symbol files
  - Resolves: RHEL-23070


author: Alex Burmashev <alexander.burmashev@oracle.com> - - 8.0.103-2.0.1
changelog:
  - Update to .NET SDK 8.0.103 and Runtime 8.0.3
  - Disable checking the signature of the last certificate in a chain if the certificate is supposedly self-signed.
  - Resolves: RHEL-25254
  - Backport MSBuild locale fix
  - Resolves: RHEL-23936


author: Tom Deseyn <tom.deseyn@gmail.com> - 8.0.103-2
changelog:
  - We disable checking the signature of the last certificate in a chain
    if the certificate is supposedly self-signed. A side effect of not
    checking the self-signature of such a certificate is that disabled
    or unsupported message digests used for the signature are not
    treated as fatal errors.
  - Resolves: RHEL-28343


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-100
changelog:
  - New upstream release, 3.0.7
    Resolves: rhbz#2019929 - capability=unknown-capability(39) in audit messages


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054432 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101.1
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2061731 - auparse missing information when used with --format-text (rhel-9.0)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101.2
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2070706 - Default systemd service config blocks audit watch rules in some directories (rhel 9.0)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-102
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2062824 - auparse missing information when used with --format-text


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-103
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2071725 - Default systemd service config blocks audit watch rules in some directories [rhel-9.1.0]


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Ronan Pigott <ronan.pigott@oracle.com> - 3.1.2-2.0.1
changelog:
  - Modify the error message when audit is disabled to mention that it may be disabled [Orabug: 37040467]


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-2
changelog:
  - Parse auto_reset_crashkernel in kdump
    resolves: rhbz#2042772
  - Add new directives and options for chrony


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-4
changelog:
  - Fix parsing of /usr/lib/tmpfiles.d/provision.conf
  - Fix parsing of /etc/kernel/cmdline
    resolves: rhbz#2155136, rhbz#2159282


author: Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
changelog:
  - Rebase to 1.2.5 (RHBZ #2080239)
  - backup-restore now works correctly (RHBZ #2070541)
  - add with-subid to sssd profile (RHBZ #2075192)
  - add with-gssapi to sssd profile (RHBZ #2077893)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-1
changelog:
  - Rebase to 1.2.6 (RHBZ #2142805)
  - update translations (RHBZ #2139642)
  - Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151145)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: EL Errata <el-errata_ww@oracle.com> - 7.1.8.1-11.0.1
changelog:
  - Replace colors with Oracle colors [Orabug: 32120093]
  - Build with --with-vendor="Oracle America, Inc."
  - Added the --with-hamcrest option to configure.


author: Darren Archibald <darren.archibald@oracle.com> - 1:7.1.8.1-12.0.1
changelog:
  - Replace colors with Oracle colors [Orabug: 32120093]
  - Added the --with-hamcrest option to configure.


author: Tomas Popela <tpopela@redhat.com> - 1:7.1.8.1-15.el9_8.1
changelog:
  - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
    the spec has
  - Resolves: RHEL-176576


author: Darren Archibald <darren.archibald@oracle.com> - 1:7.1.8.1-15.0.1.el9_8.1
changelog:
  - Added the --with-hamcrest option to configure.
  - Replace colors with Oracle colors [Orabug: 32120093]


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Nils Philippsen <nils@tiptoe.de> - 0.1.72-2
changelog:
  - BR: librsvg2-tools for rsvg-convert
  - mark license files as %license
  - use %apiver macro consistently
  - don't ship .gitignore file


author: Pavel Cahyna <pcahyna@redhat.com> - 11.0.1-5
changelog:
  - Make nagios-plugin build conditional and disabled on RHEL to avoid
    generating this subpackage that has missing dependencies
  - Fix flags for annobin in Qt tools (bat & tray-monitor) build
  - Add a forgotten RHEL 8 patch to use openssl crypto (random numbers, hmac,
    hashing functions)
    Resolves: rhbz#1935458


author: Jerome Marchand <jmarchan@redhat.com> - 0.20.0-4
changelog:
  - Don't require bcc-tools by default (#1967550)
  - Add explicit bcc requirement to bcc-tools
  - Build bcc from standard sources


author: Jerome Marchand <jmarchan@redhat.com> - 0.20.0-7
changelog:
  - Sync with latest libbpf (fixes BPF_F_BROADCAST breakages of rhbz#1992430)
  - Fix cpudist, mdflush, readahead and threadsnoop (rhbz#1992430)
  - Handle the renaming of task_struct_>state field
  - Drop tools that relies on features disabled on RHEL


author: Jerome Marchand <jmarchan@redhat.com> - 0.26.0-3
changelog:
  - Rebuild with LLVM 16 (rhbz#2050112)
  - Fix compactsnoop (rhbz#2042236)
  - Fix killsnoop documentation (rhbz#2075500)
  - Fix funcslower (rhbz#2075415)
  - Fix deadlock memory usage issue (rhbz#2050112)
  - Fix nfsslower (rhbz#2180934)
  - Use upstream fix for nfsslower unititialized struct issue


author: Jerome Marchand <jmarchan@redhat.com> - 0.28.0-1
changelog:
  - Rebase to v0.28.0 (RHEL-9976)
  - Rebuild with LLVM 17 (RHEL-10591)
  - Fix bpf-biosnoop out of bound access (RHEL-8664)
  - Fix kvmexit missing VM exit reasons and statistics (RHEL-8702)
  - Fix multi-word array type handling (RHEL-8674)
  - Fix tcpstates -Y (RHEL-8490)
  - Fix bio tools (RHEL-8553)


author: Jerome Marchand <jmarchan@redhat.com> - 0.28.0-5
changelog:
  - Fix libbpf bio tools (RHEL-19368)
  - Add S390x support to libbpf-tools (RHEL-16325)
  - Power enhancements(RHEL-11477)


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.0-3
changelog:
  - Really prevent the loading of compromised headers (RHEL-28769, CVE-2024-2314)
  - Add python3-pyelftools dependency (RHEL-36583)


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to version 0.34.0 (RHEL-78920)
  - Rebuild with LLVM 20 (RHEL-81773)
  - Fix biosnoop pattern option (RHEL-90848)
  - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166)
  - Remove unsupported slaratetop tool (RHEL-78162)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-1.1
changelog:
  - Fix possible serve-stale related crash (CVE-2022-3080)
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-3
changelog:
  - Tighten cache protection against record from forwarders (CVE-2021-25220)
  - Include test of forwarders


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-6
changelog:
  - Bound the amount of work performed for delegations (CVE-2022-2795)
  - Add /usr/lib64/named to bind-chroot (#2129466)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-9
changelog:
  - Prevent flooding with UPDATE requests (CVE-2022-3094)
  - Handle RRSIG queries when server-stale is active (CVE-2022-3736)
  - Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-14.1
changelog:
  - Prevent increased CPU load on large DNS messages (CVE-2023-4408)
  - Prevent assertion failure when nxdomain-redirect is used with
   RFC 1918 reverse zones (CVE-2023-5517)
  - Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
  - Specific recursive query patterns may lead to an out-of-memory
    condition (CVE-2023-6516)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
    CVE-2023-50868)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-18.2
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Resolve CVE-2024-4076
  - Add ability to change runtime limits for max types and records per name


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-31.1
changelog:
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
  - Address various spoofing attacks (CVE-2025-40778)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-34.1
changelog:
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
  - Replace downstream fixes with upstream changes
  - Address various spoofing attacks (CVE-2025-40778)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.27-2
changelog:
  - Disable building of DLZ packages
  - Conflict explicitly with more bind subpackages
  - Merge license subpackage into libs


author: Alex Burmashev <alexander.burmashev@oracle.com> - 32:9.18.29-1.el9_5.1
changelog:
  - Fix CVE-2024-11187 bind: bind9: Many records in the additional section cause CPU exhaustion
  - Fix CVE-2024-12705 bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-6
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-7
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream created test to this regression


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
changelog:
  - Backport nsupdate TLS support into 9.18 (RHEL-76331)
  - Update nsupdate manual about new TLS options
  - Test nsupdate TLS support


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-3
changelog:
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Read HTTPS requests in limited chunks and prevent overload (CVE-2024-12705)


author: David Faust <david.faust@oracle.com> - 2.35.2-9.0.1
changelog:
  - Enable libctf
  - Backport all CTF improvements since 2.35.2 release, upstream commits:
    6ab5b6d0f3a libctf, lookup: fix bounds of pptrtab lookup
    e695879142a libctf, testsuite: fix various warnings in tests
    b62d5edd0a5 libctf: fix handling of CTF symtypetab sections emitted by older GCC
    ea9c2009115 libctf: try several possibilities for linker versioning flags
    bef9ef8ca0f libtool.m4: fix nm BSD flag detection
    bc4b1401129 libtool.m4: augment symcode for Solaris 11
    7d53105d6ed libctf: link against libiberty before linking in libbfd or libctf-nobfd
    ae064303efe libctf, ld: fix test results for upstream GCC
    49da556c658 libctf, include: support an alternative encoding for nonrepresentable types
    8592be8c7d3 ld: do not rely on the exact size of the CTF symtypetabs in test results
    8f7b22ea2a9 libctf: fix ELF-in-BFD checks in the presence of ASAN
    15131809c23 libctf: fix memory leak in a test
    0bd65ce30a8 libctf: don't dereference out-of-bounds locations in the qualifier hashtab
    5226ef61131 libctf: make ctf_bfdopen_ctfsect a debugger entry point
    86f64bf43f7 libctf, serialize: functions with no args have a NULL dtd_vlen
    24c877f9b19 include: always do unsigned left-shift in CTF_SET_STID
    485170cdb1b libctf, dump: do not emit size or alignment if it would error
    e93388417c1 Provide an inline startswith function in bfd.h
    69a284867c7 libctf: support encodings for enums
    e4c78f303df libctf: a couple of small error-handling fixes
    d7b1416ef2c libctf: types: unify code dealing with small-vs-large struct members
    08c428aff4a libctf: eliminate dtd_u, part 5: structs / unions
    77d724a7ecd libctf: eliminate dtd_u, part 4: enums
    986e9e3aa03 libctf: do not corrupt strings across ctf_serialize
    2a05d50e90c libctf: don't lose track of all valid types upon serialization
    755ba58ebef Add install dependencies for ld -> bfd and libctf -> bfd
    81982d20fac libctf: eliminate dtd_u, part 3: functions
    534444b1ee1 libctf: eliminate dtd_u, part 2: arrays
    7879dd88efd libctf: eliminate dtd_u, part 1: int/float/slice
    eefe721eadf libctf: fix GNU style for do {} while
    b9a964318a7 libctf: split up ctf_serialize
    01cbfcba4bc libctf: fix comment above ctf_dict_t
    bf4c3185a5a libctf: split serialization and file writeout into its own file
    087945261c7 libctf: fix some tabdamage and move some code around
    211bcd01333 bfd, ld, libctf: skip zero-refcount strings in CTF string reporting
    8e7e446446b libctf: free ctf_dynsyms properly
    cf6a0b989a5 libctf: fix signed/unsigned comparison confusion
    4659554b280 libctf: minor error-handling fixes
    f5060e56338 libctf: add a deduplicator-specific type mapping table
    478c04a55ee libctf: remove reference to "unconflicted link mode".
    8915c559d40 libctf, include: remove the nondeduplicating CTF linker
    fd12633780a libctf: fix ChangeLog date
    ac36e134d96 libctf: reimplement many _iter iterators in terms of _next
    eaa2913a7ac libctf: ctf_archive_next should set the parent name consistently
    93993f67849 libctf AC_CANONICAL_TARGET
    f4f60336dae libctf, include: find types of symbols by name
    758f590744b libctf: add missing header in BFD ELF check
    cbd8f5bbcc8 libctf: require a Tcl capable of try/catch to run tests
    95148614026 bfd, opcodes, libctf: support --with-included-gettext
    ee87f50b8d2 libctf: always name nameless types "", never NULL
    5dacd11ddcf libctf: fix uninitialized variable in symbol serialization error handling
    caa170493e8 libctf: prohibit nameless ints, floats, typedefs and forwards
    78f28b89e8c libctf: rip out dead code handling typedefs with no name
    35a01a04544 libctf, ld: fix symtypetab and var section population under ld -r
    f04ce15e831 ld: depend on libctf
    26503e2f5ea libctf, create: fix ctf_type_add of structs with unnamed members
    e05a3e5a491 libctf: lookup_by_name: do not return success for nonexistent pointer types
    0814dbfbfcc libctf, testsuite: adjust for real return type of ctf_member_count
    70d3120f322 libctf, testsuite: don't run without a suitable compiler
    b4b6ea46807 libctf, ld: fix formatting of forwards to unions and enums
    abe4ca69a11 libctf: fix lookups of pointers by name in parent dicts
    8769046e5a9 libctf: remove outdated comment about parent dict importing
    6c3a38777b3 libctf, include: support unnamed structure members better
    abed0b0718a libctf: warn about information loss because of unreleased format changes
    9bc769718db libctf: new test of enum lookups with the _next iterator
    c59e30ed172 libctf: new testsuite
    1038406a8f6 libctf: rip out BFD_DEPENDENCIES / BFD_LIBADD
    37002871ac2 libctf, ld: dump enums: generally improve dump formatting
    ffeece6ac2d libctf, ld: prohibit getting the size or alignment of forwards
    91e7ce2fd7b libctf, ld: more dumper improvements
    57f97d0e6dd libctf, ld: CTF dumper changes for consistency
    b09ad6eae98 libctf: do not print array declarators backwards
    a7c23ac9317 In libctf, make AC_CONFIG_MACRO_DIR consistent with ACLOCAL_AMFLAGS
    e8cda209052 libctf: Pass format argument to asprintf
    96c61be508f binutils: readelf: support CTF dicts with non-native-endian symtabs
    53651de80f8 libctf, include: support foreign-endianness symtabs with CTF
    ef21dd3bcff libctf: do not crash when CTF symbol or variable linking fails
    8f235c90a28 libctf: error-handling fixes
    97a2a623d01 libctf, include: add ctf_getsymsect and ctf_getstrsect
    2c78e92523a libctf, include: CTF-archive-wide symbol lookup
    0e28ade476e libctf, ld: properly deduplicate function types
    0ad70c536ab ld, ctf: new and adjusted CTF tests due to func info / object data sections
    4665e895c37 libctf: adjust dumper for symtypetab changes
    1136c379718 libctf: symbol type linking support
    3d16b64e28a bfd, include, ld, binutils, libctf: CTF should use the dynstr/sym
    83d59285d54 objdump, readelf: Report errors from CTF archive iteration
    ae41200ba80 libctf, include, binutils, gdb: rename CTF-opening functions
    139633c307e libctf, include, binutils, gdb, ld: rename ctf_file_t to ctf_dict_t
    0d01fbe64f6 Remove libctf/mkerrors.sed
    5e9b84f7a2e binutils, ld: dequote libctf error messages
    926c9e76657 libctf, binutils, include, ld: gettextize and improve error handling
    555adca2e3b libctf: compilation failure on MinGW due to missing errno values
    50500ecfefd libctf: compilation failure on MinGW due to missing errno values
    8c419a91d76 libctf: fixes for systems on which sizeof (void *) > sizeof (long)
    734c894234e libctf: fix isspace casts
    4533ed564d6 libctf, binutils: fix big-endian libctf archive opening
    62cdd7b18fc ld, testsuite: do not run CTF tests at all on non-ELF for now
    fa03171fb46 ld: do not produce one empty output .ctf section for every input .ctf
    7cdfc3462fb ld, testsuite: only run CTF tests when ld and GCC support CTF
    b1b33524ad3 ld: new CTF testsuite
    0b884151088 binutils, testsuite: allow compilation before doing run_dump_test
    5dba6f05b7b ld: new options --ctf-variables and --ctf-share-types
    f320bba50ff ld: Reformat CTF errors into warnings.
    3dd6b890b4e binutils: objdump: ctf: drop incorrect linefeeds
    662df3c3f14 libctf, link: tie in the deduplicating linker
    e3e8411bec4 libctf, link: add CTF_LINK_OMIT_VARIABLES_SECTION
    0f0c11f7fc9 libctf, dedup: add deduplicator
    a9b98702066 libctf, dedup: add new configure option --enable-libctf-hash-debugging
    1f2e8b5b87d libctf: add SHA-1 support for libctf
    6dd2819ffc2 libctf, link: add the ability to filter out variables from the link
    19d4b1addca libctf, link: fix spurious conflicts of variables in the variable section
    5f54462c6ab libctf, link: redo cu-mapping handling
    e3f17159e26 libctf, link: fix ctf_link_write fd leak
    8d2229ad1e7 libctf, link: add lazy linking: clean up input members: err/warn cleanup
    e148b730131 libctf: drop error-prone ctf_strerror
    1fa7a0c24e7 libctf: sort out potential refcount loops
    3166467b00a libctf: rename the type_mapping_key to type_key
    43a61d7d3e6 libctf: check for vasprintf
    ac2ff760303 libctf, archive: fix bad error message
    d50c08025d4 libctf, open: fix opening CTF in binaries with no symtab
    70447401740 libctf, dump: fix slice dumping
    8e795b46f58 libctf, dump: migrate towards dumping errors rather than truncation
    b255b35feb8 libctf, decl: avoid leaks of the formatted string on error
    c6e9a1e576c libctf, types: enhance ctf_type_aname to print function arg types
    8b37e7b63ed libctf, ld, binutils: add textual error/warning reporting for libctf
    b7190c821e5 libctf, types: ensure the emission of ECTF_NOPARENT
    ec388c16cd4 libctf: error out on corrupt CTF with invalid header flags
    67d4cc671b7 libctf: pass the thunk down properly when wrapping qsort_r
    e28591b3dfc libctf, next, hash: add dynhash and dynset _next iteration
    688d28f6214 libctf, next: introduce new class of easier-to-use iterators
    2399827bfa1 libctf: add ctf_ref
    9850ce4d7bb libctf: add ctf_forwardable_kind
    2c9ca36be17 libctf: move existing inlines into ctf-inlines.h
    77648241384 libctf, hash: introduce the ctf_dynset
    a49c6c6a656 libctf, hash: save per-item space when no key/item freeing function
    5ceee3dba34 libctf, hash: improve insertion of existing keys into dynhashes
    809f6eb3321 libctf: add new dynhash functions
    469e75b621f libctf: fix __extension__ with non-GNU C compilers
    9c23dfa5aa4 libctf: add ctf_archive_count
    e0325e2cede libctf: add ctf_member_count
    9b15cbb7891 libctf: add ctf_type_kind_forwarded
    01d9317436c libctf: add ctf_type_name_raw
    5ec7465fec8 libctf: having debugging enabled is unlikely
    601e455b758 libctf, archive: stop ctf_arc_bufopen triggering crazy unmaps
    96e3ec29664 libctf, types: ints, floats and typedefs with no name are invalid
    502e838ed96 libctf, types: support slices of anything terminating in an int
    dd987f00430 libctf, create: empty dicts are dirty to start with
    f47ca311356 libctf, create: fix addition of anonymous struct/union members
    ab769488e75 libctf, create: member names of "" and NULL should be the same
    2484ca436ac libctf, open: drop unnecessary historical wart around forwards
    437061996d8 libctf, types: allow ctf_type_reference of dynamic slices
    9943fa3a732 libctf, create: add explicit casts for variables' and slices' types
    afd78bd6f0a libctf, create: do not corrupt function types' arglists at insertion time
    2361f1c8591 libctf, create: support addition of references to the unimplemented type
    7eea9d3bdb0 libctf: restructure error handling to reduce relocations
    b64751cf0bc include, libctf: typo fixes
    df16e041dea Fix problems in CTF handling code exposed by the Coverity static analysis tool.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.35.2-17.0.1
changelog:
  - Forward-port Oracle patches from 2.35.2-9.0.1 to 2.35.2-17.0.1
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.35.2-24.0.1
changelog:
  - Forward-port Oracle patches from 2.35.2-17.0.1
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.35.2-37.0.1
changelog:
  - Forward-port Oracle patches from 2.35.2-24.0.1
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Nick Alcock <nick.alcock@oracle.com> - 2.35.2-37.0.2
changelog:
  - Refresh CTF patches from upstream.
    - Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
    - Various obscure install-time linking problems
    - Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
      a CTF member name, not a section name
    - Improve dumping of types when some types elicit a libctf error
    - Put functions as well as variables in the (misnamed) CTF variable section
    - Improve handling of various forms of corrupted CTF input.
    - Fix errors in comments in <ctf.h> and <ctf-api.h>
    - Make CTF dicts reproducible even when conflicting types are seen
    - Prevent corruption of output when linking multiple object files derived from
      the same source
    - Minor compiler warning and portability fixes
    - Fix (unlikely) crash-inducing uninitialized memory access and wild
      pointer overwrite when linking
    - Fix the reported offsets of fields within unnamed structs/unions
      [Orabug: 35191322]
    - Fix a number of places where operations carried out on child dicts
      that errored were producing errors on the parent, not the child,
      so the caller never noticed them


author: Yara Ahmad <yahmad@redhat.com> - 2.35.2-40
changelog:
  - Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information.  (#2164701)


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.35.2-42.0.2.1
changelog:
  - Do not set version info on unversion symbols.  (RHEL-22601)
    - Reviewed by: Elena Zannoni <elena.zannoni@oracle.com>
    Oracle history:
    February-06-2024 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-42.0.2
    - Refresh CTF patches from upstream (2.42).
      - Fix more cases where operations on child dicts could leave errors on
        the parent, this time associated with CTF dict creation (upstream PR
        libctf/30985).
      - Fix the cu-mapped link feature (not exposed by GNU ld) to use only
        the last mapping provided for a given translation unit, rather than a
        random mix of first and last
    - Fix dependencies of libctf.so and libctf-nobfd.so to cite the libraries
      the code actually depends on.  (Fixes observed link problems with
      libctf-nobfd.so needing extra libraries on the link line versus upstream:
      libctf.so changes done purely for consistency.)
    - Add upstream commit 2e93abb858ae, allowing NONE relocs against local absolute
      symbols on x86-64.  (Upstream PR ld/31047).
    October-10-2023 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.35.2-42.0.1
    - Forward-port Oracle patches to 2.35.2-42.
    August-04-2023 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-37.0.2
    - Refresh CTF patches from upstream.
      - Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
      - Various obscure install-time linking problems
      - Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
        a CTF member name, not a section name
      - Improve dumping of types when some types elicit a libctf error
      - Put functions as well as variables in the (misnamed) CTF variable section
      - Improve handling of various forms of corrupted CTF input.
      - Fix errors in comments in <ctf.h> and <ctf-api.h>
      - Make CTF dicts reproducible even when conflicting types are seen
      - Prevent corruption of output when linking multiple object files derived from
        the same source
      - Minor compiler warning and portability fixes
      - Fix (unlikely) crash-inducing uninitialized memory access and wild
        pointer overwrite when linking
      - Fix the reported offsets of fields within unnamed structs/unions
        [Orabug: 35191322]
      - Fix a number of places where operations carried out on child dicts
        that errored were producing errors on the parent, not the child,
        so the caller never noticed them
    March-28-2023 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.35.2-37.0.1
    - Forward-port Oracle patches from 2.35.2-24.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 David Faust  <david.faust@oracle.com> - 2.35.2-17.0.1
    - Forward-port Oracle patches from 2.35.2-9.0.1 to 2.35.2-17.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-23-2021 David Faust  <david.faust@oracle.com> - 2.35.2-9.0.1
    - Enable libctf
    - Backport all CTF improvements since 2.35.2 release, upstream commits:
      6ab5b6d0f3a libctf, lookup: fix bounds of pptrtab lookup
      e695879142a libctf, testsuite: fix various warnings in tests
      b62d5edd0a5 libctf: fix handling of CTF symtypetab sections emitted by older GCC
      ea9c2009115 libctf: try several possibilities for linker versioning flags
      bef9ef8ca0f libtool.m4: fix nm BSD flag detection
      bc4b1401129 libtool.m4: augment symcode for Solaris 11
      7d53105d6ed libctf: link against libiberty before linking in libbfd or libctf-nobfd
      ae064303efe libctf, ld: fix test results for upstream GCC
      49da556c658 libctf, include: support an alternative encoding for nonrepresentable types
      8592be8c7d3 ld: do not rely on the exact size of the CTF symtypetabs in test results
      8f7b22ea2a9 libctf: fix ELF-in-BFD checks in the presence of ASAN
      15131809c23 libctf: fix memory leak in a test
      0bd65ce30a8 libctf: don't dereference out-of-bounds locations in the qualifier hashtab
      5226ef61131 libctf: make ctf_bfdopen_ctfsect a debugger entry point
      86f64bf43f7 libctf, serialize: functions with no args have a NULL dtd_vlen
      24c877f9b19 include: always do unsigned left-shift in CTF_SET_STID
      485170cdb1b libctf, dump: do not emit size or alignment if it would error
      e93388417c1 Provide an inline startswith function in bfd.h
      69a284867c7 libctf: support encodings for enums
      e4c78f303df libctf: a couple of small error-handling fixes
      d7b1416ef2c libctf: types: unify code dealing with small-vs-large struct members
      08c428aff4a libctf: eliminate dtd_u, part 5: structs / unions
      77d724a7ecd libctf: eliminate dtd_u, part 4: enums
      986e9e3aa03 libctf: do not corrupt strings across ctf_serialize
      2a05d50e90c libctf: don't lose track of all valid types upon serialization
      755ba58ebef Add install dependencies for ld -> bfd and libctf -> bfd
      81982d20fac libctf: eliminate dtd_u, part 3: functions
      534444b1ee1 libctf: eliminate dtd_u, part 2: arrays
      7879dd88efd libctf: eliminate dtd_u, part 1: int/float/slice
      eefe721eadf libctf: fix GNU style for do {} while
      b9a964318a7 libctf: split up ctf_serialize
      01cbfcba4bc libctf: fix comment above ctf_dict_t
      bf4c3185a5a libctf: split serialization and file writeout into its own file
      087945261c7 libctf: fix some tabdamage and move some code around
      211bcd01333 bfd, ld, libctf: skip zero-refcount strings in CTF string reporting
      8e7e446446b libctf: free ctf_dynsyms properly
      cf6a0b989a5 libctf: fix signed/unsigned comparison confusion
      4659554b280 libctf: minor error-handling fixes
      f5060e56338 libctf: add a deduplicator-specific type mapping table
      478c04a55ee libctf: remove reference to "unconflicted link mode".
      8915c559d40 libctf, include: remove the nondeduplicating CTF linker
      fd12633780a libctf: fix ChangeLog date
      ac36e134d96 libctf: reimplement many _iter iterators in terms of _next
      eaa2913a7ac libctf: ctf_archive_next should set the parent name consistently
      93993f67849 libctf AC_CANONICAL_TARGET
      f4f60336dae libctf, include: find types of symbols by name
      758f590744b libctf: add missing header in BFD ELF check
      cbd8f5bbcc8 libctf: require a Tcl capable of try/catch to run tests
      95148614026 bfd, opcodes, libctf: support --with-included-gettext
      ee87f50b8d2 libctf: always name nameless types "", never NULL
      5dacd11ddcf libctf: fix uninitialized variable in symbol serialization error handling
      caa170493e8 libctf: prohibit nameless ints, floats, typedefs and forwards
      78f28b89e8c libctf: rip out dead code handling typedefs with no name
      35a01a04544 libctf, ld: fix symtypetab and var section population under ld -r
      f04ce15e831 ld: depend on libctf
      26503e2f5ea libctf, create: fix ctf_type_add of structs with unnamed members
      e05a3e5a491 libctf: lookup_by_name: do not return success for nonexistent pointer types
      0814dbfbfcc libctf, testsuite: adjust for real return type of ctf_member_count
      70d3120f322 libctf, testsuite: don't run without a suitable compiler
      b4b6ea46807 libctf, ld: fix formatting of forwards to unions and enums
      abe4ca69a11 libctf: fix lookups of pointers by name in parent dicts
      8769046e5a9 libctf: remove outdated comment about parent dict importing
      6c3a38777b3 libctf, include: support unnamed structure members better
      abed0b0718a libctf: warn about information loss because of unreleased format changes
      9bc769718db libctf: new test of enum lookups with the _next iterator
      c59e30ed172 libctf: new testsuite
      1038406a8f6 libctf: rip out BFD_DEPENDENCIES / BFD_LIBADD
      37002871ac2 libctf, ld: dump enums: generally improve dump formatting
      ffeece6ac2d libctf, ld: prohibit getting the size or alignment of forwards
      91e7ce2fd7b libctf, ld: more dumper improvements
      57f97d0e6dd libctf, ld: CTF dumper changes for consistency
      b09ad6eae98 libctf: do not print array declarators backwards
      a7c23ac9317 In libctf, make AC_CONFIG_MACRO_DIR consistent with ACLOCAL_AMFLAGS
      e8cda209052 libctf: Pass format argument to asprintf
      96c61be508f binutils: readelf: support CTF dicts with non-native-endian symtabs
      53651de80f8 libctf, include: support foreign-endianness symtabs with CTF
      ef21dd3bcff libctf: do not crash when CTF symbol or variable linking fails
      8f235c90a28 libctf: error-handling fixes
      97a2a623d01 libctf, include: add ctf_getsymsect and ctf_getstrsect
      2c78e92523a libctf, include: CTF-archive-wide symbol lookup
      0e28ade476e libctf, ld: properly deduplicate function types
      0ad70c536ab ld, ctf: new and adjusted CTF tests due to func info / object data sections
      4665e895c37 libctf: adjust dumper for symtypetab changes
      1136c379718 libctf: symbol type linking support
      3d16b64e28a bfd, include, ld, binutils, libctf: CTF should use the dynstr/sym
      83d59285d54 objdump, readelf: Report errors from CTF archive iteration
      ae41200ba80 libctf, include, binutils, gdb: rename CTF-opening functions
      139633c307e libctf, include, binutils, gdb, ld: rename ctf_file_t to ctf_dict_t
      0d01fbe64f6 Remove libctf/mkerrors.sed
      5e9b84f7a2e binutils, ld: dequote libctf error messages
      926c9e76657 libctf, binutils, include, ld: gettextize and improve error handling
      555adca2e3b libctf: compilation failure on MinGW due to missing errno values
      50500ecfefd libctf: compilation failure on MinGW due to missing errno values
      8c419a91d76 libctf: fixes for systems on which sizeof (void *) > sizeof (long)
      734c894234e libctf: fix isspace casts
      4533ed564d6 libctf, binutils: fix big-endian libctf archive opening
      62cdd7b18fc ld, testsuite: do not run CTF tests at all on non-ELF for now
      fa03171fb46 ld: do not produce one empty output .ctf section for every input .ctf
      7cdfc3462fb ld, testsuite: only run CTF tests when ld and GCC support CTF
      b1b33524ad3 ld: new CTF testsuite
      0b884151088 binutils, testsuite: allow compilation before doing run_dump_test
      5dba6f05b7b ld: new options --ctf-variables and --ctf-share-types
      f320bba50ff ld: Reformat CTF errors into warnings.
      3dd6b890b4e binutils: objdump: ctf: drop incorrect linefeeds
      662df3c3f14 libctf, link: tie in the deduplicating linker
      e3e8411bec4 libctf, link: add CTF_LINK_OMIT_VARIABLES_SECTION
      0f0c11f7fc9 libctf, dedup: add deduplicator
      a9b98702066 libctf, dedup: add new configure option --enable-libctf-hash-debugging
      1f2e8b5b87d libctf: add SHA-1 support for libctf
      6dd2819ffc2 libctf, link: add the ability to filter out variables from the link
      19d4b1addca libctf, link: fix spurious conflicts of variables in the variable section
      5f54462c6ab libctf, link: redo cu-mapping handling
      e3f17159e26 libctf, link: fix ctf_link_write fd leak
      8d2229ad1e7 libctf, link: add lazy linking: clean up input members: err/warn cleanup
      e148b730131 libctf: drop error-prone ctf_strerror
      1fa7a0c24e7 libctf: sort out potential refcount loops
      3166467b00a libctf: rename the type_mapping_key to type_key
      43a61d7d3e6 libctf: check for vasprintf
      ac2ff760303 libctf, archive: fix bad error message
      d50c08025d4 libctf, open: fix opening CTF in binaries with no symtab
      70447401740 libctf, dump: fix slice dumping
      8e795b46f58 libctf, dump: migrate towards dumping errors rather than truncation
      b255b35feb8 libctf, decl: avoid leaks of the formatted string on error
      c6e9a1e576c libctf, types: enhance ctf_type_aname to print function arg types
      8b37e7b63ed libctf, ld, binutils: add textual error/warning reporting for libctf
      b7190c821e5 libctf, types: ensure the emission of ECTF_NOPARENT
      ec388c16cd4 libctf: error out on corrupt CTF with invalid header flags
      67d4cc671b7 libctf: pass the thunk down properly when wrapping qsort_r
      e28591b3dfc libctf, next, hash: add dynhash and dynset _next iteration
      688d28f6214 libctf, next: introduce new class of easier-to-use iterators
      2399827bfa1 libctf: add ctf_ref
      9850ce4d7bb libctf: add ctf_forwardable_kind
      2c9ca36be17 libctf: move existing inlines into ctf-inlines.h
      77648241384 libctf, hash: introduce the ctf_dynset
      a49c6c6a656 libctf, hash: save per-item space when no key/item freeing function
      5ceee3dba34 libctf, hash: improve insertion of existing keys into dynhashes
      809f6eb3321 libctf: add new dynhash functions
      469e75b621f libctf: fix __extension__ with non-GNU C compilers
      9c23dfa5aa4 libctf: add ctf_archive_count
      e0325e2cede libctf: add ctf_member_count
      9b15cbb7891 libctf: add ctf_type_kind_forwarded
      01d9317436c libctf: add ctf_type_name_raw
      5ec7465fec8 libctf: having debugging enabled is unlikely
      601e455b758 libctf, archive: stop ctf_arc_bufopen triggering crazy unmaps
      96e3ec29664 libctf, types: ints, floats and typedefs with no name are invalid
      502e838ed96 libctf, types: support slices of anything terminating in an int
      dd987f00430 libctf, create: empty dicts are dirty to start with
      f47ca311356 libctf, create: fix addition of anonymous struct/union members
      ab769488e75 libctf, create: member names of "" and NULL should be the same
      2484ca436ac libctf, open: drop unnecessary historical wart around forwards
      437061996d8 libctf, types: allow ctf_type_reference of dynamic slices
      9943fa3a732 libctf, create: add explicit casts for variables' and slices' types
      afd78bd6f0a libctf, create: do not corrupt function types' arglists at insertion time
      2361f1c8591 libctf, create: support addition of references to the unimplemented type
      7eea9d3bdb0 libctf: restructure error handling to reduce relocations
      b64751cf0bc include, libctf: typo fixes
      df16e041dea Fix problems in CTF handling code exposed by the Coverity static analysis tool.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.35.2-43.0.1
changelog:
  - Forward-port Oracle patches to 2.35.2-43.
    Oracle history:
    March-07-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-42.0.2.1
    - Do not set version info on unversion symbols.  (RHEL-22601)
    - Reviewed by: Elena Zannoni <elena.zannoni@oracle.com>
    February-06-2024 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-42.0.2
    - Refresh CTF patches from upstream (2.42).
      - Fix more cases where operations on child dicts could leave errors on
        the parent, this time associated with CTF dict creation (upstream PR
        libctf/30985).
      - Fix the cu-mapped link feature (not exposed by GNU ld) to use only
        the last mapping provided for a given translation unit, rather than a
        random mix of first and last
    - Fix dependencies of libctf.so and libctf-nobfd.so to cite the libraries
      the code actually depends on.  (Fixes observed link problems with
      libctf-nobfd.so needing extra libraries on the link line versus upstream:
      libctf.so changes done purely for consistency.)
    - Add upstream commit 2e93abb858ae, allowing NONE relocs against local absolute
      symbols on x86-64.  (Upstream PR ld/31047).
    October-10-2023 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.35.2-42.0.1
    - Forward-port Oracle patches to 2.35.2-42.
    August-04-2023 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-37.0.2
    - Refresh CTF patches from upstream.
      - Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
      - Various obscure install-time linking problems
      - Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
        a CTF member name, not a section name
      - Improve dumping of types when some types elicit a libctf error
      - Put functions as well as variables in the (misnamed) CTF variable section
      - Improve handling of various forms of corrupted CTF input.
      - Fix errors in comments in <ctf.h> and <ctf-api.h>
      - Make CTF dicts reproducible even when conflicting types are seen
      - Prevent corruption of output when linking multiple object files derived from
        the same source
      - Minor compiler warning and portability fixes
      - Fix (unlikely) crash-inducing uninitialized memory access and wild
        pointer overwrite when linking
      - Fix the reported offsets of fields within unnamed structs/unions
        [Orabug: 35191322]
      - Fix a number of places where operations carried out on child dicts
        that errored were producing errors on the parent, not the child,
        so the caller never noticed them
    March-28-2023 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.35.2-37.0.1
    - Forward-port Oracle patches from 2.35.2-24.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 David Faust  <david.faust@oracle.com> - 2.35.2-17.0.1
    - Forward-port Oracle patches from 2.35.2-9.0.1 to 2.35.2-17.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-23-2021 David Faust  <david.faust@oracle.com> - 2.35.2-9.0.1
    - Enable libctf
    - Backport all CTF improvements since 2.35.2 release, upstream commits:
      6ab5b6d0f3a libctf, lookup: fix bounds of pptrtab lookup
      e695879142a libctf, testsuite: fix various warnings in tests
      b62d5edd0a5 libctf: fix handling of CTF symtypetab sections emitted by older GCC
      ea9c2009115 libctf: try several possibilities for linker versioning flags
      bef9ef8ca0f libtool.m4: fix nm BSD flag detection
      bc4b1401129 libtool.m4: augment symcode for Solaris 11
      7d53105d6ed libctf: link against libiberty before linking in libbfd or libctf-nobfd
      ae064303efe libctf, ld: fix test results for upstream GCC
      49da556c658 libctf, include: support an alternative encoding for nonrepresentable types
      8592be8c7d3 ld: do not rely on the exact size of the CTF symtypetabs in test results
      8f7b22ea2a9 libctf: fix ELF-in-BFD checks in the presence of ASAN
      15131809c23 libctf: fix memory leak in a test
      0bd65ce30a8 libctf: don't dereference out-of-bounds locations in the qualifier hashtab
      5226ef61131 libctf: make ctf_bfdopen_ctfsect a debugger entry point
      86f64bf43f7 libctf, serialize: functions with no args have a NULL dtd_vlen
      24c877f9b19 include: always do unsigned left-shift in CTF_SET_STID
      485170cdb1b libctf, dump: do not emit size or alignment if it would error
      e93388417c1 Provide an inline startswith function in bfd.h
      69a284867c7 libctf: support encodings for enums
      e4c78f303df libctf: a couple of small error-handling fixes
      d7b1416ef2c libctf: types: unify code dealing with small-vs-large struct members
      08c428aff4a libctf: eliminate dtd_u, part 5: structs / unions
      77d724a7ecd libctf: eliminate dtd_u, part 4: enums
      986e9e3aa03 libctf: do not corrupt strings across ctf_serialize
      2a05d50e90c libctf: don't lose track of all valid types upon serialization
      755ba58ebef Add install dependencies for ld -> bfd and libctf -> bfd
      81982d20fac libctf: eliminate dtd_u, part 3: functions
      534444b1ee1 libctf: eliminate dtd_u, part 2: arrays
      7879dd88efd libctf: eliminate dtd_u, part 1: int/float/slice
      eefe721eadf libctf: fix GNU style for do {} while
      b9a964318a7 libctf: split up ctf_serialize
      01cbfcba4bc libctf: fix comment above ctf_dict_t
      bf4c3185a5a libctf: split serialization and file writeout into its own file
      087945261c7 libctf: fix some tabdamage and move some code around
      211bcd01333 bfd, ld, libctf: skip zero-refcount strings in CTF string reporting
      8e7e446446b libctf: free ctf_dynsyms properly
      cf6a0b989a5 libctf: fix signed/unsigned comparison confusion
      4659554b280 libctf: minor error-handling fixes
      f5060e56338 libctf: add a deduplicator-specific type mapping table
      478c04a55ee libctf: remove reference to "unconflicted link mode".
      8915c559d40 libctf, include: remove the nondeduplicating CTF linker
      fd12633780a libctf: fix ChangeLog date
      ac36e134d96 libctf: reimplement many _iter iterators in terms of _next
      eaa2913a7ac libctf: ctf_archive_next should set the parent name consistently
      93993f67849 libctf AC_CANONICAL_TARGET
      f4f60336dae libctf, include: find types of symbols by name
      758f590744b libctf: add missing header in BFD ELF check
      cbd8f5bbcc8 libctf: require a Tcl capable of try/catch to run tests
      95148614026 bfd, opcodes, libctf: support --with-included-gettext
      ee87f50b8d2 libctf: always name nameless types "", never NULL
      5dacd11ddcf libctf: fix uninitialized variable in symbol serialization error handling
      caa170493e8 libctf: prohibit nameless ints, floats, typedefs and forwards
      78f28b89e8c libctf: rip out dead code handling typedefs with no name
      35a01a04544 libctf, ld: fix symtypetab and var section population under ld -r
      f04ce15e831 ld: depend on libctf
      26503e2f5ea libctf, create: fix ctf_type_add of structs with unnamed members
      e05a3e5a491 libctf: lookup_by_name: do not return success for nonexistent pointer types
      0814dbfbfcc libctf, testsuite: adjust for real return type of ctf_member_count
      70d3120f322 libctf, testsuite: don't run without a suitable compiler
      b4b6ea46807 libctf, ld: fix formatting of forwards to unions and enums
      abe4ca69a11 libctf: fix lookups of pointers by name in parent dicts
      8769046e5a9 libctf: remove outdated comment about parent dict importing
      6c3a38777b3 libctf, include: support unnamed structure members better
      abed0b0718a libctf: warn about information loss because of unreleased format changes
      9bc769718db libctf: new test of enum lookups with the _next iterator
      c59e30ed172 libctf: new testsuite
      1038406a8f6 libctf: rip out BFD_DEPENDENCIES / BFD_LIBADD
      37002871ac2 libctf, ld: dump enums: generally improve dump formatting
      ffeece6ac2d libctf, ld: prohibit getting the size or alignment of forwards
      91e7ce2fd7b libctf, ld: more dumper improvements
      57f97d0e6dd libctf, ld: CTF dumper changes for consistency
      b09ad6eae98 libctf: do not print array declarators backwards
      a7c23ac9317 In libctf, make AC_CONFIG_MACRO_DIR consistent with ACLOCAL_AMFLAGS
      e8cda209052 libctf: Pass format argument to asprintf
      96c61be508f binutils: readelf: support CTF dicts with non-native-endian symtabs
      53651de80f8 libctf, include: support foreign-endianness symtabs with CTF
      ef21dd3bcff libctf: do not crash when CTF symbol or variable linking fails
      8f235c90a28 libctf: error-handling fixes
      97a2a623d01 libctf, include: add ctf_getsymsect and ctf_getstrsect
      2c78e92523a libctf, include: CTF-archive-wide symbol lookup
      0e28ade476e libctf, ld: properly deduplicate function types
      0ad70c536ab ld, ctf: new and adjusted CTF tests due to func info / object data sections
      4665e895c37 libctf: adjust dumper for symtypetab changes
      1136c379718 libctf: symbol type linking support
      3d16b64e28a bfd, include, ld, binutils, libctf: CTF should use the dynstr/sym
      83d59285d54 objdump, readelf: Report errors from CTF archive iteration
      ae41200ba80 libctf, include, binutils, gdb: rename CTF-opening functions
      139633c307e libctf, include, binutils, gdb, ld: rename ctf_file_t to ctf_dict_t
      0d01fbe64f6 Remove libctf/mkerrors.sed
      5e9b84f7a2e binutils, ld: dequote libctf error messages
      926c9e76657 libctf, binutils, include, ld: gettextize and improve error handling
      555adca2e3b libctf: compilation failure on MinGW due to missing errno values
      50500ecfefd libctf: compilation failure on MinGW due to missing errno values
      8c419a91d76 libctf: fixes for systems on which sizeof (void *) > sizeof (long)
      734c894234e libctf: fix isspace casts
      4533ed564d6 libctf, binutils: fix big-endian libctf archive opening
      62cdd7b18fc ld, testsuite: do not run CTF tests at all on non-ELF for now
      fa03171fb46 ld: do not produce one empty output .ctf section for every input .ctf
      7cdfc3462fb ld, testsuite: only run CTF tests when ld and GCC support CTF
      b1b33524ad3 ld: new CTF testsuite
      0b884151088 binutils, testsuite: allow compilation before doing run_dump_test
      5dba6f05b7b ld: new options --ctf-variables and --ctf-share-types
      f320bba50ff ld: Reformat CTF errors into warnings.
      3dd6b890b4e binutils: objdump: ctf: drop incorrect linefeeds
      662df3c3f14 libctf, link: tie in the deduplicating linker
      e3e8411bec4 libctf, link: add CTF_LINK_OMIT_VARIABLES_SECTION
      0f0c11f7fc9 libctf, dedup: add deduplicator
      a9b98702066 libctf, dedup: add new configure option --enable-libctf-hash-debugging
      1f2e8b5b87d libctf: add SHA-1 support for libctf
      6dd2819ffc2 libctf, link: add the ability to filter out variables from the link
      19d4b1addca libctf, link: fix spurious conflicts of variables in the variable section
      5f54462c6ab libctf, link: redo cu-mapping handling
      e3f17159e26 libctf, link: fix ctf_link_write fd leak
      8d2229ad1e7 libctf, link: add lazy linking: clean up input members: err/warn cleanup
      e148b730131 libctf: drop error-prone ctf_strerror
      1fa7a0c24e7 libctf: sort out potential refcount loops
      3166467b00a libctf: rename the type_mapping_key to type_key
      43a61d7d3e6 libctf: check for vasprintf
      ac2ff760303 libctf, archive: fix bad error message
      d50c08025d4 libctf, open: fix opening CTF in binaries with no symtab
      70447401740 libctf, dump: fix slice dumping
      8e795b46f58 libctf, dump: migrate towards dumping errors rather than truncation
      b255b35feb8 libctf, decl: avoid leaks of the formatted string on error
      c6e9a1e576c libctf, types: enhance ctf_type_aname to print function arg types
      8b37e7b63ed libctf, ld, binutils: add textual error/warning reporting for libctf
      b7190c821e5 libctf, types: ensure the emission of ECTF_NOPARENT
      ec388c16cd4 libctf: error out on corrupt CTF with invalid header flags
      67d4cc671b7 libctf: pass the thunk down properly when wrapping qsort_r
      e28591b3dfc libctf, next, hash: add dynhash and dynset _next iteration
      688d28f6214 libctf, next: introduce new class of easier-to-use iterators
      2399827bfa1 libctf: add ctf_ref
      9850ce4d7bb libctf: add ctf_forwardable_kind
      2c9ca36be17 libctf: move existing inlines into ctf-inlines.h
      77648241384 libctf, hash: introduce the ctf_dynset
      a49c6c6a656 libctf, hash: save per-item space when no key/item freeing function
      5ceee3dba34 libctf, hash: improve insertion of existing keys into dynhashes
      809f6eb3321 libctf: add new dynhash functions
      469e75b621f libctf: fix __extension__ with non-GNU C compilers
      9c23dfa5aa4 libctf: add ctf_archive_count
      e0325e2cede libctf: add ctf_member_count
      9b15cbb7891 libctf: add ctf_type_kind_forwarded
      01d9317436c libctf: add ctf_type_name_raw
      5ec7465fec8 libctf: having debugging enabled is unlikely
      601e455b758 libctf, archive: stop ctf_arc_bufopen triggering crazy unmaps
      96e3ec29664 libctf, types: ints, floats and typedefs with no name are invalid
      502e838ed96 libctf, types: support slices of anything terminating in an int
      dd987f00430 libctf, create: empty dicts are dirty to start with
      f47ca311356 libctf, create: fix addition of anonymous struct/union members
      ab769488e75 libctf, create: member names of "" and NULL should be the same
      2484ca436ac libctf, open: drop unnecessary historical wart around forwards
      437061996d8 libctf, types: allow ctf_type_reference of dynamic slices
      9943fa3a732 libctf, create: add explicit casts for variables' and slices' types
      afd78bd6f0a libctf, create: do not corrupt function types' arglists at insertion time
      2361f1c8591 libctf, create: support addition of references to the unimplemented type
      7eea9d3bdb0 libctf: restructure error handling to reduce relocations
      b64751cf0bc include, libctf: typo fixes
      df16e041dea Fix problems in CTF handling code exposed by the Coverity static analysis tool.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Nick Clifton <nickc@redhat.com> - 2.35.2-51
changelog:
  - Backport commit 88141209e25ce19473ec07d7aac09cc68f06a630 to fix stripping lld linked binaries.  (RHEL-50536)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-52
changelog:
  - Backport commit 6fde04116b4b to stop objcopy from crashing when copying non-PE binaries into a PE output.  (RHEL-48882)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-53
changelog:
  - Backport commit bc5baa9f13ff to ensure that objcopy does not loose the minimum section alignment for PE binaries.  (RHEL-30268)


author: Bruce McCulloch <bruce.mcculloch@oracle.com> - 2.35.2-54.0.1
changelog:
  - Forward-port Oracle patches to 2.35.2-54.
    Oracle history:
    March-27-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-43.0.1
     - Forward-port Oracle patches to 2.35.2-43.
    March-07-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-42.0.2.1
    - Do not set version info on unversion symbols.  (RHEL-22601)
    - Reviewed by: Elena Zannoni <elena.zannoni@oracle.com>
    February-06-2024 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-42.0.2
    - Refresh CTF patches from upstream (2.42).
      - Fix more cases where operations on child dicts could leave errors on
        the parent, this time associated with CTF dict creation (upstream PR
        libctf/30985).
      - Fix the cu-mapped link feature (not exposed by GNU ld) to use only
        the last mapping provided for a given translation unit, rather than a
        random mix of first and last
    - Fix dependencies of libctf.so and libctf-nobfd.so to cite the libraries
      the code actually depends on.  (Fixes observed link problems with
      libctf-nobfd.so needing extra libraries on the link line versus upstream:
      libctf.so changes done purely for consistency.)
    - Add upstream commit 2e93abb858ae, allowing NONE relocs against local absolute
      symbols on x86-64.  (Upstream PR ld/31047).
    October-10-2023 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.35.2-42.0.1
    - Forward-port Oracle patches to 2.35.2-42.
    August-04-2023 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-37.0.2
    - Refresh CTF patches from upstream.
      - Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
      - Various obscure install-time linking problems
      - Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
        a CTF member name, not a section name
      - Improve dumping of types when some types elicit a libctf error
      - Put functions as well as variables in the (misnamed) CTF variable section
      - Improve handling of various forms of corrupted CTF input.
      - Fix errors in comments in <ctf.h> and <ctf-api.h>
      - Make CTF dicts reproducible even when conflicting types are seen
      - Prevent corruption of output when linking multiple object files derived from
        the same source
      - Minor compiler warning and portability fixes
      - Fix (unlikely) crash-inducing uninitialized memory access and wild
        pointer overwrite when linking
      - Fix the reported offsets of fields within unnamed structs/unions
        [Orabug: 35191322]
      - Fix a number of places where operations carried out on child dicts
        that errored were producing errors on the parent, not the child,
        so the caller never noticed them
    March-28-2023 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.35.2-37.0.1
    - Forward-port Oracle patches from 2.35.2-24.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 David Faust  <david.faust@oracle.com> - 2.35.2-17.0.1
    - Forward-port Oracle patches from 2.35.2-9.0.1 to 2.35.2-17.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-23-2021 David Faust  <david.faust@oracle.com> - 2.35.2-9.0.1
    - Enable libctf
    - Backport all CTF improvements since 2.35.2 release, upstream commits:
      6ab5b6d0f3a libctf, lookup: fix bounds of pptrtab lookup
      e695879142a libctf, testsuite: fix various warnings in tests
      b62d5edd0a5 libctf: fix handling of CTF symtypetab sections emitted by older GCC
      ea9c2009115 libctf: try several possibilities for linker versioning flags
      bef9ef8ca0f libtool.m4: fix nm BSD flag detection
      bc4b1401129 libtool.m4: augment symcode for Solaris 11
      7d53105d6ed libctf: link against libiberty before linking in libbfd or libctf-nobfd
      ae064303efe libctf, ld: fix test results for upstream GCC
      49da556c658 libctf, include: support an alternative encoding for nonrepresentable types
      8592be8c7d3 ld: do not rely on the exact size of the CTF symtypetabs in test results
      8f7b22ea2a9 libctf: fix ELF-in-BFD checks in the presence of ASAN
      15131809c23 libctf: fix memory leak in a test
      0bd65ce30a8 libctf: don't dereference out-of-bounds locations in the qualifier hashtab
      5226ef61131 libctf: make ctf_bfdopen_ctfsect a debugger entry point
      86f64bf43f7 libctf, serialize: functions with no args have a NULL dtd_vlen
      24c877f9b19 include: always do unsigned left-shift in CTF_SET_STID
      485170cdb1b libctf, dump: do not emit size or alignment if it would error
      e93388417c1 Provide an inline startswith function in bfd.h
      69a284867c7 libctf: support encodings for enums
      e4c78f303df libctf: a couple of small error-handling fixes
      d7b1416ef2c libctf: types: unify code dealing with small-vs-large struct members
      08c428aff4a libctf: eliminate dtd_u, part 5: structs / unions
      77d724a7ecd libctf: eliminate dtd_u, part 4: enums
      986e9e3aa03 libctf: do not corrupt strings across ctf_serialize
      2a05d50e90c libctf: don't lose track of all valid types upon serialization
      755ba58ebef Add install dependencies for ld -> bfd and libctf -> bfd
      81982d20fac libctf: eliminate dtd_u, part 3: functions
      534444b1ee1 libctf: eliminate dtd_u, part 2: arrays
      7879dd88efd libctf: eliminate dtd_u, part 1: int/float/slice
      eefe721eadf libctf: fix GNU style for do {} while
      b9a964318a7 libctf: split up ctf_serialize
      01cbfcba4bc libctf: fix comment above ctf_dict_t
      bf4c3185a5a libctf: split serialization and file writeout into its own file
      087945261c7 libctf: fix some tabdamage and move some code around
      211bcd01333 bfd, ld, libctf: skip zero-refcount strings in CTF string reporting
      8e7e446446b libctf: free ctf_dynsyms properly
      cf6a0b989a5 libctf: fix signed/unsigned comparison confusion
      4659554b280 libctf: minor error-handling fixes
      f5060e56338 libctf: add a deduplicator-specific type mapping table
      478c04a55ee libctf: remove reference to "unconflicted link mode".
      8915c559d40 libctf, include: remove the nondeduplicating CTF linker
      fd12633780a libctf: fix ChangeLog date
      ac36e134d96 libctf: reimplement many _iter iterators in terms of _next
      eaa2913a7ac libctf: ctf_archive_next should set the parent name consistently
      93993f67849 libctf AC_CANONICAL_TARGET
      f4f60336dae libctf, include: find types of symbols by name
      758f590744b libctf: add missing header in BFD ELF check
      cbd8f5bbcc8 libctf: require a Tcl capable of try/catch to run tests
      95148614026 bfd, opcodes, libctf: support --with-included-gettext
      ee87f50b8d2 libctf: always name nameless types "", never NULL
      5dacd11ddcf libctf: fix uninitialized variable in symbol serialization error handling
      caa170493e8 libctf: prohibit nameless ints, floats, typedefs and forwards
      78f28b89e8c libctf: rip out dead code handling typedefs with no name
      35a01a04544 libctf, ld: fix symtypetab and var section population under ld -r
      f04ce15e831 ld: depend on libctf
      26503e2f5ea libctf, create: fix ctf_type_add of structs with unnamed members
      e05a3e5a491 libctf: lookup_by_name: do not return success for nonexistent pointer types
      0814dbfbfcc libctf, testsuite: adjust for real return type of ctf_member_count
      70d3120f322 libctf, testsuite: don't run without a suitable compiler
      b4b6ea46807 libctf, ld: fix formatting of forwards to unions and enums
      abe4ca69a11 libctf: fix lookups of pointers by name in parent dicts
      8769046e5a9 libctf: remove outdated comment about parent dict importing
      6c3a38777b3 libctf, include: support unnamed structure members better
      abed0b0718a libctf: warn about information loss because of unreleased format changes
      9bc769718db libctf: new test of enum lookups with the _next iterator
      c59e30ed172 libctf: new testsuite
      1038406a8f6 libctf: rip out BFD_DEPENDENCIES / BFD_LIBADD
      37002871ac2 libctf, ld: dump enums: generally improve dump formatting
      ffeece6ac2d libctf, ld: prohibit getting the size or alignment of forwards
      91e7ce2fd7b libctf, ld: more dumper improvements
      57f97d0e6dd libctf, ld: CTF dumper changes for consistency
      b09ad6eae98 libctf: do not print array declarators backwards
      a7c23ac9317 In libctf, make AC_CONFIG_MACRO_DIR consistent with ACLOCAL_AMFLAGS
      e8cda209052 libctf: Pass format argument to asprintf
      96c61be508f binutils: readelf: support CTF dicts with non-native-endian symtabs
      53651de80f8 libctf, include: support foreign-endianness symtabs with CTF
      ef21dd3bcff libctf: do not crash when CTF symbol or variable linking fails
      8f235c90a28 libctf: error-handling fixes
      97a2a623d01 libctf, include: add ctf_getsymsect and ctf_getstrsect
      2c78e92523a libctf, include: CTF-archive-wide symbol lookup
      0e28ade476e libctf, ld: properly deduplicate function types
      0ad70c536ab ld, ctf: new and adjusted CTF tests due to func info / object data sections
      4665e895c37 libctf: adjust dumper for symtypetab changes
      1136c379718 libctf: symbol type linking support
      3d16b64e28a bfd, include, ld, binutils, libctf: CTF should use the dynstr/sym
      83d59285d54 objdump, readelf: Report errors from CTF archive iteration
      ae41200ba80 libctf, include, binutils, gdb: rename CTF-opening functions
      139633c307e libctf, include, binutils, gdb, ld: rename ctf_file_t to ctf_dict_t
      0d01fbe64f6 Remove libctf/mkerrors.sed
      5e9b84f7a2e binutils, ld: dequote libctf error messages
      926c9e76657 libctf, binutils, include, ld: gettextize and improve error handling
      555adca2e3b libctf: compilation failure on MinGW due to missing errno values
      50500ecfefd libctf: compilation failure on MinGW due to missing errno values
      8c419a91d76 libctf: fixes for systems on which sizeof (void *) > sizeof (long)
      734c894234e libctf: fix isspace casts
      4533ed564d6 libctf, binutils: fix big-endian libctf archive opening
      62cdd7b18fc ld, testsuite: do not run CTF tests at all on non-ELF for now
      fa03171fb46 ld: do not produce one empty output .ctf section for every input .ctf
      7cdfc3462fb ld, testsuite: only run CTF tests when ld and GCC support CTF
      b1b33524ad3 ld: new CTF testsuite
      0b884151088 binutils, testsuite: allow compilation before doing run_dump_test
      5dba6f05b7b ld: new options --ctf-variables and --ctf-share-types
      f320bba50ff ld: Reformat CTF errors into warnings.
      3dd6b890b4e binutils: objdump: ctf: drop incorrect linefeeds
      662df3c3f14 libctf, link: tie in the deduplicating linker
      e3e8411bec4 libctf, link: add CTF_LINK_OMIT_VARIABLES_SECTION
      0f0c11f7fc9 libctf, dedup: add deduplicator
      a9b98702066 libctf, dedup: add new configure option --enable-libctf-hash-debugging
      1f2e8b5b87d libctf: add SHA-1 support for libctf
      6dd2819ffc2 libctf, link: add the ability to filter out variables from the link
      19d4b1addca libctf, link: fix spurious conflicts of variables in the variable section
      5f54462c6ab libctf, link: redo cu-mapping handling
      e3f17159e26 libctf, link: fix ctf_link_write fd leak
      8d2229ad1e7 libctf, link: add lazy linking: clean up input members: err/warn cleanup
      e148b730131 libctf: drop error-prone ctf_strerror
      1fa7a0c24e7 libctf: sort out potential refcount loops
      3166467b00a libctf: rename the type_mapping_key to type_key
      43a61d7d3e6 libctf: check for vasprintf
      ac2ff760303 libctf, archive: fix bad error message
      d50c08025d4 libctf, open: fix opening CTF in binaries with no symtab
      70447401740 libctf, dump: fix slice dumping
      8e795b46f58 libctf, dump: migrate towards dumping errors rather than truncation
      b255b35feb8 libctf, decl: avoid leaks of the formatted string on error
      c6e9a1e576c libctf, types: enhance ctf_type_aname to print function arg types
      8b37e7b63ed libctf, ld, binutils: add textual error/warning reporting for libctf
      b7190c821e5 libctf, types: ensure the emission of ECTF_NOPARENT
      ec388c16cd4 libctf: error out on corrupt CTF with invalid header flags
      67d4cc671b7 libctf: pass the thunk down properly when wrapping qsort_r
      e28591b3dfc libctf, next, hash: add dynhash and dynset _next iteration
      688d28f6214 libctf, next: introduce new class of easier-to-use iterators
      2399827bfa1 libctf: add ctf_ref
      9850ce4d7bb libctf: add ctf_forwardable_kind
      2c9ca36be17 libctf: move existing inlines into ctf-inlines.h
      77648241384 libctf, hash: introduce the ctf_dynset
      a49c6c6a656 libctf, hash: save per-item space when no key/item freeing function
      5ceee3dba34 libctf, hash: improve insertion of existing keys into dynhashes
      809f6eb3321 libctf: add new dynhash functions
      469e75b621f libctf: fix __extension__ with non-GNU C compilers
      9c23dfa5aa4 libctf: add ctf_archive_count
      e0325e2cede libctf: add ctf_member_count
      9b15cbb7891 libctf: add ctf_type_kind_forwarded
      01d9317436c libctf: add ctf_type_name_raw
      5ec7465fec8 libctf: having debugging enabled is unlikely
      601e455b758 libctf, archive: stop ctf_arc_bufopen triggering crazy unmaps
      96e3ec29664 libctf, types: ints, floats and typedefs with no name are invalid
      502e838ed96 libctf, types: support slices of anything terminating in an int
      dd987f00430 libctf, create: empty dicts are dirty to start with
      f47ca311356 libctf, create: fix addition of anonymous struct/union members
      ab769488e75 libctf, create: member names of "" and NULL should be the same
      2484ca436ac libctf, open: drop unnecessary historical wart around forwards
      437061996d8 libctf, types: allow ctf_type_reference of dynamic slices
      9943fa3a732 libctf, create: add explicit casts for variables' and slices' types
      afd78bd6f0a libctf, create: do not corrupt function types' arglists at insertion time
      2361f1c8591 libctf, create: support addition of references to the unimplemented type
      7eea9d3bdb0 libctf: restructure error handling to reduce relocations
      b64751cf0bc include, libctf: typo fixes
      df16e041dea Fix problems in CTF handling code exposed by the Coverity static analysis tool.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Nick Clifton <nickc@redhat.com> - 2.35.2-55
changelog:
  - Add linker error/warning messages for executable stacks and RWX segments.  (RHEL-59801, RHEL-59802)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-61
changelog:
  - Add an option to objcopy that creates padding sections that eliminate gaps between segments.  (RHEL-60807)


author: Bruce McCulloch <bruce.mcculloch@oracle.com> - 2.35.2-63.0.1
changelog:
  - Merge Oracle patches to 2.35.2-63.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    January-10-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-55.0.1
     - Forward-port Oracle patches to 2.35.2-55.
     - Refresh CTF patches
    March-27-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-43.0.1
     - Forward-port Oracle patches to 2.35.2-43.
    March-07-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-42.0.2.1
    - Do not set version info on unversion symbols.  (RHEL-22601)
    - Reviewed by: Elena Zannoni <elena.zannoni@oracle.com>
    February-06-2024 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-42.0.2
    - Refresh CTF patches from upstream (2.42).
      - Fix more cases where operations on child dicts could leave errors on
        the parent, this time associated with CTF dict creation (upstream PR
        libctf/30985).
      - Fix the cu-mapped link feature (not exposed by GNU ld) to use only
        the last mapping provided for a given translation unit, rather than a
        random mix of first and last
    - Fix dependencies of libctf.so and libctf-nobfd.so to cite the libraries
      the code actually depends on.  (Fixes observed link problems with
      libctf-nobfd.so needing extra libraries on the link line versus upstream:
      libctf.so changes done purely for consistency.)
    - Add upstream commit 2e93abb858ae, allowing NONE relocs against local absolute
      symbols on x86-64.  (Upstream PR ld/31047).
    October-10-2023 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.35.2-42.0.1
    - Forward-port Oracle patches to 2.35.2-42.
    August-04-2023 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-37.0.2
    - Refresh CTF patches from upstream.
      - Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
      - Various obscure install-time linking problems
      - Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
        a CTF member name, not a section name
      - Improve dumping of types when some types elicit a libctf error
      - Put functions as well as variables in the (misnamed) CTF variable section
      - Improve handling of various forms of corrupted CTF input.
      - Fix errors in comments in <ctf.h> and <ctf-api.h>
      - Make CTF dicts reproducible even when conflicting types are seen
      - Prevent corruption of output when linking multiple object files derived from
        the same source
      - Minor compiler warning and portability fixes
      - Fix (unlikely) crash-inducing uninitialized memory access and wild
        pointer overwrite when linking
      - Fix the reported offsets of fields within unnamed structs/unions
        [Orabug: 35191322]
      - Fix a number of places where operations carried out on child dicts
        that errored were producing errors on the parent, not the child,
        so the caller never noticed them
    March-28-2023 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.35.2-37.0.1
    - Forward-port Oracle patches from 2.35.2-24.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 David Faust  <david.faust@oracle.com> - 2.35.2-17.0.1
    - Forward-port Oracle patches from 2.35.2-9.0.1 to 2.35.2-17.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-23-2021 David Faust  <david.faust@oracle.com> - 2.35.2-9.0.1
    - Enable libctf
    - Backport all CTF improvements since 2.35.2 release, upstream commits:
      6ab5b6d0f3a libctf, lookup: fix bounds of pptrtab lookup
      e695879142a libctf, testsuite: fix various warnings in tests
      b62d5edd0a5 libctf: fix handling of CTF symtypetab sections emitted by older GCC
      ea9c2009115 libctf: try several possibilities for linker versioning flags
      bef9ef8ca0f libtool.m4: fix nm BSD flag detection
      bc4b1401129 libtool.m4: augment symcode for Solaris 11
      7d53105d6ed libctf: link against libiberty before linking in libbfd or libctf-nobfd
      ae064303efe libctf, ld: fix test results for upstream GCC
      49da556c658 libctf, include: support an alternative encoding for nonrepresentable types
      8592be8c7d3 ld: do not rely on the exact size of the CTF symtypetabs in test results
      8f7b22ea2a9 libctf: fix ELF-in-BFD checks in the presence of ASAN
      15131809c23 libctf: fix memory leak in a test
      0bd65ce30a8 libctf: don't dereference out-of-bounds locations in the qualifier hashtab
      5226ef61131 libctf: make ctf_bfdopen_ctfsect a debugger entry point
      86f64bf43f7 libctf, serialize: functions with no args have a NULL dtd_vlen
      24c877f9b19 include: always do unsigned left-shift in CTF_SET_STID
      485170cdb1b libctf, dump: do not emit size or alignment if it would error
      e93388417c1 Provide an inline startswith function in bfd.h
      69a284867c7 libctf: support encodings for enums
      e4c78f303df libctf: a couple of small error-handling fixes
      d7b1416ef2c libctf: types: unify code dealing with small-vs-large struct members
      08c428aff4a libctf: eliminate dtd_u, part 5: structs / unions
      77d724a7ecd libctf: eliminate dtd_u, part 4: enums
      986e9e3aa03 libctf: do not corrupt strings across ctf_serialize
      2a05d50e90c libctf: don't lose track of all valid types upon serialization
      755ba58ebef Add install dependencies for ld -> bfd and libctf -> bfd
      81982d20fac libctf: eliminate dtd_u, part 3: functions
      534444b1ee1 libctf: eliminate dtd_u, part 2: arrays
      7879dd88efd libctf: eliminate dtd_u, part 1: int/float/slice
      eefe721eadf libctf: fix GNU style for do {} while
      b9a964318a7 libctf: split up ctf_serialize
      01cbfcba4bc libctf: fix comment above ctf_dict_t
      bf4c3185a5a libctf: split serialization and file writeout into its own file
      087945261c7 libctf: fix some tabdamage and move some code around
      211bcd01333 bfd, ld, libctf: skip zero-refcount strings in CTF string reporting
      8e7e446446b libctf: free ctf_dynsyms properly
      cf6a0b989a5 libctf: fix signed/unsigned comparison confusion
      4659554b280 libctf: minor error-handling fixes
      f5060e56338 libctf: add a deduplicator-specific type mapping table
      478c04a55ee libctf: remove reference to "unconflicted link mode".
      8915c559d40 libctf, include: remove the nondeduplicating CTF linker
      fd12633780a libctf: fix ChangeLog date
      ac36e134d96 libctf: reimplement many _iter iterators in terms of _next
      eaa2913a7ac libctf: ctf_archive_next should set the parent name consistently
      93993f67849 libctf AC_CANONICAL_TARGET
      f4f60336dae libctf, include: find types of symbols by name
      758f590744b libctf: add missing header in BFD ELF check
      cbd8f5bbcc8 libctf: require a Tcl capable of try/catch to run tests
      95148614026 bfd, opcodes, libctf: support --with-included-gettext
      ee87f50b8d2 libctf: always name nameless types "", never NULL
      5dacd11ddcf libctf: fix uninitialized variable in symbol serialization error handling
      caa170493e8 libctf: prohibit nameless ints, floats, typedefs and forwards
      78f28b89e8c libctf: rip out dead code handling typedefs with no name
      35a01a04544 libctf, ld: fix symtypetab and var section population under ld -r
      f04ce15e831 ld: depend on libctf
      26503e2f5ea libctf, create: fix ctf_type_add of structs with unnamed members
      e05a3e5a491 libctf: lookup_by_name: do not return success for nonexistent pointer types
      0814dbfbfcc libctf, testsuite: adjust for real return type of ctf_member_count
      70d3120f322 libctf, testsuite: don't run without a suitable compiler
      b4b6ea46807 libctf, ld: fix formatting of forwards to unions and enums
      abe4ca69a11 libctf: fix lookups of pointers by name in parent dicts
      8769046e5a9 libctf: remove outdated comment about parent dict importing
      6c3a38777b3 libctf, include: support unnamed structure members better
      abed0b0718a libctf: warn about information loss because of unreleased format changes
      9bc769718db libctf: new test of enum lookups with the _next iterator
      c59e30ed172 libctf: new testsuite
      1038406a8f6 libctf: rip out BFD_DEPENDENCIES / BFD_LIBADD
      37002871ac2 libctf, ld: dump enums: generally improve dump formatting
      ffeece6ac2d libctf, ld: prohibit getting the size or alignment of forwards
      91e7ce2fd7b libctf, ld: more dumper improvements
      57f97d0e6dd libctf, ld: CTF dumper changes for consistency
      b09ad6eae98 libctf: do not print array declarators backwards
      a7c23ac9317 In libctf, make AC_CONFIG_MACRO_DIR consistent with ACLOCAL_AMFLAGS
      e8cda209052 libctf: Pass format argument to asprintf
      96c61be508f binutils: readelf: support CTF dicts with non-native-endian symtabs
      53651de80f8 libctf, include: support foreign-endianness symtabs with CTF
      ef21dd3bcff libctf: do not crash when CTF symbol or variable linking fails
      8f235c90a28 libctf: error-handling fixes
      97a2a623d01 libctf, include: add ctf_getsymsect and ctf_getstrsect
      2c78e92523a libctf, include: CTF-archive-wide symbol lookup
      0e28ade476e libctf, ld: properly deduplicate function types
      0ad70c536ab ld, ctf: new and adjusted CTF tests due to func info / object data sections
      4665e895c37 libctf: adjust dumper for symtypetab changes
      1136c379718 libctf: symbol type linking support
      3d16b64e28a bfd, include, ld, binutils, libctf: CTF should use the dynstr/sym
      83d59285d54 objdump, readelf: Report errors from CTF archive iteration
      ae41200ba80 libctf, include, binutils, gdb: rename CTF-opening functions
      139633c307e libctf, include, binutils, gdb, ld: rename ctf_file_t to ctf_dict_t
      0d01fbe64f6 Remove libctf/mkerrors.sed
      5e9b84f7a2e binutils, ld: dequote libctf error messages
      926c9e76657 libctf, binutils, include, ld: gettextize and improve error handling
      555adca2e3b libctf: compilation failure on MinGW due to missing errno values
      50500ecfefd libctf: compilation failure on MinGW due to missing errno values
      8c419a91d76 libctf: fixes for systems on which sizeof (void *) > sizeof (long)
      734c894234e libctf: fix isspace casts
      4533ed564d6 libctf, binutils: fix big-endian libctf archive opening
      62cdd7b18fc ld, testsuite: do not run CTF tests at all on non-ELF for now
      fa03171fb46 ld: do not produce one empty output .ctf section for every input .ctf
      7cdfc3462fb ld, testsuite: only run CTF tests when ld and GCC support CTF
      b1b33524ad3 ld: new CTF testsuite
      0b884151088 binutils, testsuite: allow compilation before doing run_dump_test
      5dba6f05b7b ld: new options --ctf-variables and --ctf-share-types
      f320bba50ff ld: Reformat CTF errors into warnings.
      3dd6b890b4e binutils: objdump: ctf: drop incorrect linefeeds
      662df3c3f14 libctf, link: tie in the deduplicating linker
      e3e8411bec4 libctf, link: add CTF_LINK_OMIT_VARIABLES_SECTION
      0f0c11f7fc9 libctf, dedup: add deduplicator
      a9b98702066 libctf, dedup: add new configure option --enable-libctf-hash-debugging
      1f2e8b5b87d libctf: add SHA-1 support for libctf
      6dd2819ffc2 libctf, link: add the ability to filter out variables from the link
      19d4b1addca libctf, link: fix spurious conflicts of variables in the variable section
      5f54462c6ab libctf, link: redo cu-mapping handling
      e3f17159e26 libctf, link: fix ctf_link_write fd leak
      8d2229ad1e7 libctf, link: add lazy linking: clean up input members: err/warn cleanup
      e148b730131 libctf: drop error-prone ctf_strerror
      1fa7a0c24e7 libctf: sort out potential refcount loops
      3166467b00a libctf: rename the type_mapping_key to type_key
      43a61d7d3e6 libctf: check for vasprintf
      ac2ff760303 libctf, archive: fix bad error message
      d50c08025d4 libctf, open: fix opening CTF in binaries with no symtab
      70447401740 libctf, dump: fix slice dumping
      8e795b46f58 libctf, dump: migrate towards dumping errors rather than truncation
      b255b35feb8 libctf, decl: avoid leaks of the formatted string on error
      c6e9a1e576c libctf, types: enhance ctf_type_aname to print function arg types
      8b37e7b63ed libctf, ld, binutils: add textual error/warning reporting for libctf
      b7190c821e5 libctf, types: ensure the emission of ECTF_NOPARENT
      ec388c16cd4 libctf: error out on corrupt CTF with invalid header flags
      67d4cc671b7 libctf: pass the thunk down properly when wrapping qsort_r
      e28591b3dfc libctf, next, hash: add dynhash and dynset _next iteration
      688d28f6214 libctf, next: introduce new class of easier-to-use iterators
      2399827bfa1 libctf: add ctf_ref
      9850ce4d7bb libctf: add ctf_forwardable_kind
      2c9ca36be17 libctf: move existing inlines into ctf-inlines.h
      77648241384 libctf, hash: introduce the ctf_dynset
      a49c6c6a656 libctf, hash: save per-item space when no key/item freeing function
      5ceee3dba34 libctf, hash: improve insertion of existing keys into dynhashes
      809f6eb3321 libctf: add new dynhash functions
      469e75b621f libctf: fix __extension__ with non-GNU C compilers
      9c23dfa5aa4 libctf: add ctf_archive_count
      e0325e2cede libctf: add ctf_member_count
      9b15cbb7891 libctf: add ctf_type_kind_forwarded
      01d9317436c libctf: add ctf_type_name_raw
      5ec7465fec8 libctf: having debugging enabled is unlikely
      601e455b758 libctf, archive: stop ctf_arc_bufopen triggering crazy unmaps
      96e3ec29664 libctf, types: ints, floats and typedefs with no name are invalid
      502e838ed96 libctf, types: support slices of anything terminating in an int
      dd987f00430 libctf, create: empty dicts are dirty to start with
      f47ca311356 libctf, create: fix addition of anonymous struct/union members
      ab769488e75 libctf, create: member names of "" and NULL should be the same
      2484ca436ac libctf, open: drop unnecessary historical wart around forwards
      437061996d8 libctf, types: allow ctf_type_reference of dynamic slices
      9943fa3a732 libctf, create: add explicit casts for variables' and slices' types
      afd78bd6f0a libctf, create: do not corrupt function types' arglists at insertion time
      2361f1c8591 libctf, create: support addition of references to the unimplemented type
      7eea9d3bdb0 libctf: restructure error handling to reduce relocations
      b64751cf0bc include, libctf: typo fixes
      df16e041dea Fix problems in CTF handling code exposed by the Coverity static analysis tool.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Nick Clifton <nickc@redhat.com> - 2.35.2-67
changelog:
  - Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)


author: Bruce McCulloch <bruce.mcculloch@oracle.com> - 2.35.2-67.0.1
changelog:
  - Merge Oracle patches to 2.35.2-66.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-5-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-66.0.1
    - Merge Oracle patches to 2.35.2-66.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    August-4-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-65.0.1
    - Merge Oracle patches to 2.35.2-65.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-10-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-63.0.1
    - Merge Oracle patches to 2.35.2-63.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-10-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-55.0.1
     - Forward-port Oracle patches to 2.35.2-55.
     - Refresh CTF patches
    March-27-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-43.0.1
     - Forward-port Oracle patches to 2.35.2-43.
    March-07-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-42.0.2.1
    - Do not set version info on unversion symbols.  (RHEL-22601)
    - Reviewed by: Elena Zannoni <elena.zannoni@oracle.com>
    February-06-2024 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-42.0.2
    - Refresh CTF patches from upstream (2.42).
      - Fix more cases where operations on child dicts could leave errors on
        the parent, this time associated with CTF dict creation (upstream PR
        libctf/30985).
      - Fix the cu-mapped link feature (not exposed by GNU ld) to use only
        the last mapping provided for a given translation unit, rather than a
        random mix of first and last
    - Fix dependencies of libctf.so and libctf-nobfd.so to cite the libraries
      the code actually depends on.  (Fixes observed link problems with
      libctf-nobfd.so needing extra libraries on the link line versus upstream:
      libctf.so changes done purely for consistency.)
    - Add upstream commit 2e93abb858ae, allowing NONE relocs against local absolute
      symbols on x86-64.  (Upstream PR ld/31047).
    October-10-2023 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.35.2-42.0.1
    - Forward-port Oracle patches to 2.35.2-42.
    August-04-2023 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-37.0.2
    - Refresh CTF patches from upstream.
      - Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
      - Various obscure install-time linking problems
      - Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
        a CTF member name, not a section name
      - Improve dumping of types when some types elicit a libctf error
      - Put functions as well as variables in the (misnamed) CTF variable section
      - Improve handling of various forms of corrupted CTF input.
      - Fix errors in comments in <ctf.h> and <ctf-api.h>
      - Make CTF dicts reproducible even when conflicting types are seen
      - Prevent corruption of output when linking multiple object files derived from
        the same source
      - Minor compiler warning and portability fixes
      - Fix (unlikely) crash-inducing uninitialized memory access and wild
        pointer overwrite when linking
      - Fix the reported offsets of fields within unnamed structs/unions
        [Orabug: 35191322]
      - Fix a number of places where operations carried out on child dicts
        that errored were producing errors on the parent, not the child,
        so the caller never noticed them
    March-28-2023 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.35.2-37.0.1
    - Forward-port Oracle patches from 2.35.2-24.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 David Faust  <david.faust@oracle.com> - 2.35.2-17.0.1
    - Forward-port Oracle patches from 2.35.2-9.0.1 to 2.35.2-17.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-23-2021 David Faust  <david.faust@oracle.com> - 2.35.2-9.0.1
    - Enable libctf
    - Backport all CTF improvements since 2.35.2 release, upstream commits:
      6ab5b6d0f3a libctf, lookup: fix bounds of pptrtab lookup
      e695879142a libctf, testsuite: fix various warnings in tests
      b62d5edd0a5 libctf: fix handling of CTF symtypetab sections emitted by older GCC
      ea9c2009115 libctf: try several possibilities for linker versioning flags
      bef9ef8ca0f libtool.m4: fix nm BSD flag detection
      bc4b1401129 libtool.m4: augment symcode for Solaris 11
      7d53105d6ed libctf: link against libiberty before linking in libbfd or libctf-nobfd
      ae064303efe libctf, ld: fix test results for upstream GCC
      49da556c658 libctf, include: support an alternative encoding for nonrepresentable types
      8592be8c7d3 ld: do not rely on the exact size of the CTF symtypetabs in test results
      8f7b22ea2a9 libctf: fix ELF-in-BFD checks in the presence of ASAN
      15131809c23 libctf: fix memory leak in a test
      0bd65ce30a8 libctf: don't dereference out-of-bounds locations in the qualifier hashtab
      5226ef61131 libctf: make ctf_bfdopen_ctfsect a debugger entry point
      86f64bf43f7 libctf, serialize: functions with no args have a NULL dtd_vlen
      24c877f9b19 include: always do unsigned left-shift in CTF_SET_STID
      485170cdb1b libctf, dump: do not emit size or alignment if it would error
      e93388417c1 Provide an inline startswith function in bfd.h
      69a284867c7 libctf: support encodings for enums
      e4c78f303df libctf: a couple of small error-handling fixes
      d7b1416ef2c libctf: types: unify code dealing with small-vs-large struct members
      08c428aff4a libctf: eliminate dtd_u, part 5: structs / unions
      77d724a7ecd libctf: eliminate dtd_u, part 4: enums
      986e9e3aa03 libctf: do not corrupt strings across ctf_serialize
      2a05d50e90c libctf: don't lose track of all valid types upon serialization
      755ba58ebef Add install dependencies for ld -> bfd and libctf -> bfd
      81982d20fac libctf: eliminate dtd_u, part 3: functions
      534444b1ee1 libctf: eliminate dtd_u, part 2: arrays
      7879dd88efd libctf: eliminate dtd_u, part 1: int/float/slice
      eefe721eadf libctf: fix GNU style for do {} while
      b9a964318a7 libctf: split up ctf_serialize
      01cbfcba4bc libctf: fix comment above ctf_dict_t
      bf4c3185a5a libctf: split serialization and file writeout into its own file
      087945261c7 libctf: fix some tabdamage and move some code around
      211bcd01333 bfd, ld, libctf: skip zero-refcount strings in CTF string reporting
      8e7e446446b libctf: free ctf_dynsyms properly
      cf6a0b989a5 libctf: fix signed/unsigned comparison confusion
      4659554b280 libctf: minor error-handling fixes
      f5060e56338 libctf: add a deduplicator-specific type mapping table
      478c04a55ee libctf: remove reference to "unconflicted link mode".
      8915c559d40 libctf, include: remove the nondeduplicating CTF linker
      fd12633780a libctf: fix ChangeLog date
      ac36e134d96 libctf: reimplement many _iter iterators in terms of _next
      eaa2913a7ac libctf: ctf_archive_next should set the parent name consistently
      93993f67849 libctf AC_CANONICAL_TARGET
      f4f60336dae libctf, include: find types of symbols by name
      758f590744b libctf: add missing header in BFD ELF check
      cbd8f5bbcc8 libctf: require a Tcl capable of try/catch to run tests
      95148614026 bfd, opcodes, libctf: support --with-included-gettext
      ee87f50b8d2 libctf: always name nameless types "", never NULL
      5dacd11ddcf libctf: fix uninitialized variable in symbol serialization error handling
      caa170493e8 libctf: prohibit nameless ints, floats, typedefs and forwards
      78f28b89e8c libctf: rip out dead code handling typedefs with no name
      35a01a04544 libctf, ld: fix symtypetab and var section population under ld -r
      f04ce15e831 ld: depend on libctf
      26503e2f5ea libctf, create: fix ctf_type_add of structs with unnamed members
      e05a3e5a491 libctf: lookup_by_name: do not return success for nonexistent pointer types
      0814dbfbfcc libctf, testsuite: adjust for real return type of ctf_member_count
      70d3120f322 libctf, testsuite: don't run without a suitable compiler
      b4b6ea46807 libctf, ld: fix formatting of forwards to unions and enums
      abe4ca69a11 libctf: fix lookups of pointers by name in parent dicts
      8769046e5a9 libctf: remove outdated comment about parent dict importing
      6c3a38777b3 libctf, include: support unnamed structure members better
      abed0b0718a libctf: warn about information loss because of unreleased format changes
      9bc769718db libctf: new test of enum lookups with the _next iterator
      c59e30ed172 libctf: new testsuite
      1038406a8f6 libctf: rip out BFD_DEPENDENCIES / BFD_LIBADD
      37002871ac2 libctf, ld: dump enums: generally improve dump formatting
      ffeece6ac2d libctf, ld: prohibit getting the size or alignment of forwards
      91e7ce2fd7b libctf, ld: more dumper improvements
      57f97d0e6dd libctf, ld: CTF dumper changes for consistency
      b09ad6eae98 libctf: do not print array declarators backwards
      a7c23ac9317 In libctf, make AC_CONFIG_MACRO_DIR consistent with ACLOCAL_AMFLAGS
      e8cda209052 libctf: Pass format argument to asprintf
      96c61be508f binutils: readelf: support CTF dicts with non-native-endian symtabs
      53651de80f8 libctf, include: support foreign-endianness symtabs with CTF
      ef21dd3bcff libctf: do not crash when CTF symbol or variable linking fails
      8f235c90a28 libctf: error-handling fixes
      97a2a623d01 libctf, include: add ctf_getsymsect and ctf_getstrsect
      2c78e92523a libctf, include: CTF-archive-wide symbol lookup
      0e28ade476e libctf, ld: properly deduplicate function types
      0ad70c536ab ld, ctf: new and adjusted CTF tests due to func info / object data sections
      4665e895c37 libctf: adjust dumper for symtypetab changes
      1136c379718 libctf: symbol type linking support
      3d16b64e28a bfd, include, ld, binutils, libctf: CTF should use the dynstr/sym
      83d59285d54 objdump, readelf: Report errors from CTF archive iteration
      ae41200ba80 libctf, include, binutils, gdb: rename CTF-opening functions
      139633c307e libctf, include, binutils, gdb, ld: rename ctf_file_t to ctf_dict_t
      0d01fbe64f6 Remove libctf/mkerrors.sed
      5e9b84f7a2e binutils, ld: dequote libctf error messages
      926c9e76657 libctf, binutils, include, ld: gettextize and improve error handling
      555adca2e3b libctf: compilation failure on MinGW due to missing errno values
      50500ecfefd libctf: compilation failure on MinGW due to missing errno values
      8c419a91d76 libctf: fixes for systems on which sizeof (void *) > sizeof (long)
      734c894234e libctf: fix isspace casts
      4533ed564d6 libctf, binutils: fix big-endian libctf archive opening
      62cdd7b18fc ld, testsuite: do not run CTF tests at all on non-ELF for now
      fa03171fb46 ld: do not produce one empty output .ctf section for every input .ctf
      7cdfc3462fb ld, testsuite: only run CTF tests when ld and GCC support CTF
      b1b33524ad3 ld: new CTF testsuite
      0b884151088 binutils, testsuite: allow compilation before doing run_dump_test
      5dba6f05b7b ld: new options --ctf-variables and --ctf-share-types
      f320bba50ff ld: Reformat CTF errors into warnings.
      3dd6b890b4e binutils: objdump: ctf: drop incorrect linefeeds
      662df3c3f14 libctf, link: tie in the deduplicating linker
      e3e8411bec4 libctf, link: add CTF_LINK_OMIT_VARIABLES_SECTION
      0f0c11f7fc9 libctf, dedup: add deduplicator
      a9b98702066 libctf, dedup: add new configure option --enable-libctf-hash-debugging
      1f2e8b5b87d libctf: add SHA-1 support for libctf
      6dd2819ffc2 libctf, link: add the ability to filter out variables from the link
      19d4b1addca libctf, link: fix spurious conflicts of variables in the variable section
      5f54462c6ab libctf, link: redo cu-mapping handling
      e3f17159e26 libctf, link: fix ctf_link_write fd leak
      8d2229ad1e7 libctf, link: add lazy linking: clean up input members: err/warn cleanup
      e148b730131 libctf: drop error-prone ctf_strerror
      1fa7a0c24e7 libctf: sort out potential refcount loops
      3166467b00a libctf: rename the type_mapping_key to type_key
      43a61d7d3e6 libctf: check for vasprintf
      ac2ff760303 libctf, archive: fix bad error message
      d50c08025d4 libctf, open: fix opening CTF in binaries with no symtab
      70447401740 libctf, dump: fix slice dumping
      8e795b46f58 libctf, dump: migrate towards dumping errors rather than truncation
      b255b35feb8 libctf, decl: avoid leaks of the formatted string on error
      c6e9a1e576c libctf, types: enhance ctf_type_aname to print function arg types
      8b37e7b63ed libctf, ld, binutils: add textual error/warning reporting for libctf
      b7190c821e5 libctf, types: ensure the emission of ECTF_NOPARENT
      ec388c16cd4 libctf: error out on corrupt CTF with invalid header flags
      67d4cc671b7 libctf: pass the thunk down properly when wrapping qsort_r
      e28591b3dfc libctf, next, hash: add dynhash and dynset _next iteration
      688d28f6214 libctf, next: introduce new class of easier-to-use iterators
      2399827bfa1 libctf: add ctf_ref
      9850ce4d7bb libctf: add ctf_forwardable_kind
      2c9ca36be17 libctf: move existing inlines into ctf-inlines.h
      77648241384 libctf, hash: introduce the ctf_dynset
      a49c6c6a656 libctf, hash: save per-item space when no key/item freeing function
      5ceee3dba34 libctf, hash: improve insertion of existing keys into dynhashes
      809f6eb3321 libctf: add new dynhash functions
      469e75b621f libctf: fix __extension__ with non-GNU C compilers
      9c23dfa5aa4 libctf: add ctf_archive_count
      e0325e2cede libctf: add ctf_member_count
      9b15cbb7891 libctf: add ctf_type_kind_forwarded
      01d9317436c libctf: add ctf_type_name_raw
      5ec7465fec8 libctf: having debugging enabled is unlikely
      601e455b758 libctf, archive: stop ctf_arc_bufopen triggering crazy unmaps
      96e3ec29664 libctf, types: ints, floats and typedefs with no name are invalid
      502e838ed96 libctf, types: support slices of anything terminating in an int
      dd987f00430 libctf, create: empty dicts are dirty to start with
      f47ca311356 libctf, create: fix addition of anonymous struct/union members
      ab769488e75 libctf, create: member names of "" and NULL should be the same
      2484ca436ac libctf, open: drop unnecessary historical wart around forwards
      437061996d8 libctf, types: allow ctf_type_reference of dynamic slices
      9943fa3a732 libctf, create: add explicit casts for variables' and slices' types
      afd78bd6f0a libctf, create: do not corrupt function types' arglists at insertion time
      2361f1c8591 libctf, create: support addition of references to the unimplemented type
      7eea9d3bdb0 libctf: restructure error handling to reduce relocations
      b64751cf0bc include, libctf: typo fixes
      df16e041dea Fix problems in CTF handling code exposed by the Coverity static analysis tool.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Bruce McCulloch <bruce.mcculloch@oracle.com> - 2.35.2-67.0.1.1
changelog:
  - Merge Oracle patches to 2.35.2-67.1.
    - CVE-2025-11083
    - Reviewed-by: David Faust <david.faust@oracle.com>
    Oracle history:
    September-24-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-67.0.1
    - Merge Oracle patches to 2.35.2-66.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-5-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-66.0.1
    - Merge Oracle patches to 2.35.2-66.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-4-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-65.0.1
    - Merge Oracle patches to 2.35.2-65.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-10-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-63.0.1
    - Merge Oracle patches to 2.35.2-63.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-10-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-55.0.1
     - Forward-port Oracle patches to 2.35.2-55.
     - Refresh CTF patches
    March-27-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-43.0.1
     - Forward-port Oracle patches to 2.35.2-43.
    March-07-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-42.0.2.1
    - Do not set version info on unversion symbols.  (RHEL-22601)
    - Reviewed by: Elena Zannoni <elena.zannoni@oracle.com>
    February-06-2024 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-42.0.2
    - Refresh CTF patches from upstream (2.42).
      - Fix more cases where operations on child dicts could leave errors on
        the parent, this time associated with CTF dict creation (upstream PR
        libctf/30985).
      - Fix the cu-mapped link feature (not exposed by GNU ld) to use only
        the last mapping provided for a given translation unit, rather than a
        random mix of first and last
    - Fix dependencies of libctf.so and libctf-nobfd.so to cite the libraries
      the code actually depends on.  (Fixes observed link problems with
      libctf-nobfd.so needing extra libraries on the link line versus upstream:
      libctf.so changes done purely for consistency.)
    - Add upstream commit 2e93abb858ae, allowing NONE relocs against local absolute
      symbols on x86-64.  (Upstream PR ld/31047).
    October-10-2023 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.35.2-42.0.1
    - Forward-port Oracle patches to 2.35.2-42.
    August-04-2023 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-37.0.2
    - Refresh CTF patches from upstream.
      - Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
      - Various obscure install-time linking problems
      - Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
        a CTF member name, not a section name
      - Improve dumping of types when some types elicit a libctf error
      - Put functions as well as variables in the (misnamed) CTF variable section
      - Improve handling of various forms of corrupted CTF input.
      - Fix errors in comments in <ctf.h> and <ctf-api.h>
      - Make CTF dicts reproducible even when conflicting types are seen
      - Prevent corruption of output when linking multiple object files derived from
        the same source
      - Minor compiler warning and portability fixes
      - Fix (unlikely) crash-inducing uninitialized memory access and wild
        pointer overwrite when linking
      - Fix the reported offsets of fields within unnamed structs/unions
        [Orabug: 35191322]
      - Fix a number of places where operations carried out on child dicts
        that errored were producing errors on the parent, not the child,
        so the caller never noticed them
    March-28-2023 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.35.2-37.0.1
    - Forward-port Oracle patches from 2.35.2-24.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 David Faust  <david.faust@oracle.com> - 2.35.2-17.0.1
    - Forward-port Oracle patches from 2.35.2-9.0.1 to 2.35.2-17.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-23-2021 David Faust  <david.faust@oracle.com> - 2.35.2-9.0.1
    - Enable libctf
    - Backport all CTF improvements since 2.35.2 release, upstream commits:
      6ab5b6d0f3a libctf, lookup: fix bounds of pptrtab lookup
      e695879142a libctf, testsuite: fix various warnings in tests
      b62d5edd0a5 libctf: fix handling of CTF symtypetab sections emitted by older GCC
      ea9c2009115 libctf: try several possibilities for linker versioning flags
      bef9ef8ca0f libtool.m4: fix nm BSD flag detection
      bc4b1401129 libtool.m4: augment symcode for Solaris 11
      7d53105d6ed libctf: link against libiberty before linking in libbfd or libctf-nobfd
      ae064303efe libctf, ld: fix test results for upstream GCC
      49da556c658 libctf, include: support an alternative encoding for nonrepresentable types
      8592be8c7d3 ld: do not rely on the exact size of the CTF symtypetabs in test results
      8f7b22ea2a9 libctf: fix ELF-in-BFD checks in the presence of ASAN
      15131809c23 libctf: fix memory leak in a test
      0bd65ce30a8 libctf: don't dereference out-of-bounds locations in the qualifier hashtab
      5226ef61131 libctf: make ctf_bfdopen_ctfsect a debugger entry point
      86f64bf43f7 libctf, serialize: functions with no args have a NULL dtd_vlen
      24c877f9b19 include: always do unsigned left-shift in CTF_SET_STID
      485170cdb1b libctf, dump: do not emit size or alignment if it would error
      e93388417c1 Provide an inline startswith function in bfd.h
      69a284867c7 libctf: support encodings for enums
      e4c78f303df libctf: a couple of small error-handling fixes
      d7b1416ef2c libctf: types: unify code dealing with small-vs-large struct members
      08c428aff4a libctf: eliminate dtd_u, part 5: structs / unions
      77d724a7ecd libctf: eliminate dtd_u, part 4: enums
      986e9e3aa03 libctf: do not corrupt strings across ctf_serialize
      2a05d50e90c libctf: don't lose track of all valid types upon serialization
      755ba58ebef Add install dependencies for ld -> bfd and libctf -> bfd
      81982d20fac libctf: eliminate dtd_u, part 3: functions
      534444b1ee1 libctf: eliminate dtd_u, part 2: arrays
      7879dd88efd libctf: eliminate dtd_u, part 1: int/float/slice
      eefe721eadf libctf: fix GNU style for do {} while
      b9a964318a7 libctf: split up ctf_serialize
      01cbfcba4bc libctf: fix comment above ctf_dict_t
      bf4c3185a5a libctf: split serialization and file writeout into its own file
      087945261c7 libctf: fix some tabdamage and move some code around
      211bcd01333 bfd, ld, libctf: skip zero-refcount strings in CTF string reporting
      8e7e446446b libctf: free ctf_dynsyms properly
      cf6a0b989a5 libctf: fix signed/unsigned comparison confusion
      4659554b280 libctf: minor error-handling fixes
      f5060e56338 libctf: add a deduplicator-specific type mapping table
      478c04a55ee libctf: remove reference to "unconflicted link mode".
      8915c559d40 libctf, include: remove the nondeduplicating CTF linker
      fd12633780a libctf: fix ChangeLog date
      ac36e134d96 libctf: reimplement many _iter iterators in terms of _next
      eaa2913a7ac libctf: ctf_archive_next should set the parent name consistently
      93993f67849 libctf AC_CANONICAL_TARGET
      f4f60336dae libctf, include: find types of symbols by name
      758f590744b libctf: add missing header in BFD ELF check
      cbd8f5bbcc8 libctf: require a Tcl capable of try/catch to run tests
      95148614026 bfd, opcodes, libctf: support --with-included-gettext
      ee87f50b8d2 libctf: always name nameless types "", never NULL
      5dacd11ddcf libctf: fix uninitialized variable in symbol serialization error handling
      caa170493e8 libctf: prohibit nameless ints, floats, typedefs and forwards
      78f28b89e8c libctf: rip out dead code handling typedefs with no name
      35a01a04544 libctf, ld: fix symtypetab and var section population under ld -r
      f04ce15e831 ld: depend on libctf
      26503e2f5ea libctf, create: fix ctf_type_add of structs with unnamed members
      e05a3e5a491 libctf: lookup_by_name: do not return success for nonexistent pointer types
      0814dbfbfcc libctf, testsuite: adjust for real return type of ctf_member_count
      70d3120f322 libctf, testsuite: don't run without a suitable compiler
      b4b6ea46807 libctf, ld: fix formatting of forwards to unions and enums
      abe4ca69a11 libctf: fix lookups of pointers by name in parent dicts
      8769046e5a9 libctf: remove outdated comment about parent dict importing
      6c3a38777b3 libctf, include: support unnamed structure members better
      abed0b0718a libctf: warn about information loss because of unreleased format changes
      9bc769718db libctf: new test of enum lookups with the _next iterator
      c59e30ed172 libctf: new testsuite
      1038406a8f6 libctf: rip out BFD_DEPENDENCIES / BFD_LIBADD
      37002871ac2 libctf, ld: dump enums: generally improve dump formatting
      ffeece6ac2d libctf, ld: prohibit getting the size or alignment of forwards
      91e7ce2fd7b libctf, ld: more dumper improvements
      57f97d0e6dd libctf, ld: CTF dumper changes for consistency
      b09ad6eae98 libctf: do not print array declarators backwards
      a7c23ac9317 In libctf, make AC_CONFIG_MACRO_DIR consistent with ACLOCAL_AMFLAGS
      e8cda209052 libctf: Pass format argument to asprintf
      96c61be508f binutils: readelf: support CTF dicts with non-native-endian symtabs
      53651de80f8 libctf, include: support foreign-endianness symtabs with CTF
      ef21dd3bcff libctf: do not crash when CTF symbol or variable linking fails
      8f235c90a28 libctf: error-handling fixes
      97a2a623d01 libctf, include: add ctf_getsymsect and ctf_getstrsect
      2c78e92523a libctf, include: CTF-archive-wide symbol lookup
      0e28ade476e libctf, ld: properly deduplicate function types
      0ad70c536ab ld, ctf: new and adjusted CTF tests due to func info / object data sections
      4665e895c37 libctf: adjust dumper for symtypetab changes
      1136c379718 libctf: symbol type linking support
      3d16b64e28a bfd, include, ld, binutils, libctf: CTF should use the dynstr/sym
      83d59285d54 objdump, readelf: Report errors from CTF archive iteration
      ae41200ba80 libctf, include, binutils, gdb: rename CTF-opening functions
      139633c307e libctf, include, binutils, gdb, ld: rename ctf_file_t to ctf_dict_t
      0d01fbe64f6 Remove libctf/mkerrors.sed
      5e9b84f7a2e binutils, ld: dequote libctf error messages
      926c9e76657 libctf, binutils, include, ld: gettextize and improve error handling
      555adca2e3b libctf: compilation failure on MinGW due to missing errno values
      50500ecfefd libctf: compilation failure on MinGW due to missing errno values
      8c419a91d76 libctf: fixes for systems on which sizeof (void *) > sizeof (long)
      734c894234e libctf: fix isspace casts
      4533ed564d6 libctf, binutils: fix big-endian libctf archive opening
      62cdd7b18fc ld, testsuite: do not run CTF tests at all on non-ELF for now
      fa03171fb46 ld: do not produce one empty output .ctf section for every input .ctf
      7cdfc3462fb ld, testsuite: only run CTF tests when ld and GCC support CTF
      b1b33524ad3 ld: new CTF testsuite
      0b884151088 binutils, testsuite: allow compilation before doing run_dump_test
      5dba6f05b7b ld: new options --ctf-variables and --ctf-share-types
      f320bba50ff ld: Reformat CTF errors into warnings.
      3dd6b890b4e binutils: objdump: ctf: drop incorrect linefeeds
      662df3c3f14 libctf, link: tie in the deduplicating linker
      e3e8411bec4 libctf, link: add CTF_LINK_OMIT_VARIABLES_SECTION
      0f0c11f7fc9 libctf, dedup: add deduplicator
      a9b98702066 libctf, dedup: add new configure option --enable-libctf-hash-debugging
      1f2e8b5b87d libctf: add SHA-1 support for libctf
      6dd2819ffc2 libctf, link: add the ability to filter out variables from the link
      19d4b1addca libctf, link: fix spurious conflicts of variables in the variable section
      5f54462c6ab libctf, link: redo cu-mapping handling
      e3f17159e26 libctf, link: fix ctf_link_write fd leak
      8d2229ad1e7 libctf, link: add lazy linking: clean up input members: err/warn cleanup
      e148b730131 libctf: drop error-prone ctf_strerror
      1fa7a0c24e7 libctf: sort out potential refcount loops
      3166467b00a libctf: rename the type_mapping_key to type_key
      43a61d7d3e6 libctf: check for vasprintf
      ac2ff760303 libctf, archive: fix bad error message
      d50c08025d4 libctf, open: fix opening CTF in binaries with no symtab
      70447401740 libctf, dump: fix slice dumping
      8e795b46f58 libctf, dump: migrate towards dumping errors rather than truncation
      b255b35feb8 libctf, decl: avoid leaks of the formatted string on error
      c6e9a1e576c libctf, types: enhance ctf_type_aname to print function arg types
      8b37e7b63ed libctf, ld, binutils: add textual error/warning reporting for libctf
      b7190c821e5 libctf, types: ensure the emission of ECTF_NOPARENT
      ec388c16cd4 libctf: error out on corrupt CTF with invalid header flags
      67d4cc671b7 libctf: pass the thunk down properly when wrapping qsort_r
      e28591b3dfc libctf, next, hash: add dynhash and dynset _next iteration
      688d28f6214 libctf, next: introduce new class of easier-to-use iterators
      2399827bfa1 libctf: add ctf_ref
      9850ce4d7bb libctf: add ctf_forwardable_kind
      2c9ca36be17 libctf: move existing inlines into ctf-inlines.h
      77648241384 libctf, hash: introduce the ctf_dynset
      a49c6c6a656 libctf, hash: save per-item space when no key/item freeing function
      5ceee3dba34 libctf, hash: improve insertion of existing keys into dynhashes
      809f6eb3321 libctf: add new dynhash functions
      469e75b621f libctf: fix __extension__ with non-GNU C compilers
      9c23dfa5aa4 libctf: add ctf_archive_count
      e0325e2cede libctf: add ctf_member_count
      9b15cbb7891 libctf: add ctf_type_kind_forwarded
      01d9317436c libctf: add ctf_type_name_raw
      5ec7465fec8 libctf: having debugging enabled is unlikely
      601e455b758 libctf, archive: stop ctf_arc_bufopen triggering crazy unmaps
      96e3ec29664 libctf, types: ints, floats and typedefs with no name are invalid
      502e838ed96 libctf, types: support slices of anything terminating in an int
      dd987f00430 libctf, create: empty dicts are dirty to start with
      f47ca311356 libctf, create: fix addition of anonymous struct/union members
      ab769488e75 libctf, create: member names of "" and NULL should be the same
      2484ca436ac libctf, open: drop unnecessary historical wart around forwards
      437061996d8 libctf, types: allow ctf_type_reference of dynamic slices
      9943fa3a732 libctf, create: add explicit casts for variables' and slices' types
      afd78bd6f0a libctf, create: do not corrupt function types' arglists at insertion time
      2361f1c8591 libctf, create: support addition of references to the unimplemented type
      7eea9d3bdb0 libctf: restructure error handling to reduce relocations
      b64751cf0bc include, libctf: typo fixes
      df16e041dea Fix problems in CTF handling code exposed by the Coverity static analysis tool.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Bruce McCulloch <bruce.mcculloch@oracle.com> - 2.35.2-72.0.1
changelog:
  - Merge Oracle patches to 2.35.2-72.
      Reviewed-by: David Faust <david.faust@oracle.com>
    Oracle history:
    Febuary-19-2026 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-69.0.2
    - Backport upstream commit 57ae980e329 to fix bfd.h includes.
      Reviewed-by: Nick Alcock <nick.alcock@oracle.com>
      Reviewed-by: David Faust <david.faust@oracle.com>
    Febuary-03-2026 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-69.0.1
    - Merge Oracle patches to 2.35.2-69.
      Reviewed-by: David Faust <david.faust@oracle.com>
    December-18-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-67.0.1.1
    - Merge Oracle patches to 2.35.2-67.1.
    - CVE-2025-11083
      Reviewed-by: David Faust <david.faust@oracle.com>
    September-24-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-67.0.1
    - Merge Oracle patches to 2.35.2-66.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-5-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-66.0.1
    - Merge Oracle patches to 2.35.2-66.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-4-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-65.0.1
    - Merge Oracle patches to 2.35.2-65.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-10-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-63.0.1
    - Merge Oracle patches to 2.35.2-63.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-10-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-55.0.1
     - Forward-port Oracle patches to 2.35.2-55.
     - Refresh CTF patches
    March-27-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-43.0.1
     - Forward-port Oracle patches to 2.35.2-43.
    March-07-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-42.0.2.1
    - Do not set version info on unversion symbols.  (RHEL-22601)
    - Reviewed by: Elena Zannoni <elena.zannoni@oracle.com>
    February-06-2024 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-42.0.2
    - Refresh CTF patches from upstream (2.42).
      - Fix more cases where operations on child dicts could leave errors on
        the parent, this time associated with CTF dict creation (upstream PR
        libctf/30985).
      - Fix the cu-mapped link feature (not exposed by GNU ld) to use only
        the last mapping provided for a given translation unit, rather than a
        random mix of first and last
    - Fix dependencies of libctf.so and libctf-nobfd.so to cite the libraries
      the code actually depends on.  (Fixes observed link problems with
      libctf-nobfd.so needing extra libraries on the link line versus upstream:
      libctf.so changes done purely for consistency.)
    - Add upstream commit 2e93abb858ae, allowing NONE relocs against local absolute
      symbols on x86-64.  (Upstream PR ld/31047).
    October-10-2023 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.35.2-42.0.1
    - Forward-port Oracle patches to 2.35.2-42.
    August-04-2023 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-37.0.2
    - Refresh CTF patches from upstream.
      - Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
      - Various obscure install-time linking problems
      - Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
        a CTF member name, not a section name
      - Improve dumping of types when some types elicit a libctf error
      - Put functions as well as variables in the (misnamed) CTF variable section
      - Improve handling of various forms of corrupted CTF input.
      - Fix errors in comments in <ctf.h> and <ctf-api.h>
      - Make CTF dicts reproducible even when conflicting types are seen
      - Prevent corruption of output when linking multiple object files derived from
        the same source
      - Minor compiler warning and portability fixes
      - Fix (unlikely) crash-inducing uninitialized memory access and wild
        pointer overwrite when linking
      - Fix the reported offsets of fields within unnamed structs/unions
        [Orabug: 35191322]
      - Fix a number of places where operations carried out on child dicts
        that errored were producing errors on the parent, not the child,
        so the caller never noticed them
    March-28-2023 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.35.2-37.0.1
    - Forward-port Oracle patches from 2.35.2-24.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 David Faust  <david.faust@oracle.com> - 2.35.2-17.0.1
    - Forward-port Oracle patches from 2.35.2-9.0.1 to 2.35.2-17.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-23-2021 David Faust  <david.faust@oracle.com> - 2.35.2-9.0.1
    - Enable libctf
    - Backport all CTF improvements since 2.35.2 release, upstream commits:
      6ab5b6d0f3a libctf, lookup: fix bounds of pptrtab lookup
      e695879142a libctf, testsuite: fix various warnings in tests
      b62d5edd0a5 libctf: fix handling of CTF symtypetab sections emitted by older GCC
      ea9c2009115 libctf: try several possibilities for linker versioning flags
      bef9ef8ca0f libtool.m4: fix nm BSD flag detection
      bc4b1401129 libtool.m4: augment symcode for Solaris 11
      7d53105d6ed libctf: link against libiberty before linking in libbfd or libctf-nobfd
      ae064303efe libctf, ld: fix test results for upstream GCC
      49da556c658 libctf, include: support an alternative encoding for nonrepresentable types
      8592be8c7d3 ld: do not rely on the exact size of the CTF symtypetabs in test results
      8f7b22ea2a9 libctf: fix ELF-in-BFD checks in the presence of ASAN
      15131809c23 libctf: fix memory leak in a test
      0bd65ce30a8 libctf: don't dereference out-of-bounds locations in the qualifier hashtab
      5226ef61131 libctf: make ctf_bfdopen_ctfsect a debugger entry point
      86f64bf43f7 libctf, serialize: functions with no args have a NULL dtd_vlen
      24c877f9b19 include: always do unsigned left-shift in CTF_SET_STID
      485170cdb1b libctf, dump: do not emit size or alignment if it would error
      e93388417c1 Provide an inline startswith function in bfd.h
      69a284867c7 libctf: support encodings for enums
      e4c78f303df libctf: a couple of small error-handling fixes
      d7b1416ef2c libctf: types: unify code dealing with small-vs-large struct members
      08c428aff4a libctf: eliminate dtd_u, part 5: structs / unions
      77d724a7ecd libctf: eliminate dtd_u, part 4: enums
      986e9e3aa03 libctf: do not corrupt strings across ctf_serialize
      2a05d50e90c libctf: don't lose track of all valid types upon serialization
      755ba58ebef Add install dependencies for ld -> bfd and libctf -> bfd
      81982d20fac libctf: eliminate dtd_u, part 3: functions
      534444b1ee1 libctf: eliminate dtd_u, part 2: arrays
      7879dd88efd libctf: eliminate dtd_u, part 1: int/float/slice
      eefe721eadf libctf: fix GNU style for do {} while
      b9a964318a7 libctf: split up ctf_serialize
      01cbfcba4bc libctf: fix comment above ctf_dict_t
      bf4c3185a5a libctf: split serialization and file writeout into its own file
      087945261c7 libctf: fix some tabdamage and move some code around
      211bcd01333 bfd, ld, libctf: skip zero-refcount strings in CTF string reporting
      8e7e446446b libctf: free ctf_dynsyms properly
      cf6a0b989a5 libctf: fix signed/unsigned comparison confusion
      4659554b280 libctf: minor error-handling fixes
      f5060e56338 libctf: add a deduplicator-specific type mapping table
      478c04a55ee libctf: remove reference to "unconflicted link mode".
      8915c559d40 libctf, include: remove the nondeduplicating CTF linker
      fd12633780a libctf: fix ChangeLog date
      ac36e134d96 libctf: reimplement many _iter iterators in terms of _next
      eaa2913a7ac libctf: ctf_archive_next should set the parent name consistently
      93993f67849 libctf AC_CANONICAL_TARGET
      f4f60336dae libctf, include: find types of symbols by name
      758f590744b libctf: add missing header in BFD ELF check
      cbd8f5bbcc8 libctf: require a Tcl capable of try/catch to run tests
      95148614026 bfd, opcodes, libctf: support --with-included-gettext
      ee87f50b8d2 libctf: always name nameless types "", never NULL
      5dacd11ddcf libctf: fix uninitialized variable in symbol serialization error handling
      caa170493e8 libctf: prohibit nameless ints, floats, typedefs and forwards
      78f28b89e8c libctf: rip out dead code handling typedefs with no name
      35a01a04544 libctf, ld: fix symtypetab and var section population under ld -r
      f04ce15e831 ld: depend on libctf
      26503e2f5ea libctf, create: fix ctf_type_add of structs with unnamed members
      e05a3e5a491 libctf: lookup_by_name: do not return success for nonexistent pointer types
      0814dbfbfcc libctf, testsuite: adjust for real return type of ctf_member_count
      70d3120f322 libctf, testsuite: don't run without a suitable compiler
      b4b6ea46807 libctf, ld: fix formatting of forwards to unions and enums
      abe4ca69a11 libctf: fix lookups of pointers by name in parent dicts
      8769046e5a9 libctf: remove outdated comment about parent dict importing
      6c3a38777b3 libctf, include: support unnamed structure members better
      abed0b0718a libctf: warn about information loss because of unreleased format changes
      9bc769718db libctf: new test of enum lookups with the _next iterator
      c59e30ed172 libctf: new testsuite
      1038406a8f6 libctf: rip out BFD_DEPENDENCIES / BFD_LIBADD
      37002871ac2 libctf, ld: dump enums: generally improve dump formatting
      ffeece6ac2d libctf, ld: prohibit getting the size or alignment of forwards
      91e7ce2fd7b libctf, ld: more dumper improvements
      57f97d0e6dd libctf, ld: CTF dumper changes for consistency
      b09ad6eae98 libctf: do not print array declarators backwards
      a7c23ac9317 In libctf, make AC_CONFIG_MACRO_DIR consistent with ACLOCAL_AMFLAGS
      e8cda209052 libctf: Pass format argument to asprintf
      96c61be508f binutils: readelf: support CTF dicts with non-native-endian symtabs
      53651de80f8 libctf, include: support foreign-endianness symtabs with CTF
      ef21dd3bcff libctf: do not crash when CTF symbol or variable linking fails
      8f235c90a28 libctf: error-handling fixes
      97a2a623d01 libctf, include: add ctf_getsymsect and ctf_getstrsect
      2c78e92523a libctf, include: CTF-archive-wide symbol lookup
      0e28ade476e libctf, ld: properly deduplicate function types
      0ad70c536ab ld, ctf: new and adjusted CTF tests due to func info / object data sections
      4665e895c37 libctf: adjust dumper for symtypetab changes
      1136c379718 libctf: symbol type linking support
      3d16b64e28a bfd, include, ld, binutils, libctf: CTF should use the dynstr/sym
      83d59285d54 objdump, readelf: Report errors from CTF archive iteration
      ae41200ba80 libctf, include, binutils, gdb: rename CTF-opening functions
      139633c307e libctf, include, binutils, gdb, ld: rename ctf_file_t to ctf_dict_t
      0d01fbe64f6 Remove libctf/mkerrors.sed
      5e9b84f7a2e binutils, ld: dequote libctf error messages
      926c9e76657 libctf, binutils, include, ld: gettextize and improve error handling
      555adca2e3b libctf: compilation failure on MinGW due to missing errno values
      50500ecfefd libctf: compilation failure on MinGW due to missing errno values
      8c419a91d76 libctf: fixes for systems on which sizeof (void *) > sizeof (long)
      734c894234e libctf: fix isspace casts
      4533ed564d6 libctf, binutils: fix big-endian libctf archive opening
      62cdd7b18fc ld, testsuite: do not run CTF tests at all on non-ELF for now
      fa03171fb46 ld: do not produce one empty output .ctf section for every input .ctf
      7cdfc3462fb ld, testsuite: only run CTF tests when ld and GCC support CTF
      b1b33524ad3 ld: new CTF testsuite
      0b884151088 binutils, testsuite: allow compilation before doing run_dump_test
      5dba6f05b7b ld: new options --ctf-variables and --ctf-share-types
      f320bba50ff ld: Reformat CTF errors into warnings.
      3dd6b890b4e binutils: objdump: ctf: drop incorrect linefeeds
      662df3c3f14 libctf, link: tie in the deduplicating linker
      e3e8411bec4 libctf, link: add CTF_LINK_OMIT_VARIABLES_SECTION
      0f0c11f7fc9 libctf, dedup: add deduplicator
      a9b98702066 libctf, dedup: add new configure option --enable-libctf-hash-debugging
      1f2e8b5b87d libctf: add SHA-1 support for libctf
      6dd2819ffc2 libctf, link: add the ability to filter out variables from the link
      19d4b1addca libctf, link: fix spurious conflicts of variables in the variable section
      5f54462c6ab libctf, link: redo cu-mapping handling
      e3f17159e26 libctf, link: fix ctf_link_write fd leak
      8d2229ad1e7 libctf, link: add lazy linking: clean up input members: err/warn cleanup
      e148b730131 libctf: drop error-prone ctf_strerror
      1fa7a0c24e7 libctf: sort out potential refcount loops
      3166467b00a libctf: rename the type_mapping_key to type_key
      43a61d7d3e6 libctf: check for vasprintf
      ac2ff760303 libctf, archive: fix bad error message
      d50c08025d4 libctf, open: fix opening CTF in binaries with no symtab
      70447401740 libctf, dump: fix slice dumping
      8e795b46f58 libctf, dump: migrate towards dumping errors rather than truncation
      b255b35feb8 libctf, decl: avoid leaks of the formatted string on error
      c6e9a1e576c libctf, types: enhance ctf_type_aname to print function arg types
      8b37e7b63ed libctf, ld, binutils: add textual error/warning reporting for libctf
      b7190c821e5 libctf, types: ensure the emission of ECTF_NOPARENT
      ec388c16cd4 libctf: error out on corrupt CTF with invalid header flags
      67d4cc671b7 libctf: pass the thunk down properly when wrapping qsort_r
      e28591b3dfc libctf, next, hash: add dynhash and dynset _next iteration
      688d28f6214 libctf, next: introduce new class of easier-to-use iterators
      2399827bfa1 libctf: add ctf_ref
      9850ce4d7bb libctf: add ctf_forwardable_kind
      2c9ca36be17 libctf: move existing inlines into ctf-inlines.h
      77648241384 libctf, hash: introduce the ctf_dynset
      a49c6c6a656 libctf, hash: save per-item space when no key/item freeing function
      5ceee3dba34 libctf, hash: improve insertion of existing keys into dynhashes
      809f6eb3321 libctf: add new dynhash functions
      469e75b621f libctf: fix __extension__ with non-GNU C compilers
      9c23dfa5aa4 libctf: add ctf_archive_count
      e0325e2cede libctf: add ctf_member_count
      9b15cbb7891 libctf: add ctf_type_kind_forwarded
      01d9317436c libctf: add ctf_type_name_raw
      5ec7465fec8 libctf: having debugging enabled is unlikely
      601e455b758 libctf, archive: stop ctf_arc_bufopen triggering crazy unmaps
      96e3ec29664 libctf, types: ints, floats and typedefs with no name are invalid
      502e838ed96 libctf, types: support slices of anything terminating in an int
      dd987f00430 libctf, create: empty dicts are dirty to start with
      f47ca311356 libctf, create: fix addition of anonymous struct/union members
      ab769488e75 libctf, create: member names of "" and NULL should be the same
      2484ca436ac libctf, open: drop unnecessary historical wart around forwards
      437061996d8 libctf, types: allow ctf_type_reference of dynamic slices
      9943fa3a732 libctf, create: add explicit casts for variables' and slices' types
      afd78bd6f0a libctf, create: do not corrupt function types' arglists at insertion time
      2361f1c8591 libctf, create: support addition of references to the unimplemented type
      7eea9d3bdb0 libctf: restructure error handling to reduce relocations
      b64751cf0bc include, libctf: typo fixes
      df16e041dea Fix problems in CTF handling code exposed by the Coverity static analysis tool.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Peng Wu <pwu@redhat.com> - 0.3-33
changelog:
  - Provide OpenType Bitmap fonts
  - Use bitmapfonts2otb.py to combine bitmap fonts
  - Add bitmap-*-opentype-fonts sub packages


author: Jakub Martisko <jamartis@redhat.com> - 3.9.0-13
changelog:
  - Add explicit requires to the devel subpackages
  - Note: the the cblas64 seems to be linked against the libblas (not the 64 version)
  - this is not a regression, however in the Fedora it uses libblas64 instead.
  - Resolves: RHEL-5768


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-8
changelog:
  - Improve error message printed for missing dependecies
    Resolves: rhbz#2012121
  - Use bigger chunk size for thinpools bigger than ~15.88 TiB
    Resolves: rhbz#1971516


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-12
changelog:
  - Fix log message for the LVM devices filter
    Resolves: rhbz#2034277
  - Exclude unusable disks from PartitionFactory
    Resolves: rhbz#2017432


author: EL Errata <el-errata_ww@oracle.com> - 3.4.0-13.0.1
changelog:
  - Load libblockdev btrfs plugin under UEK to support btrfs in installer
    [Orabug: 30792917]
  - Add bug29870386-fix-redhat-reference.patch [Orabug: 29870386]
  - Add bug32114602-fix-new-upstream-references.patch [Orabug: 32114602]


author: Pooja Senthil Kumar pooja.senthil.kumar@oracle.com - 3.4.0-13.0.3
changelog:
  - Replaced the linux.oracle.com references that previously pointed to bugzilla.redhat.com  [Orabug: 34202300]


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-7
changelog:
  - Fix setting kickstart data
    Resolves: rhbz#2174296
  - Do not set memory limit for LUKS2 when running in FIPS mode
    Resolves: rhbz#2193096


author: Jan Pokorny <japokorn@redhat.com> - 3.6.0-9
changelog:
  Backport iSCSI initiator name related fixes:
  - Allow changing iSCSI initiator name after setting it
    Resolves: rhbz#2221935
  - Add a basic test case for the iscsi module
    Resolves: rhbz#2221935
  - tests: Use blivet-specific prefix for targetcli backing files
    Resolves: rhbz#2221935
  - iscsi: Save firmware initiator name to /etc/iscsi/initiatorname.iscsi
    Resolves: rhbz#2221932
  - tests: Improve iscsi_test.ISCSITestCase
    Resolves: rhbz#2221935


author: Tomas Bzatek <tbzatek@redhat.com> - 3.6.0-10
changelog:
  - nvme: Require additional rpms for dracut
    Resolves: RHEL-2855
  - nvme: Align HostNQN and HostID format to TP-4126
    Resolves: RHEL-1254


author: Tomas Bzatek <tbzatek@redhat.com> - 3.6.0-11
changelog:
  - nvme: Retrieve HostNQN from a first active fabrics connection
  - tests: Add a simple unit test for the NVMe module
    Resolves: RHEL-11541


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-14
changelog:
  - Do not add new PVs to the LVM devices file if it doesn't exist and VGs are present
    Resolves: RHEL-473


author: Darren Archibald <darren.archibald@oracle.com> - 3.6.0-14.0.1
changelog:
  - Replace all upstream bugzilla references
  - [Orabug: 34721767], [Orabug: 29870386], [Orabug: 32114602]
  - Load libblockdev btrfs plugin under UEK to support btrfs in installer
    [Orabug: 30792917]


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-15
changelog:
  - Backport fixes for Stratis support needed for storage role
    Resolves: RHEL-35382
  - Add support for resizing PVs to the size of the underlying block device
    Resolves: RHEL-35386


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-18
changelog:
  - Add a basic read-only support for UDF filesystem
    Resolves: RHEL-13329
  - nvme: Skip startup/write when NVMe plugin isn't available
    Resolves: RHEL-28124


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-25
changelog:
  - Get the actual PV format size for LVMPV format
    Resolves: RHEL-74078
  - Include additional information in PartitioningError
    Resolves: RHEL-8005


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-26
changelog:
  - Make ActionDestroyFormat optional when the device is also scheduled to be removed
    Resolves: RHEL-8008
    Resolves: RHEL-8012


author: Jan Pokorny <japokorn@redhat.com> - 3.4.0-13
changelog:
  - Fix getting PV info in LVMPhysicalVolume from the cache
    Resolves: rhbz#2079221
  - Do not crash when changing disklabel on disks with active devices
    Resolves: rhbz#2078803
  - ActionDestroyDevice should not obsolete ActionRemoveMember
    Resolves: rhbz#2076956
  - Correctly set vg_name after adding/removing a PV from a VG
    Resolves: rhbz#2081278
  - Add support for creating LVM cache pools
    Resolves: rhbz#2055200
  - Use LVM PV format current_size in LVMVolumeGroupDevice._remove
    Related: rhbz#2081278


author: Jan Pokorny <japokorn@redhat.com> - 3.4.0-15
changelog:
  - Add a very simple NVMe module
    Resolves: rhbz#2073008
  - Add support for NPIV-enabled zFCP devices
    Resolves: rhbz#1937030
  - Fix removing zFCP SCSI devices
    Related: rhbz#1937030
  - tests: Mark "fake" disks in test_get_related_disks as non-existing
    Resolves: rhbz#2062690


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-2
changelog:
  - Fix potential AttributeError when getting stratis blockdev info
    Related: rhbz#2123711
  - tests: Skip XFS resize test on CentOS/RHEL 9
    Related: rhbz#2123711


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-3
changelog:
  - Catch BlockDevNotImplementedError for btrfs plugin calls
    Resolves: rhbz#2139166
  - Revert "Adjust to new XFS min size"
    Resolves: rhbz#2139189


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-27
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Update /var/run to /run in ipmievd.service that systemd warns about
    Resolves: rhbz#2100475
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: EL Errata <el-errata_ww@oracle.com> - 1.3-3.0.1
changelog:
  - Add Oracle profile [Orabug: 32119913]
  - Prefer Oracle profile on Oracle systems [Orabug: 32119913]
  - Do not create double entries during cloning and editing [Orabug: 29875814]
  - new RHEL8 package boom-boot has upstream references [Orabug: 29038819]


author: Bryan Gurney <bgurney@redhat.com> - 1.6.1-2
changelog:
  - Add issues resolved by release 1.6.1
  - Resolves: RHEL-36001
  - Resolves: RHEL-36664
  - Resolves: RHEL-36667
  - Resolves: RHEL-36691


author: Patrick Palka <ppalka@redhat.com> - 1.75.0-9
changelog:
  - Apply upstream Boost.Asio patch to resolve RHEL-67973
  - Fix %patch directive compatibility with RPM 4.20


author: Jonathan Wakely <jwakely@redhat.com> - 1.75.0-7
changelog:
  - Build with zstd support (#2091041)
  - Fix rpminspect CI warnings about missing versioned dependencies


author: Colin Walters <walters@verbum.org> - 1.12.1-1
changelog:
  - Update to 1.12.1
  - Fix mount point check regression breaking bootc-image-builder
  - Resolves: RHEL-142112


author: Colin Walters <walters@verbum.org> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - https://github.com/bootc-dev/bootc/releases/tag/v1.13.0
  - Resolves: RHEL-151443


author: Darren Archibald <darren.archibald@oracle.com> - 1.8.0-4.0.1
changelog:
  - Update bootc-oraclelinux-configs and image-builder scripts
  - Also add image-builder helper scripts and configs
  - Add bootc-oraclelinux-configs


author: Colin Walters <walters@verbum.org> - 0.2.11-2
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.11
    Resolves: https://issues.redhat.com/browse/RHEL-5273


author: Colin Walters <walters@verbum.org> - 0.2.15-2
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.15
    Related: https://issues.redhat.com/browse/RHEL-14388


author: Joseph Marrero <jmarrero@fedoraproject.org> - 0.2.18-1
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.18
    backport patch to support GRUB console.cfg
    Resolves: RHEL-26439


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-1
changelog:
  - Rebase on bpftrace 0.16.0 (rhbz#2121920)
  - Rebuild for LLVM 15 (rhbz#2118995)
  - Download the cereal library (not packaged into RHEL9)
  - Fixed several tools (rhbz#1975148, rhbz#2088577, rhbz#2128208, rhbz#2073675,
    rhbz#2073770)
  - Resolve conflicts between bpftrace and bcc manpages (rhbz#2075076)


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-2
changelog:
  - Fix missing kprobe attachpoints for bio* tools (s390x, ppc64le)
  - Rebuild for libbpf 1.0.0
  - Resolves: rhbz#2157829
  - Related: rhbz#2157592


author: Viktor Malik <vmalik@redhat.com> - 0.17.0-1
changelog:
  - Rebase on bpftrace 0.17.0 (RHEL-286)
  - Fix runqlat.bt, tcpdrop.bt, and undump.bt on aarch64 (rhbz#2170838)


author: Viktor Malik <vmalik@redhat.com> - 0.19.1-1
changelog:
  - Rebase on bpftrace 0.19.1 (RHEL-10693)
  - Rebuild for LLVM 17 (RHEL-10592)
  - Enhancements and fixes for PowerPC (RHEL-3690, RHEL-11476)


author: Viktor Malik <vmalik@redhat.com> - 0.20.3-1
changelog:
  - Rebase on bpftrace 0.20.3 (RHEL-30779)
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)
  - Fix bpftrace creating BPF programs with truncated names (RHEL-8502)


author: Viktor Malik <vmalik@redhat.com> - 0.20.4-1
changelog:
  - Rebase on bpftrace 0.20.4
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.0-0.50
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/4b3aaee)
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.0-0.51
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/2189882)
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.0-0.52
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/718f2b4)
  - Related: #2000051


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:1.24.2-2
changelog:
  - Add patch to fix bash symtax for gating tests
  - Upstream PR: https://github.com/containers/buildah/pull/3792
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.2-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/7b559a3)
  - Related: #2067533


author: Jindrich Novy <jnovy@redhat.com> - 1:1.27.2-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.27
    (https://github.com/containers/buildah/commit/c43a389)
  - Resolves: #2136848


author: Jindrich Novy <jnovy@redhat.com> - 1:1.27.2-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.27
    (https://github.com/containers/buildah/commit/5b86d15)
  - Resolves: #2150432


author: Jindrich Novy <jnovy@redhat.com> - 1:1.27.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.27
    (https://github.com/containers/buildah/commit/4785fdb)
  - Resolves: #2152042


author: Jindrich Novy <jnovy@redhat.com> - 1:1.28.2-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.28
    (https://github.com/containers/buildah/commit/cfefbb6)
  - fixes segmentation fault on s390x
  - Resolves: #2150429


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/8ca903b)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/c541c35)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/4b72f05)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/078a7ff)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29.0
    (https://github.com/containers/buildah/commit/94b723c)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/94b723c)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/c822cc6)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/7fa17a8)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/f07d2c9)
  - Resolves: #2183632


author: Jindrich Novy <jnovy@redhat.com> - 1:1.30.0-2
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175073
  - Resolves: #2179958
  - Resolves: #2187332
  - Resolves: #2187375
  - Resolves: #2203696
  - Resolves: #2207518


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 1.31.4-1.0.1
changelog:
  - update to https://github.com/containers/buildah/releases/tag/v1.31
  - https://github.com/containers/buildah/commit/11bbf33


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:1.31.3-2
changelog:
  - Rebuild for CVEs:
    CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322 CVE-2023-29409
  - Related: Jira:RHEL-2779
  - Related: Jira:RHEL-7451


author: Jindrich Novy <jnovy@redhat.com> - 1:1.31.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.31
    (https://github.com/containers/buildah/commit/11bbf33)
  - Resolves: RHEL-19617


author: Jindrich Novy <jnovy@redhat.com> - 1:1.31.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.31
    (https://github.com/containers/buildah/commit/5fd539c)
  - Resolves: RHEL-26775


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/f843563)
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/b95e962)
  - Resolves: RHEL-28230


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/997beea)
  - Resolves: RHEL-28731


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-5
changelog:
  - rebuild to address CVE-2024-34155 CVE-2024-34156 CVE-2024-34158
  - Resolves: RHEL-58191 RHEL-57972 RHEL-57910


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.9-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/4dc26b9)
  - Resolves: RHEL-61116


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.10-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/bd85c17)
  - Resolves: RHEL-61842


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:1.33.1-3
changelog:
  - Rebuild for CVEs:
    CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322
  - Related: Jira:RHEL-2779


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/70b792d)
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:1.37.0-1
changelog:
  - update to https://github.com/containers/buildah/releases/tag/v1.37.0
  - Resolves: RHEL-47164 RHEL-40808


author: Jindrich Novy <jnovy@redhat.com> - 2:1.37.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.37
    (https://github.com/containers/buildah/commit/fd39521)
  - Resolves: RHEL-67617


author: Jindrich Novy <jnovy@redhat.com> - 2:1.37.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.37
    (https://github.com/containers/buildah/commit/f31d99d)
  - Resolves: RHEL-61148


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.37
    (https://github.com/containers/buildah/commit/c060201)
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 2:1.39.4-2
changelog:
  - rebuild to fix CVE-2025-22871 buildah: Request smuggling due to acceptance of invalid chunked data in net/http
  - Resolves: RHEL-89294


author: Jindrich Novy <jnovy@redhat.com> - 2:1.41.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.41
    (https://github.com/containers/buildah/commit/ee5b574)
  - fixes "buildah: create parent directories of mount targets with mode 0755 - [RHEL-9.7]  0day"
  - Resolves: RHEL-115166


author: Jindrich Novy <jnovy@redhat.com> - 2:1.41.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.41
    (https://github.com/containers/buildah/commit/2ece502)
  - fixes "[Minor Incident] CVE-2025-52881 buildah: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [rhel-9.7.z]"
  - Resolves: RHEL-126925


author: Jindrich Novy <jnovy@redhat.com> - 2:1.41.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.41
    (https://github.com/containers/buildah/commit/e363f79)
  - fixes "Bump to runc v1.2.9 or v1.3.4 to get CVE and regression fixes - Buildah [rhel-9.7.z]"
  - Resolves: RHEL-132846


author: Jindrich Novy <jnovy@redhat.com> - 2:1.41.8-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.41
    (https://github.com/containers/buildah/commit/f85ff89)
  - fixes "CVE-2025-47913 buildah: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS [rhel-9.7.z]"
  - Resolves: RHEL-134792


author: Jindrich Novy <jnovy@redhat.com> - 2:1.43.0-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.43
    (https://github.com/containers/buildah/commit/bbc4bd1)
  - Resolves: RHEL-95964


author: Jindrich Novy <jnovy@redhat.com> - 2:1.43.1-1
changelog:
  - update to https://github.com/containers/buildah/releases/tag/v1.43.1
  - fixes CVE-2026-34986
  - Resolves: RHEL-165035


author: Jerry James <loganjerry@gmail.com> - 1.10.14-1
changelog:
  - Version 1.10.14
  - Remove no longer needed no-unixsocket.patch
  - Add workaround for compiling tests with JDK 11


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 4.0.11-1
changelog:
  - Upgrated to latest upstream version 4.0.11
  - Added a patch to fix rpm build issue caused due to misconfiguration in upstream
  - Added required additional plugins required for build


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5.1
changelog:
  - Resolves: rhbz#2209519 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.2.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Jon Maloy <jmaloy@redhat.com> - 4.0.2-11
changelog:
  - Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow)
    Resolves: RHEL-137758


author: Jon Maloy <jmaloy@redhat.com> - 4.0.2-11
changelog:
  - Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow)
    Resolves: RHEL-137760


author: Josh Stone <jistone@redhat.com> - 1.71.0-2
changelog:
  - Relax the suspicious_double_ref_op lint (rhbz2225471)
  - Enable the profiler runtime for native hosts (rhbz2213875)


author: Andreas Schneider <asn@redhat.com> - 0.3.12-1
changelog:
  - Update to version 0.3.12
  - resolves: RHEL-121734
  - Added channel binding support
  - resolves: RHEL-103417


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-6
changelog:
  - Review comment #16 addressed
  - It make more sense that -selinux and -certmonger depends on main package,
    Not the other round
  - Recommends: logrotate
  - Supplements: -selinux, -certmonger


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-5
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1990926)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001082)
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012261)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-6
changelog:
  - Certificate format validation when adding the SCEP server's CA
    (#1492112)
  - Replace some SHA1 usages with SHA256 in the unit tests


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: EL Errata <el-errata_ww@oracle.com> - 1.24-1.0.1
changelog:
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Remove upstream references [OLDIS-4405]


author: Craig Guiller <craig.guiller@oracle.com> - 1.24-1.0.1.1
changelog:
  - change fix-sized buffer
  - use rename to atomically replace old link [Orabug: 36701390]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Remove upstream references [OLDIS-4405]


author: EL Errata <el-errata_ww@oracle.com> - 1.24-2.0.1
changelog:
  - Bump release to ensure correct upgrade path [Orabug: 37290388]
  - change fix-sized buffer
  - use rename to atomically replace old link [Orabug: 36701390]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Remove upstream references [OLDIS-4405]


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: <pooja.senthil.kumar@oracle.com> - 0.6.1-13
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Konrad Kleine <kkleine@redhat.com> - 19.1.5-1
changelog:
  - Update to 19.1.5
  - Enable LLVM_ENABLE_ZSTD (rhbz#2321848)
  - Remove HTML documentation
  - Add lldb man pages
  - Fix profiling after a binutils NOTE change (rhbz#2322754)
  - Install i386 config files on x86_64


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Tom Stellard <tstellar@redhat.com> - 20.1.8-2
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-11
changelog:
  - ci-cc_ssh.py-fix-private-key-group-owner-and-permission.patch [bz#2015974]
  - Resolves: bz#2015974
    (cloud-init fails to set host key permissions correctly)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-12
changelog:
  - ci-remove-unnecessary-EOF-string-in-disable-sshd-keygen.patch [bz#2016305]
  - Resolves: bz#2016305
    (disable-sshd-keygen-if-cloud-init-active.conf:8: Missing '=', ignoring line)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-13
changelog:
  - ci-fix-error-on-upgrade-caused-by-new-vendordata2-attri.patch [bz#2028381]
  - Resolves: bz#2028381
    (cloud-init.service fails to start after package update)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-14
changelog:
  - ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2028031]
  - Resolves: bz#2028031
    ([RHEL-9] Above 19.2 of cloud-init fails to configure routes when configuring static and default routes to the same destination IP)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-15
changelog:
  - ci-Add-gdisk-and-openssl-as-deps-to-fix-UEFI-Azure-init.patch [bz#2032524]
  - Resolves: bz#2032524
    ([RHEL9] [Azure] cloud-init fails to configure the system)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-16
changelog:
  - ci-Datasource-for-VMware-953.patch [bz#2040090]
  - ci-Change-netifaces-dependency-to-0.10.4-965.patch [bz#2040090]
  - ci-Update-dscheck_VMware-s-rpctool-check-970.patch [bz#2040090]
  - ci-Revert-unnecesary-lcase-in-ds-identify-978.patch [bz#2040090]
  - ci-Add-netifaces-package-as-a-Requires-in-cloud-init.sp.patch [bz#2040090]
  - Resolves: bz#2040090
    ([cloud-init][RHEL9] Support for cloud-init datasource 'cloud-init-vmware-guestinfo')


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-17
changelog:
  - ci-Add-flexibility-to-IMDS-api-version-793.patch [bz#2042351]
  - ci-Azure-helper-Ensure-Azure-http-handler-sleeps-betwee.patch [bz#2042351]
  - ci-azure-Removing-ability-to-invoke-walinuxagent-799.patch [bz#2042351]
  - ci-Azure-eject-the-provisioning-iso-before-reporting-re.patch [bz#2042351]
  - ci-Azure-Retrieve-username-and-hostname-from-IMDS-865.patch [bz#2042351]
  - ci-Azure-Retry-net-metadata-during-nic-attach-for-non-t.patch [bz#2042351]
  - ci-Azure-adding-support-for-consuming-userdata-from-IMD.patch [bz#2042351]
  - Resolves: bz#2042351
    ([RHEL-9] Support for provisioning Azure VM with userdata)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-18
changelog:
  - ci-Add-_netdev-option-to-mount-Azure-ephemeral-disk-121.patch [bz#1998445]
  - Resolves: bz#1998445
    ([Azure][RHEL-9] ordering cycle exists after reboot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-19
changelog:
  - ci-Fix-IPv6-netmask-format-for-sysconfig-1215.patch [bz#2053546]
  - ci-Adding-_netdev-to-the-default-mount-configuration.patch [bz#1998445]
  - ci-Setting-highest-autoconnect-priority-for-network-scr.patch [bz#2036060]
  - Resolves: bz#2053546
    (cloud-init writes route6-$DEVICE config with a HEX netmask. ip route does not like : Error: inet6 prefix is expected rather than "fd00:fd00:fd00::/ffff:ffff:ffff:ffff::".)
  - Resolves: bz#1998445
    ([Azure][RHEL-9] ordering cycle exists after reboot)
  - Resolves: bz#2036060
    ([cloud-init][ESXi][RHEL-9] Failed to config static IP according to VMware Customization Config File)


author: EL Errata <el-errata_ww@oracle.com> - 21.1-19.0.1
changelog:
  - Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938]
  - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
  - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)
  - added OL to list of known distros


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-19.el9_0.1
changelog:
  - ci-Add-r-n-check-for-SSH-keys-in-Azure-889.patch [bz#2088027]
  - Resolves: bz#2088027
    ([RHEL-9.1] SSH keys with \r\n line breaks are not properly handled on Azure [rhel-9.0.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-19.el9_0.2
changelog:
  - ci-Leave-the-details-of-service-management-to-the-distr.patch [bz#2091935]
  - Resolves: bz#2091935
    (cloud-init has an undeclared dependency on the initscripts rpm [rhel-9.0.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-19.el9_0.3
changelog:
  - ci-cc_set_hostname-do-not-write-localhost-when-no-hostn.patch [bz#2092909]
  - Resolves: bz#2092909
    ([RHV] RHEL 9 VM with cloud-init without hostname set doesn't result in the FQDN as hostname [rhel-9.0.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-19.el9_0_0.4
changelog:
  - ci-Honor-system-locale-for-RHEL-1355.patch [bz#2096196]
  - Resolves: bz#2096196
    (cloud-config will change /etc/locale.conf back to en_US.UTF-8 on rhel-guest-image-9.0 [rhel-9.0.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 22.1-2
changelog:
  - ci-Add-native-NetworkManager-support-1224.patch [bz#2056964]
  - ci-Use-Network-Manager-and-Netplan-as-default-renderers.patch [bz#2056964]
  - ci-Revert-Setting-highest-autoconnect-priority-for-netw.patch [bz#2056964]
  - ci-Align-rhel-custom-files-with-upstream-1431.patch [bz#2088448]
  - ci-Remove-rhel-specific-files.patch [bz#2088448]
  - Resolves: bz#2056964
    ([RHEL-9]Rebase cloud-init from Fedora so it can configure networking using NM keyfiles)
  - Resolves: bz#2088448
    (Align cloud.cfg file and systemd with cloud-init upstream .tmpl files)


author: Miroslav Rezanina <mrezanin@redhat.com> - 22.1-3
changelog:
  - ci-Support-EC2-tags-in-instance-metadata-1309.patch [bz#2091640]
  - ci-cc_set_hostname-do-not-write-localhost-when-no-hostn.patch [bz#1980403]
  - Resolves: bz#2091640
    ([cloud][init] Add support for reading tags from instance metadata)
  - Resolves: bz#1980403
    ([RHV] RHEL 9 VM with cloud-init without hostname set doesn't result in the FQDN as hostname)


author: Jon Maloy <jmaloy@redhat.com> - 22.1-4
changelog:
  - ci-Honor-system-locale-for-RHEL-1355.patch [bz#2061604]
  - ci-cloud-init.spec-adjust-path-for-66-azure-ephemeral.r.patch [bz#2096270]
  - ci-setup.py-adjust-udev-rules-default-path-1513.patch [bz#2096270]
  - Resolves: bz#2061604
    (cloud-config will change /etc/locale.conf back to en_US.UTF-8 on rhel-guest-image-9.0)
  - Resolves: bz#2096270
    (Adjust udev/rules default path[rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 22.1-5
changelog:
  - ci-Revert-Add-native-NetworkManager-support-1224.patch [bz#2107463 bz#2104389 bz#2117532 bz#2098501]
  - ci-Revert-Use-Network-Manager-and-Netplan-as-default-re.patch [bz#2107463 bz#2104389 bz#2117532 bz#2098501]
  - ci-Revert-Revert-Setting-highest-autoconnect-priority-f.patch [bz#2107463 bz#2104389 bz#2117532 bz#2098501]
  - Resolves: bz#2107463
    ([RHEL-9.1] Cannot run sysconfig when changing the priority of network renderers)
  - Resolves: bz#2104389
    ([RHEL-9.1]Failed to config static IP and IPv6 according to VMware Customization Config File)
  - Resolves: bz#2117532
    ([RHEL9.1] Revert patch of configuring networking by NM keyfiles)
  - Resolves: bz#2098501
    ([RHEL-9.1] IPv6 not workable when cloud-init configure network using NM keyfiles)


author: Camilla Conte <cconte@redhat.com> - 22.1-6
changelog:
  - ci-cloud.cfg.tmpl-make-sure-centos-settings-are-identic.patch [bz#2115565]
  - Resolves: bz#2115565
    (cloud-init configures user "centos" or "rhel" instead of "cloud-user" with cloud-init-22.1)


author: Camilla Conte <cconte@redhat.com> - 22.1-7
changelog:
  - ci-Ensure-network-ready-before-cloud-init-service-runs-.patch [bz#2152100]
  - Resolves: bz#2152100
    ([RHEL-9] Ensure network ready before cloud-init service runs on RHEL)


author: Camilla Conte <cconte@redhat.com> - 22.1-8
changelog:
  - ci-cc_set_hostname-ignore-var-lib-cloud-data-set-hostna.patch [bz#2140893]
  - Resolves: bz#2140893
  (systemd[1]: Failed to start Initial cloud-init job after reboot system via sysrq 'b')


author: Camilla Conte <cconte@redhat.com> - 22.1-9
changelog:
  - ci-Allow-growpart-to-resize-encrypted-partitions-1316.patch [bz#2166245]
  - Resolves: bz#2166245
    (Add support for resizing encrypted root volume)


author: Alan Steinberg <alan.steinberg@oracle.com> - 22.1-10
changelog:
  - System didn't generate ssh host keys and lost ssh connection after cloud-init
    removed them with updated cloud-init package.


author: Alan Steinberg <alan.steinberg@oracle.com> - 22.1-10.0.1
changelog:
  - Increase retry value and add timeout for OCI [Orabug: 35329883]
  - Fix CVE-2023-1786 [Orabug: 35302969]
  - Fix log file permission [Orabug: 35302969]
  - Update detection logic for OL distros in config template [Orabug: 34845400]
  - Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938]
  - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
  - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)
  - added OL to list of known distros


author: Alex Burmashev <alexander.burmashev@oracle.com> - 22.1-6.0.1
changelog:
  - Update detection logic for OL distros in config template [Orabug: 34845400]
  - Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938]
  - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
  - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)
  - added OL to list of known distros


author: Camilla Conte <cconte@redhat.com> - 22.1-6
changelog:
  - ci-Ensure-network-ready-before-cloud-init-service-runs-.patch [bz#2153183]
  - Resolves: bz#2153183
    ([RHEL-9] Ensure network ready before cloud-init service runs on RHEL [rhel-9.1.0.z])


author: Camilla Conte <cconte@redhat.com> - 22.1-7.el9_1
changelog:
  - ci-cc_set_hostname-ignore-var-lib-cloud-data-set-hostna.patch [bz#2165942]
  - Resolves: bz#2165942
    (systemd[1]: Failed to start Initial cloud-init job after reboot system via sysrq 'b' [RHEL-9] [rhel-9.1.0.z])


author: Camilla Conte <cconte@redhat.com> - 23.1.1-4
changelog:
  - 0009-Make-user-vendor-data-sensitive-and-remove-log-permi.patch [bz#2190083]
  - Resolves: bz#2190083


author: Camilla Conte <cconte@redhat.com> - 23.1.1-5
changelog:
  - 0010-Do-not-generate-dsa-and-ed25519-key-types-when-crypt.patch [bz#2187164]
  - Resolves: bz#2187164


author: Camilla Conte <cconte@redhat.com> - 23.1.1-6
changelog:
  - 0011-Revert-Manual-revert-Use-Network-Manager-and-Netplan.patch
  - 0012-Revert-Revert-Add-native-NetworkManager-support-1224.patch
  - 0013-net-sysconfig-do-not-use-the-highest-autoconnect-pri.patch
  - 0014-net-sysconfig-cosmetic-fix-tox-formatting.patch
  - 0015-nm-generate-ipv6-stateful-dhcp-config-at-par-with-sy.patch [bz#2207716]
  - 0016-network_manager-add-a-method-for-ipv6-static-IP-conf.patch [bz#2196284]
  - 0017-net-sysconfig-enable-sysconfig-renderer-if-network-m.patch [bz#2194050]
  - 0018-network-manager-Set-higher-autoconnect-priority-for-.patch [bz#2196231]
  - 0019-Set-default-renderer-as-sysconfig-for-c9s-RHEL-9.patch [bz#2209349]
  - Resolves: bz#2118235 bz#2194050 bz#2196231 bz#2196284 bz#2207716 bz#2209349


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.1.1-7
changelog:
  - 0020-Revert-Set-default-renderer-as-sysconfig-for-c9s-RHE.patch
  - 0021-Set-default-renderer-as-sysconfig-for-centos-rhel-41.patch [bz#2209349]
  - Resolves: bz#2209349


author: Camilla Conte <cconte@redhat.com> - 23.1.1-8
changelog:
  - 0022-test-fixes-update-tests-to-reflect-AUTOCONNECT_PRIOR.patch [bz#2217865]
  - 0023-test-fixes-remove-NM_CONTROLLED-no-from-tests.patch [bz#2217865]
  - 0024-Revert-limit-permissions-on-def_log_file.patch [bz#2217865]
  - 0025-test-fixes-changes-to-apply-RHEL-specific-config-set.patch [bz#2217865]
  - 0026-Enable-SUSE-based-distros-for-ca-handling-2036.patch [bz#2217865]
  - 0027-Handle-non-existent-ca-cert-config-situation-2073.patch [bz#2217865]
  - 0028-logging-keep-current-file-mode-of-log-file-if-its-st.patch [bz#2222498]
  - 0029-DS-VMware-modify-a-few-log-level-4284.patch [bz#2225374]
  - Resolves: bz#2217865 bz#2222498 bz#2225374


author: Camilla Conte <cconte@redhat.com> - 23.1.1-9
changelog:
  - 0030-NM-renderer-set-default-IPv6-addr-gen-mode-for-all-i.patch [bz#2188388]
  - Resolves: bz#2188388


author: Darren Archibald <darren.archibald@oracle.com> - 23.1.1-11.0.1
changelog:
  - Increase retry value and add timeout for OCI [Orabug: 35329883]
  - Fix log file permission [Orabug: 35302969]
  - Update detection logic for OL distros in config template [Orabug: 34845400]
  - Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938]
  - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
  - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)
  - added OL to list of known distros


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-11
changelog:
  - ci-fix-Always-use-single-datasource-if-specified-5098.patch [RHEL-36255]
  - Resolves: RHEL-36255
    ([rhel-9.5] DataSourceNoCloudNet not configurable via config files)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-12
changelog:
  - ci-fix-cloudstack-Use-parsed-lease-file-for-virtual-rou.patch [RHEL-40217]
  - Resolves: RHEL-40217
    ([Cloud-init] CloudstackDataSource cannot work with NetworkManager)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-13
changelog:
  - ci-feat-sysconfig-Add-DNS-from-interface-config-to-reso.patch [RHEL-17961]
  - ci-fix-jsonschema-Add-missing-sudo-definition-5418.patch [RHEL-44337]
  - ci-doc-update-examples-to-reflect-alternative-ways-to-p.patch [RHEL-44337]
  - ci-fix-dhcp-Guard-against-FileNotFoundError-and-NameErr.patch [RHEL-44598]
  - ci-fix-Address-TIOBE-abstract-interpretation-issues-486.patch [RHEL-44598]
  - ci-Update-pylint-version-to-support-python-3.12-5338.patch [RHEL-44598]
  - Resolves: RHEL-17961
    ([RHEL-9] cloud-init fails to configure DNS search domains)
  - Resolves: RHEL-44337
    ([rhel-9] fix `SUDO` configuration schema for users and groups)
  - Resolves: RHEL-44598
    (fix pylint error and support python 3.12)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-14
changelog:
  - ci-Deprecate-the-users-ssh-authorized-keys-property-516.patch [RHEL-45262]
  - ci-docs-Add-deprecated-system_info-to-schema-5168.patch [RHEL-45262]
  - ci-fix-schema-permit-deprecated-hyphenated-keys-under-u.patch [RHEL-45262]
  - Resolves: RHEL-45262
    (Deprecate the users ssh-authorized-keys property and permit deprecated hyphenated keys under users key)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-15
changelog:
  - ci-Support-metalink-in-yum-repository-config-5444.patch [RHEL-44916]
  - ci-fix-vmware-Set-IPv6-to-dhcp-when-there-is-no-IPv6-ad.patch [RHEL-46194]
  - Resolves: RHEL-44916
    ([RFE] Support metalink in yum repository config)
  - Resolves: RHEL-46194
    ([RHEL-9] It leaves the ipv6 networking config as blank in NM keyfile when config dhcp ipv6 with customization spec)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-16
changelog:
  - ci-fix-add-schema-rules-for-baseurl-and-metalink-in-yum.patch [RHEL-46873]
  - Resolves: RHEL-46873
    (Suggest to update schema to support metalink)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-17
changelog:
  - ci-fix-Clean-cache-if-no-datasource-fallback-5499.patch [RHEL-49736]
  - ci-Support-setting-mirrorlist-in-yum-repository-config-.patch [RHEL-49674]
  - Resolves: RHEL-49736
    ([Cloud-init] [RHEL-9] Password reset feature broken with CloudstackDataSource)
  - Resolves: RHEL-49674
    (Support setting mirrorlist in yum repository config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-18
changelog:
  - ci-Revert-fix-vmware-Set-IPv6-to-dhcp-when-there-is-no-.patch [RHEL-54373]
  - Resolves: RHEL-54373
    ([RHEL9]Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)")


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-19
changelog:
  - ci-fix-Add-subnet-ipv4-ipv6-to-network-schema-5191.patch [RHEL-54686]
  - Resolves: RHEL-54686
    ([RHEL-9.5] cloud-init schema validation fails.)


author: EL Errata <el-errata_ww@oracle.com> - 23.4-19.0.1
changelog:
  - NetworkManagerActivator brings up interface failed when using sysconfig renderer [RHEL-18981]
  - Fix Oracle Datasource network and getdata methods for OCI OL [Orabug: 35950168]
  - Increase retry value and add timeout for OCI [Orabug: 35329883]
  - Fix log file permission [Orabug: 35302969]
  - Update detection logic for OL distros in config template [Orabug: 34845400]
  - Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938]
  - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
  - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)
  - added OL to list of known distros
  Resolves: rhbz#1427280
  Resolves: rhbz#1427280


author: Alex Burmashev <alexander.burmashev@oracle.com> - 23.4-19.0.2.el9_5.4
changelog:
  - Backport upstream refactor: Ensure internal DNS state same for v1 and v2
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65768]
  - Resolves: RHEL-65768
    ([RHEL-9] Prevent NM from handling DNS when network interfaces have DNS config)
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-38927]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-38927]
  - Resolves: RHEL-38927
    (NoCloud - network_config bridges incorrectly configured)
  - ci-Fix-metric-setting-for-ifcfg-network-connections-for.patch [RHEL-61224]
  - ci-fix-python3.13-Fix-import-error-for-passlib-on-Pytho.patch [RHEL-61224]
  - Resolves: RHEL-61224
    (Configuring metric for default gateway is not working)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-19.el9_5.1
changelog:
  - ci-Fix-metric-setting-for-ifcfg-network-connections-for.patch [RHEL-65018]
  - ci-fix-python3.13-Fix-import-error-for-passlib-on-Pytho.patch [RHEL-65018]
  - Resolves: RHEL-65018
    (Configuring metric for default gateway is not working [rhel-9.5.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-19.el9_5.2
changelog:
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-65021]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-65021]
  - Resolves: RHEL-65021
    (NoCloud - network_config bridges incorrectly configured [rhel-9.5.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-19.el9_5.3
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65778]
  - Resolves: RHEL-65778
    ([RHEL-9] Prevent NM from handling DNS when network interfaces have DNS config [rhel-9.5.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-19.el9_5.4
changelog:
  - ci-refactor-Ensure-internal-DNS-state-same-for-v1-and-v.patch [RHEL-68409]
  - Resolves: RHEL-68409
    (cloud-init fails to configure DNS and search domain [rhel-9.5.z])


author: Jon Maloy <jmaloy@redhat.com> - 23.4-19.el9_5.5
changelog:
  - ci-fix-nocloud-smbios-datasource-definition.patch [RHEL-79774]
  - Resolves: RHEL-79774
    ([RHEL 9] Backport support for smbios datasource definition [rhel-9.5.z])


author: Darren Archibald <darren.archibald@oracle.com> - 23.4-19.0.2.el9_5.5
changelog:
  - Fixes regression in cloud-init-23.4-19.0.1 with module cc_write_files_deferred [Orabug: 36958039]
  - NetworkManagerActivator brings up interface failed when using sysconfig renderer [RHEL-18981]
  - Fix Oracle Datasource network and getdata methods for OCI OL [Orabug: 35950168]
  - Increase retry value and add timeout for OCI [Orabug: 35329883]
  - Fix log file permission [Orabug: 35302969]
  - Update detection logic for OL distros in config template [Orabug: 34845400]
  - Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938]
  - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
  - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)
  - added OL to list of known distros
  Resolves: rhbz#1427280
  Resolves: rhbz#1427280


author: Jon Maloy <jmaloy@redhat.com> - 23.4-19.el9_5.6
changelog:
  - ci-fix-rh_subscription-add-string-type-to-org-5453.patch [RHEL-81163]
  - Resolves: RHEL-81163
    (Cloud-init fails to subscribe system if activation key 'org' is not an integer [rhel-9.5.z])


author: Camilla Conte <cconte@redhat.com> - 23.4-2
changelog:
  - 0003-Setting-autoconnect-priority-setting-for-network-scr.patch [RHEL-18313]
  - Resolves: RHEL-18313


author: Camilla Conte <cconte@redhat.com> - 23.4-3
changelog:
  - 0004-net-network_manager-do-not-set-may-fail-to-False-for.patch [RHEL-21629]
  - 0005-net-allow-dhcp6-configuration-from-generate_fallback.patch [RHEL-21629]
  - Resolves: RHEL-21629
  - 0006-net-nm-check-for-presence-of-ifcfg-files-when-nm-con.patch [RHEL-17609]
  - Resolves: RHEL-17609
  - 0007-test-jsonschema-Pin-jsonschema-version-4781.patch


author: Camilla Conte <cconte@redhat.com> - 23.4-4
changelog:
  - 0008-fix-clean-stop-warning-when-running-clean-command-47.patch [RHEL-21531]
  - Resolves: RHEL-21531


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-5
changelog:
  - ci-Revert-Use-grep-for-faster-parsing-of-cloud-config-i.patch [RHEL-22255]
  - Resolves: RHEL-22255
    ([Azure][RHEL-9] cloud-init-23.4 cannot read "- Azure" datasource_list format)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-6
changelog:
  - ci-fix-Add-types-to-network-v1-schema-4841.patch [RHEL-21324]
  - Resolves: RHEL-21324
    ([rhel-9] The schema WARNING info for network-config.json is not suitable in cloud-init-23.4)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7
changelog:
  - ci-Retain-exit-code-in-cloud-init-status-for-recoverabl.patch [RHEL-28549]
  - Resolves: RHEL-28549
    ([RHEL 9.4] cloud-init 23.4 returns 2 on recoverable errors instead of 0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el9_4.1
changelog:
  - ci-fix-Correct-v2-NetworkManager-route-rendering-463.patch [RHEL-29558]
  - ci-feat-apply-global-DNS-to-interfaces-in-network-mana.patch [RHEL-29558]
  - ci-fix-Undeprecate-network-in-schema-route-definition.patch [RHEL-29718]
  - Resolves: RHEL-29558
    ([rhel-9]cloud-init fails to configure DNS/search domains for network-config v1 [rhel-9.4.0.z])
  - Resolves: RHEL-29718
    (Suggest to backport patch ff40d1a to undeprecate 'network' in schema route definition [rhel-9.4.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el9_4.2
changelog:
  - ci-fix-Fall-back-to-cached-local-ds-if-no-valid-ds-foun.patch [RHEL-32845]
  - Resolves: RHEL-32845
    ([cloud-init][ESXi]VMware datasource resets on every boot causing it to lose network configuration [rhel-9.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el9_4.3
changelog:
  - ci-fix-Always-use-single-datasource-if-specified-5098.patch [RHEL-36700]
  - Resolves: RHEL-36700
    (DataSourceNoCloudNet not configurable via config files [rhel-9.4.z])


author: Darren Archibald <darren.archibald@oracle.com> - 23.4-7.0.1.el9_4.3
changelog:
  - NetworkManagerActivator brings up interface failed when using sysconfig renderer [RHEL-18981]
  - Fix Oracle Datasource network and getdata methods for OCI OL [Orabug: 35950168]
  - Increase retry value and add timeout for OCI [Orabug: 35329883]
  - Fix log file permission [Orabug: 35302969]
  - Update detection logic for OL distros in config template [Orabug: 34845400]
  - Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938]
  - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
  - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)
  - added OL to list of known distros


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el9_4.4
changelog:
  - ci-fix-cloudstack-Use-parsed-lease-file-for-virtual-rou.patch [RHEL-40419]
  - Resolves: RHEL-40419
    ([Cloud-init] CloudstackDataSource cannot work with NetworkManager [rhel-9.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el9_4.5
changelog:
  - ci-feat-sysconfig-Add-DNS-from-interface-config-to-reso.patch [RHEL-46012]
  - Resolves: RHEL-46012
    ([RHEL-9] cloud-init fails to configure DNS search domains [rhel-9.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el9_4.6
changelog:
  - ci-fix-Clean-cache-if-no-datasource-fallback-5499.patch [RHEL-50562]
  - Resolves: RHEL-50562
    ([Cloud-init] [RHEL-9.4] Password reset feature broken with CloudstackDataSource)


author: EL Errata <el-errata_ww@oracle.com> - 23.4-7.0.1.el9_4.6
changelog:
  - NetworkManagerActivator brings up interface failed when using sysconfig renderer [RHEL-18981]
  - Fix Oracle Datasource network and getdata methods for OCI OL [Orabug: 35950168]
  - Increase retry value and add timeout for OCI [Orabug: 35329883]
  - Fix log file permission [Orabug: 35302969]
  - Update detection logic for OL distros in config template [Orabug: 34845400]
  - Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938]
  - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
  - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)
  - added OL to list of known distros
  Resolves: rhbz#1427280


author: Camilla Conte <cconte@redhat.com> - 23.1.1-12
changelog:
  - Resolves: RHEL-2323
  - 0031-net-fix-ipv6_dhcpv6_stateful-stateless-slaac-configu.patch [bz#2227767]
  - Resolves: bz#2227767


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-20
changelog:
  - ci-Fix-metric-setting-for-ifcfg-network-connections-for.patch [RHEL-61224]
  - ci-fix-python3.13-Fix-import-error-for-passlib-on-Pytho.patch [RHEL-61224]
  - Resolves: RHEL-61224
    (Configuring metric for default gateway is not working)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-21
changelog:
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-38927]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-38927]
  - Resolves: RHEL-38927
    (NoCloud - network_config bridges incorrectly configured)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-22
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65768]
  - Resolves: RHEL-65768
    ([RHEL-9] Prevent NM from handling DNS when network interfaces have DNS config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-2
changelog:
  - ci-downstream-Revert-feat-Use-NetworkManager-renderer-b.patch [RHEL-74334]
  - Resolves: RHEL-74334
    ([rhel-9.6] Suggest to continue using sysconfig as the default network renderer in rhel-9.6)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-3
changelog:
  - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-71122]
  - ci-downstream-set-deprecation-boundary-version.patch [RHEL-71122]
  - Resolves: RHEL-71122
    (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [RHEL-9.6] )


author: Jon Maloy <jmaloy@redhat.com> - 24.4-4
changelog:
  - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-76361]
  - Resolves: RHEL-76361
    ([c9s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: EL Errata <el-errata_ww@oracle.com> - 24.4-4.0.1
changelog:
  - Fix Oracle Datasource network and getdata methods for OCI OL [Orabug: 35950168]
  - Fix log file permission [Orabug: 35302969]
  - Update detection logic for OL distros in config template [Orabug: 34845400]
  - Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938]
  - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
  - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)
  - added OL to list of known distros
  Resolves: rhbz#1427280
  Resolves: rhbz#1427280


author: Jon Maloy <jmaloy@redhat.com> - 24.4-4.el9_6.1
changelog:
  - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-83636]
  - Resolves: RHEL-83636
    (DataSourceNoCloudNet network configuration is ineffective [rhel-9.6.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-4.el9_6.2
changelog:
  - Adding missed fix 'Retain exit code in cloud-init status for recoverable errors'
  - Resolves: RHEL-101693


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-4.el9_6.3
changelog:
  - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100611]
  - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100611]
  - Resolves: RHEL-100611
    (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-9.6.z])


author: Jon Maloy <jmaloy@redhat.com> - 24.4-5
changelog:
  - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81703]
  - Resolves: RHEL-81703
    (DataSourceNoCloudNet network configuration is ineffective - c9s)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-6
changelog:
  - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88658]
  - Resolves: RHEL-88658
    (Cloud-Init Backport Optimization Features on Alibaba Cloud)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-7
changelog:
  - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100615]
  - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100615]
  - Fix missing patch [RHEL-101692]
  - Resolves: RHEL-100615
    (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-9.7])
  - Resolves: RHEL-101692
    (c9s dist-git missing patch "downstream: Retain exit code in cloud-init status for recoverable errors")


author: Jon Maloy <jmaloy@redhat.com> - 24.4-7.el9_7.1
changelog:
  - ci-downstream-Do-not-override-changes-in-disable-sshd-k.patch [RHEL-128876]
  - Resolves: RHEL-128876
    ([rhel-9] cloud-init upgrade is overwriting modifications in disable-sshd-keygen-if-cloud-init-active.conf)


author: Martin Pitt <mpitt@redhat.com> - 260-1
changelog:
  - Certificate login validation: Action required on updates
  - Client: Show previously used hosts
  - Client: Support port specification
  - bridge: Warning on missing cockpit-system package


author: EL Errata <el-errata_ww@oracle.com> - 264.1-1.0.1
changelog:
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Replace Oracle URLs
  - Update documentation links [Orabug: 32795691]
  - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
  - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]


author: EL Errata <el-errata_ww@oracle.com> - 264.2-1.0.1
changelog:
  - Replace upstream references [Orabug: 34398512]
  - Fix "virtual" network device detection code [Orabug: 33865214]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Replace Oracle URLs
  - Update documentation links [Orabug: 32795691]
  - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
  - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]


author: Packit <hello@packit.dev> - 272-1
changelog:
  - Firewall: Edit custom services
  - Services: Pin services as favorites
  - Login: Dark mode
  - Unprivileged cockpit/ws container mode


author: Packit <hello@packit.dev> - 273-1
changelog:
  - Metrics: Display CPU temperature
  - Networking: Suggest netmask and gateway addresses
  - Software Updates: Optionally reboot after updating
  - cockpit/ws container: Support modern SSH keys


author: Packit <hello@packit.dev> - 274-1
changelog:
  - ws: Fix segfault with channel closing (#17492)
  - Services: Fix time picker behaviour in Timer creation dialog
  - Metrics: Improve CPU temperature sensors detection


author: EL Errata <el-errata_ww@oracle.com> - 276.1-1.0.1
changelog:
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876]


author: Packit <hello@packit.dev> - 286.1-1
changelog:
  - Users: Fix broken alignment of the first column in groups table
  - Translation updates (rhbz#2139644)


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 286.2-1.0.1
changelog:
  - NBDE on block devices without a filesystem is broken. (BZ#2207498)
  - node_modules: update chrome-remote-interface for chromium 111.


author: Packit <hello@packit.dev> - 299-1
changelog:
  - Kdump: Show location of kdump to verify the successful configuration test
  - Storage: Support for no-overprovisioning with Stratis
  - Storage: Cockpit can now add caches to encrypted Stratis pools


author: Packit <hello@packit.dev> - 300-1
changelog:
  - Celebrating the Nürnberg life release!
  - Storage: Support for growing block devices of a Stratis pool


author: Alex Burmashev <alexander.burmashev@oracle.com> - 300.1-1.0.1
changelog:
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876]
  - Update spec file for new release


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 300.3-1.0.1
changelog:
  - Update to 300.3
  - Resolves: RHEL-3537 - cockpit.peer: don't explode on authorize messages
  - Resolves: RHEL-5341 - Fix large file uploads through cockpit.spawn()
  - Resolves: RHEL-5765 - cockpit.superuser: prevent 'any' from being set


author: Mark Will <mark.will@oracle.com> - 300.4-1.0.1
changelog:
  - client: Provide fallback for GLib.get_user_state_dir() (RHEL-18989)
  - bridge: Add back menu/tool names to cockpit-bridge --packages (RHEL-19004)
  - bridge: Add back support for x.min.js files (RHEL-19005)


author: EL Errata <el-errata_ww@oracle.com> - 311.2-1.0.1
changelog:
  - Replaced upstream urls in documentation with oracle links [Orabug: 36528753]
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876]
  - Update spec file for new release


author: Packit <hello@packit.dev> - 318-1
changelog:
  - Storage: Extra confirmation before deleting non-empty partitions in Anaconda's Web UI
  - Discontinue Intel 32-bit support in Fedora, CentOS, and RHEL
  - cockpit.js: Get user primary group ID


author: Packit <hello@packit.dev> - 320-1
changelog:
  - pam-ssh-add: Fix insecure killing of session ssh-agent [CVE-2024-6126]
  - sosreport: Read report directory from sos config (fix page on Debian/Ubuntu)


author: Packit <hello@packit.dev> - 323-1
changelog:
  - metrics: Install valkey instead of redis on RHEL/CentOS 10
  - login: Prevent multiple logins in a single browser session
  - Update documentation links


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 323.1-1.0.1
changelog:
  - Replaced upstream urls in documentation with oracle links [Orabug: 36528753]
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273]
  - Update spec file for new release


author: Packit <hello@packit.dev> - 330-1
changelog:
  - Web server: Increased sandboxing, setuid removal, bootc support
  - Development: New install mode using systemd-sysext
  - ws container: Move to Fedora 41


author: Packit <hello@packit.dev> - 331-1
changelog:
  - ws: Prevent search engine indexing with robots.txt
  - container/ws: Support using an external SSH agent


author: Packit <hello@packit.dev> - 332-1
changelog:
  - containers/ws: Include cockpit-files
  - login: Beibooting to all supported OSes
  - metrics: Show system boots in metrics


author: EL Errata <el-errata_ww@oracle.com> - 334.1-1.0.1
changelog:
  - Storage: Enable btrfs support [Orabug: 37464632]
  - Replaced upstream urls in documentation with oracle links [Orabug: 36528753]
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273]
  - Update spec file for new release


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Tomas Matus <tmatus@redhat.com> - 356.1-1
changelog:
  - ws: Prevent remote code execution with SSH argument injection (RHEL-158310)
  - node: update lodash dependency (RHEL-164196)


author: EL Errata <el-errata_ww@oracle.com> - 356.2-1.0.1
changelog:
  - Apply the patch for duplicate reference [Orabug: 39250109]
  - Storage: Enable btrfs support [Orabug: 37464632]
  - Replaced upstream urls in documentation with oracle links [Orabug: 36528753]
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273]
  - Update spec file for new release


author: Jacob Kozol <jkozol@redhat.com> - 31-1
changelog:
  - Add new ostree image types
  - Improve loading state when waiting for api responses
  - Improve notification system
  - Improve test stability
  - Update NPM dependencies
  - Update translations


author: Jacob Kozol <jkozol@redhat.com> - 32-1
changelog:
  - Add Edge Raw, RHEL Installer, Edge Simplified Installer image types
  - Improve user account modal responsiveness
  - Update tests
  - Update minor NPM dependencies
  - Update translation files


author: EL Errata <el-errata_ww@oracle.com> - 36-1.0.1
changelog:
  - Make per page documentation links point to Oracle Linux [Orabug: 32013095]
  - Do not deliver extra files. [Orabug: 33555380]


author: EL Errata <el-errata_ww@oracle.com> - 52-1.0.1
changelog:
  - Add runner for ol8 and ol9 [Orabug: 36400619]
  - Make per page documentation links point to Oracle Linux [Orabug: 32013095], [Orabug:34398922]


author: EL Errata <el-errata_ww@oracle.com> - 53.1-1.0.1
changelog:
  - Fix Image Builder flickering [Orabug: 37252082]
  - Add runner for ol8 and ol9 [Orabug: 36400619]
  - Make per page documentation links point to Oracle Linux [Orabug: 32013095], [Orabug:34398922]


author: Packit <hello@packit.dev> - 11-1
changelog:
  - Show SELinux security context in permissions dialog
  - Support changing permissions of enclosed files


author: Packit <hello@packit.dev> - 14-1
changelog:
  - Allow editing multiple file permissions
  - Support uploading files with administrator privileges
  - Add drag 'n drop support


author: Marius Vollmer <mvollmer@redhat.com> - 258-1
changelog:
  - Move storage pool actions outside of the expanded row
  - Move the 'Overview' tab content from the network rows to the expanded row directly


author: Katerina Koukiou <kkoukiou@redhat.com> - 256-1
changelog:
  - Now officially supported on Arch Linux (https://archlinux.org/)
  - Support selecting between consoles of the same type


author: Martin Pitt <mpitt@redhat.com> - 308.3-1
changelog:
  - Only use external snapshots for disks of type "file" (RHEL-34569)
   - Skip empty media drives for external snapshots
   - Refresh VM after creating/reverting/deleting snapshots
   - Don't list disks in snapshot XML
   - Fix detaching host devices for running VMs (RHEL-31082)


author: Packit <hello@packit.dev> - 311-1
changelog:
  - Allow pasting multiple SSH keys at once in Create VM dialog
  - Fix detaching host device for running VMs


author: Packit <hello@packit.dev> - 332-1
changelog:
  - The "shareable" attribute of disks is no longer modified by Cockpit
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 336-1
changelog:
  - Graphical VNC and serial consoles improvements
  - Control VNC console resizing and scaling
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 345-1
changelog:
  - New virtual machines don't get SPICE graphics anymore
  - Support for network port forwarding
  - Bug fixes and translation updates


author: Jindrich Novy <jnovy@redhat.com> - 84.1-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1
  - Related: RHEL-2112


author: Packit <hello@packit.dev> - 89-1
changelog:
  - Use binary http channel for podman socket for non-UTF-8 robustness
  - Stop using obsolete cockpit.utf8_{de,en}coder() API
  - Fix tests for CentOS/RHEL 10


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Release v7
  - Remove bots sudo rm from Makefile
  - Use journalctl --utc for Logs view to handle DST
  - Add Applications Menu test
  - Install cockpit-packagekit in local VM
  - Set timezone for Logs Correlation test


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Avoid crash in unmount if journal is null
  - Sync Makefile closer to starter-kit
  - Use current babel/eslint integration
  - Use Flex layout for spacing the two config cards in the config page
  - Use Page/PageSection/Breadcrumb patternfly components
  - Move to xz dist tarballs
  - Remove unused slider.html file
  - package.json: explicitely depend on @patternfly/react-icons
  - webpack: Use relative resolve path for npm 7 compatibility
  - package.json: update patternfly packages
  - package.json: use sass instead of node-sass
  - Fetch pkg/lib automatically from cockpit instead of keeping a local copy
  - Update Docker image and TEST_OS run to Fedora 35
  - Tests: Test SSSD exclude_users and exclude_groups
  - Config: Add SSSD exclude_users and exclude_groups
  - TESTS: Fix testSessionRecordingConf cleanup issue
  - TESTS: Restart SSSD after restoring config


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Drop moment.js dependency
  - Tests: Assert pause state with a later command in rec1
  - CI: Update image to ubuntu 20.04


author: Justin Stephenson <jstephen@redhat.com> - 13-1
changelog:
  - Play after rewind in testFastforwardControls
  - Set TZ to avoid CI failures with testFilter* tests
  - testZoomSpeedControls incorrectly checks scale
  - Fix testSessionRecordingConf
  - Read TMT_TEST_DATA variable for LOGS in browser.sh
  - Fix node-modules in run-test.sh
  - Install sssd-proxy in test browser.sh
  - Add Files path for test recordings
  - FMF: Run tests together
  - Add executable bit to browser shell scripts
  - FMF: Fix minor typo in plans
  - Add FMF tests and test scripts
  - Read existing sssd conf domains and services
  - Makefile: Update Cockpit lib to 269bf89276c679a03befc8a04244addd
  - Remove CentOS condition in testZoomSpeedControls
  - Add accessible name label for Progress component
  - Remove 'enable_files_domain' from SSSD Config
  - SSSD config changes
  - testFastforwardControls update after player-restart
  - Switch wait_present to wait_visible
  - ESLint error and warning fixes
  - Fix stylelint errors
  - Dependency updates
  - Bring up to date with cockpit starter kit
  - Config: Switch SSSD files provider to Proxy provider
  - Update fedora license in spec file
  - Makefile: Bump test API to 267
  - Makefile: drop installing cockpit-ws/cockpit-packagekit
  - src: load translations via po.js
  - .semaphore: update TEST_OS to Fedora 36
  - webpack.config.js: update compression plugin to succeed build
  - Makefile: Adjust to changed rpmspec -q behaviour
  - Use standard "translate" marker in HTML
  - Update dependencies excluding Patternfly
  - Remove unneeded tlog UID code


author: Justin Stephenson <jstephen@redhat.com> - 16-1
changelog:
  - Rebase to upstream release 16
  - Config: Add sssd-proxy requirement
  - Commits from release 15
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class
  - Commits from release 14
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Justin Stephenson <jstephen@redhat.com> - 17-1
changelog:
  - Rebase to upstream release 17
  - Config: Use authselect enable-feature when possible
  - Test: Move from CDP to BiDi
  - Replace jQuery extend() with standard JS spread
  - Convert to TypeScript
  - Convert Application to a functional component
  - package.json: Drop date-fns
  - Various test fixes and build related fixes


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-2
changelog:
  - Remove support for building FIPS mode binaries for the
    compat libraries
  - Ships openssl11.cnf as the configuration file.
  - Resolves: rhbz#1993795
  - Related: rhbz#1947584


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2063147
  - Disable FIPS mode; it does not work and will not be certified
    Resolves: rhbz#2091968


author: Federico Ramírez <federico.r.ramirez@oracle.com> - 1:1.1.1k-4.0.1
changelog:
  - Backport upstream PRs 18446 and 18481 which update
    certificates used for the self-tests [Orabug: 34326055]


author: Petr Hybl <phybl@redhat.com> - 1:1.1.1k-5.2
changelog:
  - Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
    Resolves: RHEL-142722


author: Petr Hybl <phybl@redhat.com> - 1:1.1.1k-5.2
changelog:
  - Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
    Resolves: RHEL-142723


author: Pavol Žáčik <pzacik@redhat.com> - 1:1.1.1k-5.3
changelog:
  - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
    Resolves: RHEL-165863


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20141121-15
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.2-2
changelog:
  - update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
    (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.2-2
changelog:
  - update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
    (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3:2.2.1-1
changelog:
  - update to https://github.com/containers/conmon/releases/tag/v2.2.1
  - enable RELRO
  - Related: RHEL-111919


author: Phil Sutter <psutter@redhat.com> - 1.4.5-10
changelog:
  - Drop lazy binding via patch from upstream
  - Add patches to fix for failing RPC header search
  - Enable hardened builds again
  - Fix source compile in tests.yml


author: Phil Sutter <psutter@redhat.com> - 1.4.5-10.1
changelog:
  - conntrackd: use correct max unix path length
  - conntrackd: Use strdup in lexer
  - conntrackd: use strncpy() to unix path


author: Phil Sutter <psutter@redhat.com> - 1.4.5-15
changelog:
  - conntrack: fix compiler warnings
  - src: fix strncpy -Wstringop-truncation warnings
  - connntrack: Fix for memleak when parsing -j arg
  - Drop pointless assignments
  - Don't call exit() from signal handler
  - read_config_yy: Drop extra argument from dlog() call
  - helpers: ftp: Avoid ugly casts
  - Fix potential buffer overrun in snprintf() calls
  - cache: Fix features array allocation
  - hash: Flush tables when destroying


author: Phil Sutter <psutter@redhat.com> - 1.4.7-1
changelog:
  - config: Fix -Wimplicit-function-declaration
  - network: Fix -Wstrict-prototypes
  - build: don't suppress various warnings
  - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
  - New version 1.4.7


author: Kelvin Fan <kfan@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Require util-linux >= 2.36-1
  - Remove files related to the issuegen and motdgen executables


author: Jindrich Novy <jnovy@redhat.com> - 3:2.172.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.172.1
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.173.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.0
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.173.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.1
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.173.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.2
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.174.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.174.0
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.176.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.176.0
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.177.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.177.0
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.178.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.178.0
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.179.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.179.1
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.180.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.180.0
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 3:2.181.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.181.0
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 3:2.183.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.183.0
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 3:2.187.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.187.0
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:2.188.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.188.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3:2.188.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.188.0
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 3:2.189.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.189.0
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 3:2.190.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.190.0
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 3:2.191.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.191.0
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 3:2.193.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.193.0
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 3:2.195.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.195.1
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 3:2.197.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.197.0
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 3:2.198.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.198.0
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 3:2.199.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.199.0
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 3:2.205.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.205.0
  - remove user_namespace class, thanks to Lokesh Mandvekar
  - Resolves: #2178990


author: Lokesh Mandvekar <lsm5@redhat.com> - 3:2.211.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.211.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.213.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.213.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.215.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.215.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.216.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.216.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.217.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.217.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.218.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.218.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.219.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.219.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.221.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.221.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.222.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.222.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.224.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.224.0
  - Related: Jira:RHEL-2112


author: Lokesh Mandvekar <lsm5@redhat.com> - 3:2.226.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.226.0
  - Remove dependency on policycoreutils-python-utils
  - Related: Jira:RHEL-2112
  - Related: Jira:RHEL-18316


author: Jindrich Novy <jnovy@redhat.com> - 3:2.227.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.227.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.228.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.228.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.1
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.229.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.229.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.229.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.229.0
  - Resolves: RHEL-28925


author: Jindrich Novy <jnovy@redhat.com> - 3:2.230.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.230.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.231.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.231.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.232.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.232.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.233.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.233.0
  - Resolves: RHEL-58997


author: Jindrich Novy <jnovy@redhat.com> - 3:2.234.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.234.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 3:2.235.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.235.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 4:2.235.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.235.0
  - Resolves: RHEL-85434


author: Jindrich Novy <jnovy@redhat.com> - 3:2.236.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.237.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.238.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.238.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.239.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.240.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.240.0
  - Related: RHEL-80816


author: Lokesh Mandvekar <lsm5@redhat.com> - 4:2.240.0-3
changelog:
  - Delete 405.patch. This was reverted upstream. If it's needed for OCP, this
  can be revisited.
  - Resolves: RHEL-123749


author: Jindrich Novy <jnovy@redhat.com> - 4:2.240.0-4
changelog:
  - Fix Selinux type container_engine_t is missing permissions to allow write to audit log
  - Resolves: RHEL-150544


author: Jindrich Novy <jnovy@redhat.com> - 4:2.241.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.241.0
  - Resolves: RHEL-112187


author: Jindrich Novy <jnovy@redhat.com> - 4:2.242.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.242.0
  - Related: RHEL-111919


author: Jindrich Novy <jnovy@redhat.com> - 4:2.244.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.244.0
  - Resolves: RHEL-112187


author: Jindrich Novy <jnovy@redhat.com> - 4:2.245.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.245.0
  - Related: RHEL-111919


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-4
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.0-2
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179960
  - Resolves: #2187333
  - Resolves: #2187376
  - Resolves: #2203705
  - Resolves: #2207519


author: Darren Archibald <darren.archibald@oracle.com> - 1:1.3.0-6
changelog:
  - rebuild for following CVEs:
  CVE-2023-29409 CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322
  - Resolves: #2228743
  - Resolves: #2237773
  - Resolves: #2237776
  - Resolves: #2237777
  - Resolves: #2237778


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.1
  - Resolves: RHEL-28855


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.2-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.2-2
changelog:
  - rebuild to fix CVE-2025-22871 containernetworking-plugins: Request smuggling due to acceptance of invalid chunked data in net/http
  - Resolves: RHEL-90031


author: Jindrich Novy <jnovy@redhat.com> - 1:1.7.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1
  - Resolves: RHEL-89428


author: Jindrich Novy <jnovy@redhat.com> - 1:1.8.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.8.0
  - Related: RHEL-111919


author: Jindrich Novy <jnovy@redhat.com> - 1:1.9.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.9.0
  - Related: RHEL-111919


author: EL Errata <el-errata_ww@oracle.com> - 1-117.0.1
changelog:
  - Disable zstd:chunked partial pull support
  - Updated removed references [Orabug: 33473101] (Alex Burmashev)
  - Adjust registries.conf (Nikita Gerasimov)
  - remove references to RedHat registry (Nikita Gerasimov)


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-131
changelog:
  - fetch TMT podman revdep tests from podman dist-git
  - needs at least podman 5.4.0-8.el9
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:1-135
changelog:
  - Update rhel-shortnames-overrides to include complete list of UBI/RHEL images
  - Resolves: RHEL-116618


author: Jindrich Novy <jnovy@redhat.com> - 2:1-41
changelog:
  - drop aardvark-dns and netavark - packaged separately
  - update vendored components
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 4:1-135
changelog:
  - Update rhel-shortnames-overrides to include complete list of UBI/RHEL images
  - Related: RHEL-111919


author: Sohan Kunkerkar <skunkerk@redhat.com> - 0.11.0-1
changelog:
  - New release
  - Fix inadvertent inclusion of coreos-installer-dracut in -bootinfra on RHEL
  - Have -dracut own 51coreos-installer directory on RHEL


author: Aashish Radhakrishnan <aaradhak@redhat.com> - 0.24.0-2
changelog:
  - Restore single-decimal precision to stream output
    Backport https://github.com/coreos/coreos-installer/pull/1654


author: Joel Capitao <jcapitao@redhat.com> - 0.24.0-3
changelog:
  - Use the full path for the 'root=' kernel arg when rootfs on mpath
    Backport https://github.com/coreos/coreos-installer/pull/1677


author: Yasmin Valim <ydesouza@redhat.com> - 0.24.0-4
changelog:
  - Check if firstboot args are defined and add them manually 
    Backport https://github.com/coreos/coreos-installer/pull/1699


author: Yasmin Valim <ydesouza@redhat.com> - 0.24.0-5
changelog:
  - Uses blkid -p instead of lsblk to bypass the cache
    Backport https://github.com/coreos/coreos-installer/pull/1692


author: Jan Friesse <jfriesse@redhat.com> - 3.1.10-1.1
changelog:
  - Resolves: RHEL-163816
  - Resolves: RHEL-163837

  - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.4-1
changelog:
  - Related: rhbz#1948974
  - Resolves: rhbz#1967485

  - New upstream release (rhbz#1948974)
  - stats: fix crash when iterating over deleted keys (rhbz#1967485)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-3
changelog:
  - Resolves: rhbz#2024652
  - Resolves: rhbz#2024657

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2024652)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2024652)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024657)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024657)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-4
changelog:
  - Resolves: rhbz#2070623

  - logrotate: Use copytruncate method by default (rhbz#2070623)
  - merge upstream commit 04362046c4a9d7307feb5b68341d567b7d0b94d6 (rhbz#2070623)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.9-2.1
changelog:
  - Resolves: RHEL-163815
  - Resolves: RHEL-163836

  - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047296)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047296)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.2
changelog:
  - add support for relocation of the PCH data (pch/71934, #2044917)
  - remove 30_threads/future/members/poll.cc (#2050090)
  - avoid overly-greedy match in dejagnu regexp (#2050089)


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.3
changelog:
  - use _thread_db_sizeof_pthread to obtain struct pthread size (#2034494)
  - add --enable-host-pie, build the compilers as PIE (#2044917)


author: Qing Zhao <qing.zhao@oracle.com> 11.2.1-9.4.0.1
changelog:
  - Merge all Oracle patches:
  - Add complex divide improvement (11.2.1-2.2.0.1)
    backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
  - Add CTF/BTF support (11.2.1-2.2.0.1)
  - Add -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.1)
  - Add more fixes for -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.2)
  - Add two more fixes for -ftrivial-auto-var-init bogus warnings from GCC12
    PR104550 and PR102276. (11.2.1-2.2.0.3)
  - NOTE: adjust gcc12-ctf-pre-1-write_symbols-to-support-bitmasks.patch
    for c-family/c-pch.c for 11.2.1-9.4
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 11.2.1-9.4.0.2
changelog:
  - Add support for -mharden-sls on X86 from GCC11
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Malcolm <dmalcolm@redhat.com> - 11.2.1-10
changelog:
  - update from releases/gcc-11-branch (#2063255)
    - PRs ada/98724, ada/104258, ada/104767, ada/104861, c++/58646, c++/59950,
  	c++/61611, c++/95036, c++/100468, c++/101030, c++/101095, c++/101371,
  	c++/101515, c++/101767, c++/102045, c++/102123, c++/102538,
  	c++/102740, c++/102990, c++/103057, c++/103186, c++/103291,
  	c++/103299, c++/103337, c++/103711, c++/103769, c++/103968,
  	c++/104107, c++/104108, c++/104284, c++/104410, c++/104472,
  	c++/104513, c++/104568, c++/104667, c++/104806, c++/104847,
  	c++/104944, c++/104994, c++/105035, c++/105061, c/82283, c/84685,
  	c/104510, c/104711, d/104659, d/105004, debug/104337, debug/104517,
  	debug/104557, fortran/66193, fortran/99585, fortran/100337,
  	fortran/103790, fortran/104211, fortran/104311, fortran/104331,
  	fortran/104430, fortran/104619, fortran/104811, go/100537,
  	libgomp/104385, libstdc++/101231, libstdc++/102358, libstdc++/103904,
  	libstdc++/104442, lto/104237, lto/104333, lto/104617,
  	middle-end/95115, middle-end/99578, middle-end/100464,
  	middle-end/100680, middle-end/100775, middle-end/100786,
  	middle-end/104307, middle-end/104402, middle-end/104446,
  	middle-end/104786, middle-end/104971, middle-end/105032,
  	preprocessor/104147, rtl-optimization/104544, rtl-optimization/104589,
  	rtl-optimization/104777, rtl-optimization/104814, sanitizer/102656,
  	sanitizer/104449, sanitizer/105093, target/79754, target/87496,
  	target/99708, target/99754, target/100784, target/101324,
  	target/102140, target/102952, target/102957, target/103307,
  	target/103627, target/103925, target/104090, target/104208,
  	target/104219, target/104253, target/104362, target/104448,
  	target/104451, target/104453, target/104458, target/104462,
  	target/104469, target/104502, target/104674, target/104681,
  	target/104688, target/104775, target/104890, target/104910,
  	target/104923, target/104963, target/104998, target/105000,
  	target/105052, target/105058, target/105068, testsuite/103556,
  	testsuite/103586, testsuite/104730, testsuite/104759,
  	testsuite/105055, tree-optimization/45178, tree-optimization/100834,
  	tree-optimization/101636, tree-optimization/102819,
  	tree-optimization/102893, tree-optimization/103169,
  	tree-optimization/103361, tree-optimization/103489,
  	tree-optimization/103544, tree-optimization/103596,
  	tree-optimization/103641, tree-optimization/103864,
  	tree-optimization/104263, tree-optimization/104288,
  	tree-optimization/104511, tree-optimization/104601,
  	tree-optimization/104675, tree-optimization/104782,
  	tree-optimization/104931, tree-optimization/105094
  - fix x86 vector initialization expansion fallback (PR target/105123)
  - drop patch 22 (gcc11-libsanitizer-pthread.patch;
    upstreamed as r11-9607-ga8dd74bfb921ed)


author: Jakub Jelinek <jakub@redhat.com> 11.3.1-2
changelog:
  - update from releases/gcc-11-branch (#2077536)
    - GCC 11.3 release
    - PRs c++/98249, c++/99893, c++/100608, c++/101051, c++/101532, c++/101677,
  	c++/101717, c++/101894, c++/102869, c++/103105, c++/103328,
  	c++/103341, c++/103455, c++/103706, c++/103885, c++/103943,
  	c++/104008, c++/104079, c++/104225, c++/104507, c++/104565,
  	c++/105003, c++/105064, c++/105143, c++/105186, c++/105256, c/101585,
  	debug/105203, fortran/102992, fortran/104210, fortran/104228,
  	fortran/104570, fortran/105138, gcov-profile/105282, ipa/103083,
  	ipa/103432, jit/100613, libstdc++/90943, libstdc++/100516,
  	libstdc++/103630, libstdc++/103638, libstdc++/103650,
  	libstdc++/103955, libstdc++/104098, libstdc++/104301,
  	libstdc++/104542, libstdc++/104859, libstdc++/105021,
  	libstdc++/105027, middle-end/104497, middle-end/105165,
  	rtl-optimization/104985, rtl-optimization/105028,
  	rtl-optimization/105211, target/80556, target/100106, target/104117,
  	target/104474, target/104853, target/104894, target/105214,
  	target/105257, tree-optimization/99121, tree-optimization/104880,
  	tree-optimization/105053, tree-optimization/105070,
  	tree-optimization/105189, tree-optimization/105198,
  	tree-optimization/105226, tree-optimization/105232,
  	tree-optimization/105235
  - fix bogus -Wuninitialized warning on va_arg with complex types on x86_64
    (PR target/105331)
  - remove bogus assertion in std::from_chars (PR libstdc++/105324)


author: Indu Bhagat <indu.bhagat@oracle.com> 11.3.1-2.1.0.2
changelog:
  - Fix Orabug - 35137216 Backport fix for upstream PR debug/105089 to OL9 GCC
    - Backport PR debug/105089 CTF for a defined extern variable is ambiguous
      using the following upstream commits:
      613a6fca75156aadc2e79d78a23e547d39762c1e,
      d0b00e74bf59c73b79471bbe9de19373b8661e20, and
      d634c5d7c78c6ec0fa39d96984460475564519c8
    Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - Fix Orabug ENH 35135720 - Add support for ampere1 and ampere1a processors from GCC11
    to OL9 gcc
    - Add support for ampere1 and ampere1a processors from GCC11 (Qing Zhao)
      cb7b6c721e319e562480c2ee9fa04fc4b1c25a2d
      f6daf95983de84132302e0b6182633e135b14b67
      531731c449d175c19a5c5a6e264a1bfe36f6c57e
      a692e3837ab4fb800f1b41b3a7e1f407689eeb7e (aarch64: Define __ARM_FEATURE_RCPC)
    Reviewed-by: Indu Bhagat <indu.bhagat@oracle.com>


author: Marek Polacek <polacek@redhat.com> 11.3.1-4
changelog:
  - update from releases/gcc-11-branch (#2117632)
    - PRs analyzer/105252, analyzer/105365, analyzer/105366, c++/65211,
  	c++/82980, c++/86193, c++/90107, c++/97296, c++/101442, c++/101698,
  	c++/102071, c++/102177, c++/102300, c++/102307, c++/102479,
  	c++/102629, c++/104066, c++/104142, c++/104646, c++/104669,
  	c++/105245, c++/105265, c++/105289, c++/105304, c++/105321,
  	c++/105386, c++/105398, c++/105725, c++/105761, c++/105774,
  	c++/105795, c++/105852, c++/105925, c++/106024, c++/106361,
  	c++/107358, c/41041, c/106016, c/106981, c/107001, d/106139,
  	d/106638, debug/106261, fortran/82868, fortran/100029, fortran/100040,
  	fortran/100097, fortran/100098, fortran/100132, fortran/100136,
  	fortran/100245, fortran/103413, fortran/103504, fortran/103693,
  	fortran/103694, fortran/104313, fortran/104849, fortran/105012,
  	fortran/105230, fortran/105243, fortran/105310, fortran/105633,
  	fortran/105691, fortran/105813, fortran/105954, fortran/106121,
  	fortran/106817, fortran/106857, fortran/106985, fortran/106986,
  	fortran/107054, ipa/100413, ipa/105600, ipa/105739, libgomp/106045,
  	libstdc++/65018, libstdc++/84110, libstdc++/93602, libstdc++/96592,
  	libstdc++/99290, libstdc++/100823, libstdc++/101709, libstdc++/102447,
  	libstdc++/103664, libstdc++/103848, libstdc++/103853,
  	libstdc++/103911, libstdc++/103992, libstdc++/104217,
  	libstdc++/104443, libstdc++/104602, libstdc++/104731,
  	libstdc++/105128, libstdc++/105284, libstdc++/105375,
  	libstdc++/105502, libstdc++/105671, libstdc++/105915,
  	libstdc++/106162, libstdc++/106248, libstdc++/106320,
  	libstdc++/106607, libstdc++/106695, lto/106334, lto/106540,
  	middle-end/103193, middle-end/104869, middle-end/104966,
  	middle-end/105140, middle-end/105998, middle-end/106027,
  	middle-end/106030, middle-end/106144, middle-end/106331,
  	middle-end/106492, preprocessor/97498, preprocessor/105732,
  	rtl-optimization/104637, rtl-optimization/105041,
  	rtl-optimization/105333, rtl-optimization/105559,
  	rtl-optimization/106032, rtl-optimization/106187, sanitizer/105396,
  	sanitizer/105729, target/96072, target/99184, target/99685,
  	target/101322, target/101891, target/102059, target/102146,
  	target/103197, target/103353, target/104257, target/104829,
  	target/105147, target/105162, target/105209, target/105292,
  	target/105339, target/105349, target/105463, target/105472,
  	target/105854, target/105879, target/105970, target/105981,
  	target/106017, target/106091, target/106355, target/106491,
  	target/106721, target/107061, target/107064, target/107183,
  	target/107248, target/107304, target/107364, target/107748,
  	testsuite/105095, testsuite/105266, testsuite/105433,
  	testsuite/106345, tree-optimization/103116, tree-optimization/105148,
  	tree-optimization/105163, tree-optimization/105173,
  	tree-optimization/105250, tree-optimization/105263,
  	tree-optimization/105312, tree-optimization/105368,
  	tree-optimization/105431, tree-optimization/105437,
  	tree-optimization/105528, tree-optimization/105618,
  	tree-optimization/105726, tree-optimization/105860,
  	tree-optimization/106112, tree-optimization/106131,
  	tree-optimization/106189, tree-optimization/106513,
  	tree-optimization/106892, tree-optimization/106934
  - fix the detection of Sapphire Rapids in host_detect_local_cpu
  - fix -Wmismatched-dealloc documentation (#2116635)


author: Qing Zhao <qing.zhao@oracle.com> 11.3.1-4.3.0.1
changelog:
  - Merge all Oracle patches:
  - Add complex divide improvement (11.2.1-2.2.0.1)
    backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
  - Add CTF/BTF support (11.2.1-2.2.0.1)
  - Add -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.1)
  - Add more fixes for -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.2)
  - Add two more fixes for -ftrivial-auto-var-init bogus warnings from GCC12
    PR104550 and PR102276. (11.2.1-2.2.0.3)
  - NOTE: adjust gcc12-ctf-pre-1-write_symbols-to-support-bitmasks.patch
    for c-family/c-pch.c for 11.2.1-9.4
  - Fix Orabug - 35137216 Backport fix for upstream PR debug/105089 to OL9 GCC
    (11.3.1-2.1.0.2)
    - Backport PR debug/105089 CTF for a defined extern variable is ambiguous
      using the following upstream commits:
      613a6fca75156aadc2e79d78a23e547d39762c1e,
      d0b00e74bf59c73b79471bbe9de19373b8661e20, and
      d634c5d7c78c6ec0fa39d96984460475564519c8
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 11.3.1-4.3.0.4
changelog:
  - CVE-2023-4039 GCC mitigation.
    Orabug 35751837.
  - CVE-2022-40982 "Intel Downfall" mitigation.
    Orabug 35751842.
    Add two patches originally from GCC upstream releases/gcc-11 branch.
    gcc11-downfall-disable-gather-in-vec.patch
    gcc11-downfall-support-mno-gather.patch
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
         c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
         c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
         c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
         c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
         c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
         c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
         c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
         debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
         fortran/85877, fortran/95107, fortran/96024, fortran/96025,
         fortran/99036, fortran/103259, fortran/104332, fortran/106209,
         fortran/106945, fortran/107576, fortran/107872, fortran/108131,
         fortran/108349, fortran/108420, fortran/108421, fortran/108451,
         fortran/108453, fortran/108501, fortran/108502, fortran/108527,
         fortran/108529, fortran/108609, fortran/108937, fortran/109186,
         fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
         libquadmath/87204, libquadmath/94756, libstdc++/91456,
         libstdc++/103934, libstdc++/104866, libstdc++/104875,
         libstdc++/105844, libstdc++/106183, libstdc++/107801,
         libstdc++/107814, libstdc++/108030, libstdc++/108118,
         libstdc++/108265, libstdc++/108636, libstdc++/108856,
         libstdc++/108952, libstdc++/109064, libstdc++/109261,
         libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
         middle-end/106190, middle-end/107317, middle-end/108237,
         middle-end/108264, middle-end/108435, middle-end/108459,
         middle-end/108546, middle-end/108625, middle-end/108685,
         middle-end/108854, other/108560, other/109306,
         rtl-optimization/106751, rtl-optimization/107482,
         rtl-optimization/108193, rtl-optimization/108596,
         rtl-optimization/109585, target/70243, target/90458, target/96373,
         target/98776, target/100758, target/104871, target/104921,
         target/105554, target/105599, target/106736, target/106875,
         target/107568, target/107714, target/107863, target/108272,
         target/108348, target/108589, target/108699, target/108807,
         target/108812, target/108881, target/109067, target/109140,
         target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
         testsuite/108973, testsuite/108985, tree-optimization/105484,
         tree-optimization/106809, tree-optimization/107107,
         tree-optimization/107212, tree-optimization/107254,
         tree-optimization/107323, tree-optimization/107451,
         tree-optimization/107554, tree-optimization/107898,
         tree-optimization/107997, tree-optimization/108068,
         tree-optimization/108076, tree-optimization/108095,
         tree-optimization/108199, tree-optimization/108498,
         tree-optimization/108688, tree-optimization/108692,
         tree-optimization/108821, tree-optimization/108950,
         tree-optimization/109176, tree-optimization/109410,
         tree-optimization/109473, tree-optimization/109491,
         tree-optimization/109502, tree-optimization/109573,
         tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
         tree-optimization/109505


