# changelog

author: Jindrich Novy <jnovy@redhat.com> - 2:1.1.0-5
changelog:
  - fix "Two aardvark-dns instances trying to use the same port
    on the same interface"
  - Resolves: #2130234


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.30-58.0.2
changelog:
  - Fix changelog format.
  - Ready for errata release.
  - OraBug 30640229.
  - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.30-58.0.3
changelog:
  - Fix neg/neg32 BPF instructions.
  - Backport from upstream commit bd434cc4d94ec3d2f9fc1e7c00c27b074f962bc1.
  - Reviewed-by: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.30-58.0.4
changelog:
  - Fix missing BPF JMP32 instruction class.
  - Backport from upstream commit c54a9b56696e584c2b8c7146caac337c063f5516.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.30-58.0.5
changelog:
  - Fix BPF relocations, update CGEN support, add simulator support.
  - Backport of the following Oracle-contributed upstream commits:
    - 78c1c35437a013c63acbff6926ff8d254e283d69
    - 12adf8053ba0b241d3973b46109842a1cbfa60de
    - b3db6d07be467fe86f5b4185a8fc7bec49380c1f
    - e9bffec9afc45cf7c49308f0b4b8cc6bf68f58f2
    - d8740be15930b820ab51d7a76695194022a83551
    - 7d8b91fda9fed423b91d4d43b19dd068457fe555
    - f1919c56e1ffce63c5dbd60c9b29c492be9d0787
    - d73be6116811aeaedd1863c2597ede78be3cf4e5
    - 3ee9565c95f49b6f9e80641f6fda51adffc3af1e
    - d844f10ac2735da8e5643236d7007a81098cbc2b
    - aebda2fbcb92b7538ca240effae598338b5d9625
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.30-58.0.6
changelog:
  - Backport of the following BPF related upstream patches:
    4449c81a85eef44b10532032207e8db5858c00ee bpf: add xBPF ISA
    31b3f3e6e42083e411c47e789eb617070d5ba0e4 opcodes: Add missing entries to ebpf_isa_attr
    3ad6c19423eedf84dfd5ea83bc03933dff8a4579 bpf: simulator: correct div, mod insn semantics
  - Reviewed-by: David Faust <david.faust@oracle.com>


author: Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.30-58.0.7
changelog:
  - Backport from upstream commit d3d1cc7b13b4b1f11862d6b58174c81536fb3340
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.30-108.0.1
changelog:
  - Forward-port Oracle patches from 2.30-58.0.8
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.30-108.0.2
changelog:
  - Add ability to control the display of unicode characters.  (#2009172)
  - Backport fix for fencepost bug in CTF pptrtab usage causing coredumps
  - Backport test result fixes for new GCC-based CTF generation
    [Orabug: 33344570]
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.36.1-1.0.1
changelog:
  - Update to binutils 2.36.1-1, forward port patches.
  - Enable building aarch64 cross.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.36.1-2.0.1
changelog:
  - For OL9, disable -lto=auto forced into cflags to resolve build issues.
  - Corrected bug number for unicode character display is (#2009183)
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.38-3.0.1
changelog:
  - Update to binutils 2.38 and patches accordingly. Enable all crosses.
    [Orabug: 35054435]
  - Remove bad thunk in binutils-testsuite-fixes.patch.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.38-3.0.2
changelog:
  - Backport BPF patches since 2.38 release, the following upstream commits:
     0dfdb5234a2 opcodes cgen: remove use of PTR
     7f6ebecd56e bpf: fix error conversion from long unsigned int to unsigned int [-Werror=overflow]
     5e4c7a839d1 BPF relocations review / refactoring
     551fde0ae16 Reloc howto access broken for BPF
     ff5a51b3772 gas: support for the BPF pseudo-c assembly syntax
     bba4624d035 gas: BPF pseudo-c syntax tests
     dcdec68b0b5 gas: documentation for the BPF pseudo-c asm syntax
     2b8c7766ea3 gas: bpf: fix tests for pseudo-c syntax
  - Replace bpf-atomics.patch with corrected version.
  - Reviewed-by: Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.38-3.0.3
changelog:
  - Refresh CTF patches from upstream. (Nick Alcock <nick.alcock@oracle.com>)
    - Fix errors in comments in <ctf.h> and <ctf-api.h>
    - Minor compiler warning and portability fixes
    - Fix (unlikely) crash-inducing uninitialized memory access and wild
      pointer overwrite when linking
    - Don't lose libctf errors in some situations when child dicts are in use
    - Fix generated CTF for conflicting types when linking the kernel
    - Fix the reported offsets of fields within unnamed structs/unions
      [Orabug: 35191322]
    - Reviewed-by: David Faust <david.faust@oracle.com>
  - Update BPF backport with the following upstream commits:
     5f784ec9277 Changed ld and gas BPF tests
     c9819077700 gas: fix building tc-bpf.c on s390x
     d218e7fedc7 DesCGENization of the BPF binutils port
     2f3dbc5fb5e bpf: opcodes, gas: support for signed register move V4 instructions
     c24fd9547fb bpf: opcodes, gas: support for signed load V4 instructions
     e8fc65713d6 bpf: disasemble offsets of value 0 as "+0"
     c2ca88d74ba bpf: add support for jal/gotol jump instruction with 32-bit target
     3ccfc0b46ca bpf: gas,opcodes: fix pseudoc syntax for MOVS* and LDXS* insns
     a50ead7822b bpf: gas: fix in manual that MOVS* pseudoc syntax uses = instead of s=
     5cbe549257b bpf: gas,include,opcode: add suppor for instructions BSWAP{16,32,64}
     055a4c8e0f1 bpf: Update atomic instruction pseudo-C syntax
     02f68ef297b bpf: Add atomic compare-and-exchange instructions
     fafcbd14a7e bpf: format not a string literal
     ac284430be5 bpf: gas: add negi and neg32i tests
     9d1e07bd19f bpf: accept # as an inline comment char
     249d4715e41 bpf: gas: support relaxation of V4 jump instructions
     648bd020a28 bpf: remove spurious comment from tc-bpf.c
     03460429385 bpf: gas: add field overflow checking to the BPF assembler
     1e18ffc9915 bpf: include, bfd, opcodes: add EF_BPF_CPUVER ELF header flags
     60a3da00bd5 objdump/opcodes: add syntax highlighting to disassembler output
  - Remove cross-binutils-bpf-atomics.patch, the changes are now part of the
    standard BPF backport (cross-binutils-bpf.patch).
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.38-3.0.4
changelog:
  - Backport the following BPF upstream commits [Orabug 35697460]:
     04896832b2e bpf: fix register NEG[32] instructions
     6bf6f9245ac bpf: use w regs in 32-bit non-fetch atomic pseudo-c
     5b512234c87 bpf: opcodes: fix regression in BPF disassembler
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.38-3.0.5
changelog:
  - Backport the following BPF upstream commits [Orabug 35728819]:
     5be1b787276 bpf: gas: consolidate handling of immediate overflows
     41aa80c5440 bpf: correct neg and neg32 instruction encoding
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.38-3.0.6
changelog:
  - Backport the following BPF commits [Orabug 36268623]:
      0c45feb159a bpf: there is no ldinddw nor ldabsdw instructions
      ba7c1e37cfb bpf: fix relocation addend incorrect symbol value
      ad4e57ab110 bpf: Added linker support for R_BPF_64_NODYLD32.
      dd2947e76aa gas: support double-slash line comments in BPF assembly
      4c5f2370fd1 gas: change meaning of ; in the BPF assembler
      97b29a61f7f bpf: Fixed register parsing disambiguating with possible symbol.
      8fbb497b720 gas: bpf: do not allow referring to register names as symbols in operands
      e5d6f72eb3d bpf: avoid creating wrong symbols while parsing
      d3beaa140dd gas: bpf: new test for MOV with C-like numbers ll suffix
      e3e1e1231d7 gas: tc-bpf.c: fix formatting of comment
      8b476884c3c opcodes: bpf-dis.c: fix typo in comment
      3afe50fe197 gas: tc-sparc.c: undo spurious change in 5be1b787276d2adbe85ae7febc709ca517b62f08
  - Backport the following CTF commits [Orabug 36252571]:
      fdb4c2e02e6 libctf: adding CU mappings should be idempotent
      cd4a8fc4f0b libctf: fix creation-time parent/child dict confusions
      29736fc507c libctf: check for problems with error returns
      0f79aa900f3 libctf: Return CTF_ERR in ctf_type_resolve_unsliced PR 30836
      998a4f589d6 libctf: Sanitize error types for PR 30836
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.38-3.0.7
changelog:
  - Make assembler to use N64 ABI by default in mips64*-linux* targets.
  - Make linker to use elf64btsmip by default in mips64*-linux* targets.
  - Backport the following BPF-related commits from upstream:
      dffb4a0784f bpf: fix calculation when deciding to relax branch
      f1efdade946 bpf: gas: add missing indcall-badoperand.* test files
      ecd16ae4e47 bpf: fix bpf expression parsing regression in GAS
      b86b514aace bpf: gas: avoid UB in pointer subtraction
      7921285b6c2 objdump, as: add callx support for BPF CPU v1
  - Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: David Howells <dhowells@redhat.com> - 2.30-3
changelog:
  - Fix ppc* symlink packages inclusion of files from the powerpc* packages.
  - Sync with binutils-2.30-24.


author: Alan Maguire <alan.maguire@oracle.com> - 0.1-2.el8
changelog:
  - bpftune: packaging support (Alan Maguire)  [Orabug: 35385703] 
  - add TROUBLESHOOTING.md (Alan Maguire)


author: GitHub <noreply@github.com> - 0.1-3.el8
changelog:
  - bpftune: bump version to 0.1-3 (Alan Maguire)  
  - libbpftune: sleep time when getting inotification is too small (Alan Maguire)  
  - nc is not used by tests; no need to check for it (Alan Maguire)  
  - sample_[legacy_]test should "make clean" before building sample (Alan Maguire)


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/9dd415b)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/e5384ed)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/dcd385e)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7aedb16)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/c1d6200)
  - fixes CVE-2021-3602
  - Related: #1977943


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/ff5434f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/3808e27)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7c6701d)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/d69ac6e)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/6d7f496)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.27.2-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.27
    (https://github.com/containers/buildah/commit/13622b1)
  - Resolves: #2129767


author: Jindrich Novy <jnovy@redhat.com> - 1:1.27.2-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.27
    (https://github.com/containers/buildah/commit/c43a389)
  - Resolves: #2136438


author: Jindrich Novy <jnovy@redhat.com> - 1:1.27.2-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.27
    (https://github.com/containers/buildah/commit/5b86d15)
  - Resolves: #2150428


author: Jindrich Novy <jnovy@redhat.com> - 1:1.27.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.27
    (https://github.com/containers/buildah/commit/4785fdb)
  - Resolves: #2152017


author: Camilla Conte <cconte@redhat.com> - 21.1-15
changelog:
  - ci-Detect-a-Python-version-change-and-clear-the-cache-8.patch [bz#1935826]
  - ci-Fix-MIME-policy-failure-on-python-version-upgrade-93.patch [bz#1935826]


author: Jon Maloy <jmaloy@redhat.com> - 22.1-2
changelog:
  - ci-Add-native-NetworkManager-support-1224.patch [bz#2059872]
  - ci-Use-Network-Manager-and-Netplan-as-default-renderers.patch [bz#2059872]
  - ci-Align-rhel-custom-files-with-upstream-1431.patch [bz#2082071]
  - ci-Remove-rhel-specific-files.patch [bz#2082071]
  - Resolves: bz#2059872
    ([RHEL-8]Rebase cloud-init from Fedora so it can configure networking using NM keyfiles)
  - Resolves: bz#2082071
    (Align cloud.cfg file and systemd with cloud-init upstream .tmpl files)


author: Jon Maloy <jmaloy@redhat.com> - 22.1-3
changelog:
  - ci-Support-EC2-tags-in-instance-metadata-1309.patch [bz#2082686]
  - Resolves: bz#2082686
    ([cloud][init] Add support for reading tags from instance metadata)


author: Miroslav Rezanina <mrezanin@redhat.com> - 22.1-4
changelog:
  - ci-cloud-init.spec-adjust-path-for-66-azure-ephemeral.r.patch [bz#2096269]
  - ci-setup.py-adjust-udev-rules-default-path-1513.patch [bz#2096269]
  - Resolves: bz#2096269
    (Adjust udev/rules default path[RHEL-8])


author: Jon Maloy <jmaloy@redhat.com> - 22.1-5
changelog:
  - ci-Revert-Add-native-NetworkManager-support-1224.patch [bz#2107464 bz#2110066 bz#2117526 bz#2104393 bz#2098624]
  - ci-Revert-Use-Network-Manager-and-Netplan-as-default-re.patch [bz#2107464 bz#2110066 bz#2117526 bz#2104393 bz#2098624]
  - Resolves: bz#2107464
    ([RHEL-8.7] Cannot run sysconfig when changing the priority of network renderers)
  - Resolves: bz#2110066
    (DNS integration with OpenStack/cloud-init/NetworkManager is not working)
  - Resolves: bz#2117526
    ([RHEL8.7] Revert patch of configuring networking by NM keyfiles)
  - Resolves: bz#2104393
    ([RHEL-8.7]Failed to config static IP and IPv6 according to VMware Customization Config File)
  - Resolves: bz#2098624
    ([RHEL-8.7] IPv6 not workable when cloud-init configure network using NM keyfiles)


author: Jon Maloy <jmaloy@redhat.com> - 22.1-6
changelog:
  - ci-cloud.cfg.tmpl-make-sure-centos-settings-are-identic.patch [bz#2115576]
  - Resolves: bz#2115576
    (cloud-init configures user "centos" or "rhel" instead of "cloud-user" with cloud-init-22.1)


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 22.1-6.0.1
changelog:
  - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
  - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)
  - added OL to list of known distros


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 22.1-6.0.2.el8_7.2
changelog:
  - ci-cc_set_hostname-ignore-var-lib-cloud-data-set-hostna.patch [bz#2165945]
  - Resolves: bz#2165945
    (systemd[1]: Failed to start Initial cloud-init job after reboot system via sysrq 'b' [RHEL-8] [rhel-8.7.0.z])
  - ci-Ensure-network-ready-before-cloud-init-service-runs-.patch [bz#2153182]
  - Resolves: bz#2153182
    ([RHEL-8] Ensure network ready before cloud-init service runs on RHEL [rhel-8.7.0.z])


author: Jindrich Novy <jnovy@redhat.com> - 27.1-3
changelog:
  - another gating test fix - don't remove all containers but only admin ones
    thanks to Matej Marusak
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.2-2
changelog:
  - update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
    (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.177.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.177.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.178.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.178.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.180.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.180.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.181.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.181.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.183.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.183.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.187.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.187.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.188.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.188.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.189.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.189.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.176.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.176.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.179.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.179.1
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.183.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.183.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 0.8.6-2
changelog:
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-2
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2001445


author: David Sloboda <david.x.sloboda@oracle.com> - 2:1-46.0.1
changelog:
  - Updated removed references [Orabug: 33473101] (Alex Burmashev)
  - Adjust registries.conf (Nikita Gerasimov)
  - remove references to RedHat registry (Nikita Gerasimov)


author: Adrian Reber <adrian@lisas.de> - 3.12-0.1
changelog:
  - Updated to 3.12 (pre-release)
  - Create libs subpackage
  - Build against SELinux (Fedora and RHEL8)
  - Build against libbsd (Fedora)


author: Jindrich Novy <jnovy@redhat.com> - 3.15-3
changelog:
  - add Requires: criu-libs = %{version}-%{release} in criu-devel
  - add gating tests
  - Related: #1934415


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 8.3.1-1.0.7
changelog:
  - Backport of upstream patch:
    5bcc0fa05ef713594f6c6d55d5c837e13a9c9803 - Use expected insn for BPFNOP.
  - Reviewed-by: David Faust <david.faust@oracle.com>


author: David Faust <david.faust@oracle.com> - 8.4.1-1.0.1
changelog:
  - Forward-port to gcc 8.4.1
  - Fix ICE reported in Orabug 33249606 by backporting fix for upstream PR85401
  - Add CTF/BTF support to match OL8 GCC
  - Backport the following BPF bug-fixes from upstream:
    + 0a662e103e9 bpf: align function entry point to 64 bits
    + 886b6c1e8af bpf: allow BSS symbols to be global symbols
    + c3a0f537391 bpf: generate indirect calls for xBPF
    + 7c8ba5da80d bpf: use xBPF signed div,mod insns when available
    + 4f0f696fea1 bpf: correct zero_extend output_templates
  - Add BPF CO-RE support
  - Add BPF -mcpu and related feature options
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 8.4.1-1.0.3
changelog:
  - Backport the following fixes from upstream:
    + 1848fbf0546 ctfc: Free CTF container elements in ctfc_delete_container ()
    + ae2df1a347f ctf: Do not warn for CTF not supported for GNU GIMPLE
    + d6a87d96d74 debug/102507: ICE in btf_finalize when compiling with -gbtf
  - Remove BPF CO-RE support.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 11.2.1-1.0.1
changelog:
  - New cross based on GCC 11
  - Add BPF CO-RE support
  - Enable building aarch64 cross
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 11.2.1-2.0.1
changelog:
  - Add the following from gcc-toolset-11-gcc:
    Tue Jan 18 2022 Qing Zhao <qing.zhao@oracle.com>
    + Add more fixes for -ftrivial-auto-var-init support from GCC12
  - Reviewed-by: Qing Zhao  <qing.zhao@oracle.com>


author: David Faust <david.faust@oracle.com> - 11.2.1-3.0.1
changelog:
  - Add two more fixes for -ftrivial-auto-var-init bogus warnings from GCC12
    PR104550 and PR102276.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 11.2.1-4.0.1
changelog:
  - Sync with gcc-toolset-11-gcc version 11.2.1-9.1.0.3
  - Backport PR debug/105089 CTF for a defined extern variable is ambiguous
    using the following upstream commits (Indu Bhagat):
      613a6fca75156aadc2e79d78a23e547d39762c1e,
      d0b00e74bf59c73b79471bbe9de19373b8661e20, and
      d634c5d7c78c6ec0fa39d96984460475564519c8
  - Reviewed-by: Indu Bhagat <indu.bhagat@oracle.com>


author: David Faust <david.faust@oracle.com> - 11.2.1-5.0.2
changelog:
  - CVE-2023-4039 mitigation.
    Orabug 35752004.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 11.4.1-3.0.1
changelog:
  - Rename packages and binaries to include gcc_major version number
    and avoid collisions with other cross-gcc packages.
  - Sync with gcc-toolset-11-gcc version 11.4.1-3.0.1
  - Remove patches for CVE-2023-4039, the fixes are present in updated sources.
  - Remove patches for ampere1, the changes are present in updated sources.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 11.5.0-2.0.1
changelog:
  - Sync with gcc-toolset-11-gcc version 11.5.0-2.0.1
  - Merge Oracle patches to 11.5.0-2 (Qing Zhao).
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 8.3.1-1.0.3
changelog:
  - Fix changelog format.
  - Ready for errata release.
  - OraBug 30640260.
  - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 8.3.1-1.0.4
changelog:
  - Avoid generation of funcalls for one_cmpl{si,di}2 insns in BPF.
  - Reviewed-by: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com>


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 8.3.1-1.0.5
changelog:
  - Support for the -mxbpf command line option.
  - Do not save/restore callee-saved registers in function
    prologues/epilogues unless generating xBPF.
  - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 8.3.1-1.0.6
changelog:
  - Backports of upstream patches:
    + c9d44022359 bpf: use elfos.h
    + e87c540fe43 bpf: remove trailing whitespaces from source files
    + af30b83b509 bpf: more flexible support for kernel helpers
  - Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: David Faust <david.faust@oracle.com> - 8.5.0-2.0.1
changelog:
  - Update to GCC 8.5.0-4 release
  - add -Wbidirectional patch (#2008391)
  - Reviewed-by: Jose E. Machesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 8.5.0-4.0.1
changelog:
  - Add fix for Orabug 34066706 from native GCC:
    + Report error when PROGRAM_SUMMARY section missing in .gcda file.
  - Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: David Faust <david.faust@oracle.com> - 12.1.1-2.0.1
changelog:
  - Upgrade to GCC 12.1.1, match EPEL version and patch level.
  - Enable all crosses.
  - Backport BPF and BTF patches since GCC 12.1, upstream commits:
    + 2df74a891ee bpf: facilitate constant propagation of function addresses
    + ddbe163295b bpf: define __bpf__ as well as __BPF__ as a target macro
    + 8d66fc30fa9 bpf: handle anonymous members in CO-RE reloc [PR106745]
    + 91985be7c2d bpf: remove unused variables from bpf_expand_{prologue,epilogue}
    + dddda0dd3d8 bpf: add preserve_field_info builtin
    + e2468573832 bpf: cleanup missed refactor
    + ba9fd168753 bpf: Use enum for resolved overloaded builtins
    + cc2df4391b8 bpf: avoid possible use of uninitialized variable
    + cdc00c84859 bpf: add define_insn for bswap
    + f7111d5d55d bpf: correct bpf_print_operand for floats [PR108293]
    + 7f748531f65 bpf: disable -fstack-protector in BPF
    + 08b30c74bd2 btf: emit linkage information in BTF_KIND_FUNC entries
    + 380f07fe68e btf: do not use the CHAR `encoding' bit for BTF
    + c42410400c9 btf: Add support to BTF_KIND_ENUM64 type
    + 58580f5093e btf: add 'extern' linkage for variables [PR106773]
    + 1fc2ef20480 btf: fix 'extern const void' variables [PR106773]
    + 73e7495846e btf: correct generation for extern funcs [PR106773]
    + c348a717213 bpf: fix memory constraint of ldx/stx instructions [PR108790]
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 12.1.1-2.0.2
changelog:
  - Bundle libisl to avoid dependency issues.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 12.1.1-2.0.4
changelog:
  - CVE-2023-4039 mitigation.
    Orabug 35752028.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 12.1.1-2.0.5
changelog:
  - Backport the following supporting commits from upstream:
      2c05a2d1a8e c: use CONST_DECL for enumerators in TYPE_VALUES
      f25efe50374 docs: Add @defbuiltin family of helpers
  - Backport the following BPF and BTF related commits:
      f995f567730 bpf: fix zero_extendqidi2 ldx template
      1959aeee1e0 bpf: emit empty epilogues in naked functions
      f64448f4ff1 bpf: add constant pointer to helper-skb-ancestor-cgroup-id.c test
      bc77c035c45 Add -gno-strict-dwarf to dg-options in various btf enum tests
      dfc88fb51c1 bpf: Correct BTF for kernel_helper attributed decls
      4a5bb8bc1c5 btf: print string offset in comment
      1502d724df8 btf: change encoding of forward-declared enums [PR111735]
      b8cf266f4ca btf: avoid wrong DATASEC entries for extern vars [PR112849]
      b6abc5dbfa5 BTF: fix PR debug/112656
      9b6e2cb7e61 BTF: fix PR debug/112768
      b506834e7fa bpf: quote section names whenever necessary in assembly output
      72e212c0290 bpf: change ASM_COMMENT_START to '#'
      86903dd94e6 testsuite: move gcc.c-torture/compile/libcall-2.c to gcc.target/i386/libcall-1.c
      4ed0740c6e8 testsuite: fix gcc.c-torture/compile/libcall-2.c in -m32
      880ae958fad varasm.cc: refer to assemble_external_libcall only ifdef ASM_OUTPUT_EXTERNAL
      f31a019d116 Emit funcall external declarations only if actually used.
      099b15e2bdb Fixed problem with BTF defining smaller enums.
      19cc5857e2c bpf: Forces __buildin_memcmp not to generate a call upto 1024 bytes.
      a789af1ca27 bpf: Corrected condition in core_mark_as_access_index.
      61e060c4dce bpf: Delayed the removal of the parser enum plugin handler.
      b6db325ac3e bpf: remove bpf-helpers.h
      8329ba35974 bpf: fix pseudo-c asm emitted for *mulsidi3_zeroextend
      9815ef77313 bpf: testsuite: fix expected regexp in gcc.target/bpf/ldxdw.c
      327d38f1018 bpf: Improvements in CO-RE builtins implementation.
      721f7e2c4e5 Fix tests for PR 106537.
      e2c42860b6b bpf: neg instruction does not accept an immediate
      35b5762a740 bpf: bump maximum frame size limit to 32767 bytes
      e1f45bea274 Add warning options -W[no-]compare-distinct-pointer-types
      b7c50f68f26 bpf: support `naked' function attributes in BPF targets
      5da4c0b85a9 bpf: remove useless define_insn for extendsisi2
      489e1adf779 bpf: fix pseudoc w regs for small modes [PR111029]
      f93a612fc45 bpf: liberate R9 for general register allocation
      6103df1e4fa bpf: allow exceeding max num of args in BPF when always_inline
      e7cae4f873f bpf: Fixed GC mistakes in BPF builtins code.
      c2a447d8404 bpf: CO-RE builtins support tests.
      e0a81559c19 bpf: Implementation of BPF CO-RE builtins
      9f5372707f9 bpf: disable tail call optimization in BPF targets
      14dab1a1bcc bpf: ISA V4 sign-extending move and load insns [PR110782,PR110784]
      9cbf4286a9d bpf: minor doc cleanup for command-line options
      31d18ff4424 bpf: correct pseudo-C template for add3 and sub3
      db189d02ef1 bpf: add v3 atomic instructions
      590a8287bf2 bpf: fix generation of neg and neg32 BPF instructions
      8d36a0f5952 bpf: don't print () in bpf_print_operand_address
      be16bb885ef bpf: add pseudo-c asm dialect for "nop"
      4be3919fb75 bpf: sdiv/smod are now part of BPF V4
      da445a58582 bpf: remove -mkernel option and BPF_KERNEL_VERSION_CODE
      f1e34551e4d bpf: make use of the bswap{16,32,64} V4 BPF instruction
      77d0f9ec380 bpf: pseudo-c assembly dialect support
      13ed106723c bpf: fixed template for neg (added second operand)
      53d12ecd624 bpf: enable instruction scheduling
      934da923a72 btf: fix bootstrap -Wformat errors [PR110073]
      f2e60a00c7c btf: Fix -Wformat errors
      7aae58b04b9 btf: improve -dA comments for testsuite
      00887865398 btf: be clear when record size/type is not used
  - Orabug 36268583
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Alejandro Sáez <asm@redhat.com> - 1.3.2-3
changelog:
  - Resolves: rhbz#1758612
  - Resolves: rhbz#1780554
  - Add patch: 1781-pkg-terminal-Fix-exit-status.patch


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 1.5.0-2.0.1
changelog:
  - Cherry pick 05508ea98055bcb5418d2dc83893af4eb044d151:
    + Disable DWARF compression which has issues (Alex Burmashev)
    + By David Sloboda <david.x.sloboda@oracle.com>


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-3
changelog:
  - fix "error bind mounting /dev from host into mount namespace"
    (the openat2 syscall is not yet supported by the RHEL8 kernel)
  - Resolves: #1867447


author: David Benoit <dbenoit@redhat.com> - 1.15.2-1
changelog:
  - Rebase to 1.15.2
  - Related: rhbz#1870531
  - Related: rhbz#1872622
  - Related: rhbz#1888673
  - Related: rhbz#1889437
  - Related: rhbz#1891095


author: David Benoit <dbenoit@redhat.com> - 1.16.7-1
changelog:
  - Rebase to Go 1.16.7
  - Resolves: rhbz#1994079
  - Add reject leading zeros patch
  - Resolves: rhbz#1993314


author: Elena Zannoni <elena.zannoni@oracle.com> - 1.17.10-1
changelog:
  - Set version to correspond to the matching build golang version
  - delve can be now added to aarch64 as well, remove ifarch.


author: Diego Martinez de Dios <diego.m.martinez@oracle.com> - 0.5.0-4
changelog:
  - Refactor of files inclusion arrangement to avoid listing twice doc files
  - Remove inclusion of debug info
  - Swap of global macro for _libdir directly


author: David Benoit <dbenoit@redhat.com> - 1.15.2-1
changelog:
  - Rebase to 1.15.2
  - fix rhbz#1872622 in commit af9a1b1f6567a1c5273a134d395bfe7bb840b7f8
  - Resolves: rhbz#1872622
  - add net/http graceful shutdown patch
  - Resolves: rhbz#1888673
  - add x509warnCN patch
  - Resolves: rhbz#1889437


author: Elena Zannoni <elena.zannoni@oracle.com> - 1.16.15-1.0.1
changelog:
  - Add patches from 1.16.12 to 1.16.15
  - Add Sources for 3 binary files that changed between 1.16.12 and 1.16.15
  - Rename base_vrsn to base_version
  - Reviewed-by: XXX XXX <xxx.xxx@oracle.com>


author: Alejandro Sáez <asm@redhat.com> - 1.17.2-1
changelog:
  - Rebase to Go 1.17.2
  - Related: rhbz#2014088
  - Remove golang-1.15-warnCN.patch
  - Remove reject-leading-zeros.patch
  - Remove favicon.ico and robots.txt references
  - Exclude TestEd25519Vectors test


author: David Benoit <dbenoit@redhat.com> - 1.17.4-1
changelog:
  - Rebase Go to 1.17.4
  - Add remove_waitgroup_misuse_tests patch
  - Related: rhbz#2014088
  - Resolves: rhbz#2028570
  - Resolves: rhbz#2022828
  - Resolves: rhbz#2024686
  - Resolves: rhbz#2028662


author: David Benoit <dbenoit@redhat.com> - 1.17.5-1
changelog:
  - Rebase to Go 1.17.5
  - Remove vdso_s390x_gettime patch
  - Resolves: rhbz#2031112
  - Related: rhbz#2028570


author: Miriam Blatt <miriam.blatt@oracle.com> - 1.17.5-1.0.1
changelog:
  - Rebase to 1.17.2 fips. Update to 1.17.5.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Elena Zannoni <elena.zannoni@oracle.com> - 1.17.10-1.0.1
changelog:
  - Add patches between Go 1.17.7 and Go 1.17.10
  - Rename base_versn to base_version
  - Remove unneeded patches from previous version
  - Remove Patch2028662 because that patch is also upstream now
  - Reviewed-by: XXX XXX <xxx.xxx@oracle.com>


author: Elena Zannoni <elena.zannoni@oracle.com> - 1.17.10-1.0.1
changelog:
  - Add patches between Go 1.17.7 and Go 1.17.10
  - Rename base_versn to base_version
  - Remove unneeded patches from previous version
  - Remove Patch2028662 because that patch is also upstream now
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Elena Zannoni <elena.zannoni@oracle.com> - 1.17.11-1.0.1
changelog:
  - Update tarball to 1.17.10
  - Add patches between Go 1.17.10 and Go 1.17.11
  - Add patch for golang issue 48575 (for IPv6)
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Elena Zannoni <elena.zannoni@oracle.com> - 1.17.13-1.0.1
changelog:
  - Update tarball to 1.17.12
  - Add patches between Go 1.17.12 and Go 1.17.13
  - Reviewed-by: David Faust <david.faust@oracle.com>


author: Miriam Blatt <miriam.blatt@oracle.com> - 1.17.5-1.0.1
changelog:
  - Rebase to 1.17.2 fips. Update to 1.17.5. 
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Elena Zannoni <elena.zannoni@oracle.com> - 1.18.3-1.0.1
changelog:
  - Rebase to 1.18.3 by adding upstream patches to the 1.18.0 openssl-fips
  - Modify Patch51852 to remove portions already upstream
  - Use base_version to distinguish the version of the tarball from the
    final version
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Elena Zannoni <elena.zannoni@oracle.com> - 1.18.8-1.0.1
changelog:
  - Rebase to 1.18.8 by adding upstream patches to the 1.18.0 openssl-fips
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Benoit <dbenoit@redhat.com> - 1.19.4-1
changelog:
  - Rebase to Go 1.19.4
  - Fix ppc64le linker issue
  - Remove defunct patches
  - Remove downstream generated FIPS mode patches
  - Add golang-fips/go as the source for FIPS mode patches
  - Resolves: rhbz#2144542


author: Elena Zannoni <elena.zannoni@oracle.com> - 1.19.4-2.0.1
changelog:
  - Rebase to 1.19.4 openssl-fips
  - Removed patches:
    Patch215: go1.5-zoneinfo_testing_only.patch (upstream commit 946587811423)
    Patch226: disable_static_external_tests.patch (included in new patches)
    Patch51852: disable-crypto-x509-test.patch (no longer needed)
  - Added patches:
    Patch0001: disable_static_tests_part1.patch (part of old patch 226)
    Patch0002: disable_static_tests_part2.patch (part of old patch 226)
    Patch0003: fix-test-1024-leaf-certs.patch (fixes change in openssl-fips patches)
    Patch0004: fix-memory-leak-evp-sign-verify.patch (fixes openssl-fips patches)
  - Remove disabling of ED25519 test, it is done in the openssl-fips patches
  - Remove use of extra source for binary file patching
  - Remove AUTHORS and CONTRIBUTORS from doc section, they were removed upstream,
    in golang issue 53961
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Danilo de Paula <ddepaula@redhat.com> - 1.3.15-7
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1695587
    (Ensure modular RPM upgrade path)


author: Jarod Wilson <jarod@redhat.com> [4.18.0-425.5.1.el8_7]
changelog:
  - ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
  - ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
  - ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
  - ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
  - ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
  - ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
  - ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
  - ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
  - eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
  - ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
  - Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
  - ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
  - ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
  - ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
  - ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
  - ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
  - ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
  - ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
  - ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
  - ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
  - ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
  - ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
  - ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
  - ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
  - ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
  - ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
  - ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
  - ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
  - ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
  - ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
  - redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
  - block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]


author: Jarod Wilson <jarod@redhat.com> [4.18.0-425.6.1.el8_7]
changelog:
  - ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
  - ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
  - ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
  - ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
  - ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
  - ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
  - ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
  - math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
  - vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
  - net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
  - net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
  - CI: Use zstream builder container (Veronika Kabatova)
  - CI: Add disttag override for 8.7 (Veronika Kabatova)


author: Jarod Wilson <jarod@redhat.com> [4.18.0-425.7.1.el8_7]
changelog:
  - ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
  - i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
  - i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
  - iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
  - iavf: Fix bad page state (Petr Oros) [2137270 2106964]
  - Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
  - scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
  - Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
  - ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]


author: Jarod Wilson <jarod@redhat.com> [4.18.0-425.8.1.el8_7]
changelog:
  - scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
  - RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
  - drm/mgag200: Fix PLL setup for G200_SE_A rev >=4 (Jocelyn Falempe) [2140152 2130159]
  - iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
  - iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
  - scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
  - scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
  - i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
  - net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
  - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}


author: Jarod Wilson <jarod@redhat.com> [4.18.0-425.9.1.el8_7]
changelog:
  - Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
  - drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
  - wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
  - scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
  - net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]


author: Jarod Wilson <jarod@redhat.com> [4.18.0-425.10.1.el8_7]
changelog:
  - scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
  - ice: virtchnl rss hena support (Petr Oros) [2148130]
  - ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
  - ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
  - netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
  - netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
  - netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
  - netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
  - x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
  - x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
  - drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
  - PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
  - iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
  - iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
  - iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
  - net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
  - iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
  - iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
  - iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
  - iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
  - iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
  - intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
  - intel: remove unused macros (Stefan Assmann) [2149742 2103944]
  - iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]


author: Jarod Wilson <jarod@redhat.com> [4.18.0-425.11.1.el8_7]
changelog:
  - NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
  - NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
  - NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
  - NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
  - SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
  - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
  - panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
  - kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
  - kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
  - vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
  - timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
  - irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
  - irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
  - sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
  - s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
  - sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
  - genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
  - genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
  - powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
  - powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
  - PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
  - PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
  - PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
  - net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
  - hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
  - x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
  - cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
  - rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
  - rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
  - rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
  - rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
  - rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock (Waiman Long) [2153108 2149031]
  - rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
  - cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
  - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
  - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
  - cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
  - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
  - cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
  - sunrpc: Set sk_allocation to GFP_NOFS to avoid using current->task_frag. (Guillaume Nault) [2153230 2089660]


author: Jarod Wilson <jarod@redhat.com> [4.18.0-425.12.1.el8_7]
changelog:
  - x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
  - x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
  - kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
  - mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
  - memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
  - mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
  - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
  - mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
  - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
  - net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
  - mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
  - PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
  - PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
  - PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
  - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
  - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
  - PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
  - drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]


author: Jarod Wilson <jarod@redhat.com> [4.18.0-425.13.1.el8_7]
changelog:
  - mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
  - mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
  - mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
  - mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
  - mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
  - mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
  - mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
  - mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
  - mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
  - mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
  - mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
  - mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
  - mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
  - mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
  - ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
  - mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
  - mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
  - mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
  - mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
  - mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
  - mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
  - x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
  - mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
  - mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
  - mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
  - mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
  - s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
  - i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
  - iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
  - iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
  - iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
  - iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
  - iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
  - x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
  - iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
  - PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
  - x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
  - iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
  - iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
  - x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
  - x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
  - PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
  - x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
  - x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
  - x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
  - x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
  - x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
  - x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
  - x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
  - iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
  - iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
  - x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
  - iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
  - iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
  - PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
  - x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
  - PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
  - x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
  - x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
  - x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
  - x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
  - iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
  - iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
  - iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
  - x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
  - irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
  - gitlab-ci: use CI templates from production branch (Michael Hofmann)
  - iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
  - Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
  - Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
  - arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
  - bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
  - arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
  - arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
  - arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
  - arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
  - arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
  - be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]


author: Kevin Lyons <kevin.x.lyons@oracle.com> [4.18.0-425.13.1.el8_7.OL8]
changelog:
  - Update Oracle Linux certificates (Kevin Lyons)
  - Disable signing for aarch64 (Ilya Okomin)
  - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  - Update x509.genkey [Orabug: 24817676]
  - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
  - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.40.2-27
changelog:
  - selinux-relabel does not work if SELINUXTYPE != targeted
  - tar-in command does not allow restoring file capabilities
    resolves: rhbz#1384241 rhbz#1828952


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.44.0-4
changelog:
  - Autodetect backing format for qemu-img create -b
  - Move appliance to separate subpackage
  - Read rpm database through librpm
    resolves: rhbz#2013916, rhbz#1989520, rhbz#1836094


author: EL Errata <el-errata_ww@oracle.com> - 1.44.0-9.0.1
changelog:
  - Replace upstream references from description tag
  - Config supermin to use host yum.conf in ol8 [Orabug: 29319324]
  - Set DISTRO_ORACLE_LINUX correspeonding to ol


author: Richard W.M. Jones <rjones@redhat.com> - 7.2-2
changelog:
  - Fix for handling guest filenames with invalid or incomplete
    multibyte or wide characters
    resolves: rhbz#1301593


author: Richard W.M. Jones <rjones@redhat.com> - 8.0-1
changelog:
  - Rebase to 2017.3.23.
  - Remove patches which are now upstream.
  - Resynch with Fedora package.
  - Enable all architectures for RHEL 8.


author: Richard W.M. Jones <rjones@redhat.com> - 8.0-3
changelog:
  - Fix for CVE-2019-9755
    (heap-based buffer overflow leads to local root privilege escalation)
    resolves: rhbz#1698503


author: Richard W.M. Jones <rjones@redhat.com> - 8.6-1
changelog:
  - Rebase to ntfs-3g 2021.8.22
  - Fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287, CVE-2021-33289,
    CVE-2021-35266, CVE-2021-35267, CVE-2021-35268, CVE-2021-35269,
    CVE-2021-39251, CVE-2021-39252, CVE-2021-39253, CVE-2021-39254
    resolves: rhbz#2004490


author: Cole Robinson <crobinso@redhat.com> - 1.18.0-2
changelog:
  - Fix rdma deps and don't restrict archs
  - Add --disable-werror to fix gcc8 build (bz #1556044)
  - Spec file cleanups (bz #1483290)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-5.el8
changelog:
  - libiscsi-iser_rcv_completion-unify-error-handling.patch [bz#1634541]
  - libiscsi-iser-fix-posting-of-receive-descriptors.patch [bz#1634541]
  - libiscsi-sync-remove-unnecessary-checks.patch [bz#1634541]
  - libiscsi-do-not-warn-for-strncpy.patch [bz#1634541]
  - libiscsi-avoid-fallthrough.patch [bz#1634541]
  - libiscsi-avoid-truncation-when-logging-message-that-includes-.patch [bz#1634541]
  - Resolves: bz#1634541
    (Fix important coverity issues (libiscsi))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> -
changelog:
  - libiscsi-fix-connection-to-LUN-with-IPv6-address.patch [bz#1597942]
  - Resolves: bz#1597942
    (Qemu-kvm fails to connect to iscsi LUN by IPV6 address)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-7.el8
changelog:
  - libiscsi-redhat-Remove-disable-werror-from-spec-file.patch [bz#1581025]
  - Resolves: bz#1581025
    (Remove --disable-werror from spec file)


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.2-1
changelog:
  - New upstream version 1.0.2.
  - Remove patches which are upstream.
  - Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
  - Fix previous commit message.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.3-1
changelog:
  - New upstream version 1.0.3.
  - Contains fix for remote code execution vulnerability.
  - Add new libnbd-security(3) man page.


author: Jindrich Novy <jnovy@redhat.com> - 4.3.0-3
changelog:
  - fix static analysis issues merged upstream
    (https://gitlab.freedesktop.org/slirp/libslirp/-/merge_requests/41)
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 4.3.0-4
changelog:
  - fix "CVE-2020-10756 QEMU: slirp: networking out-of-bounds read information disclosure vulnerability"
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 4.4.0-1
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
  - Related: #1934415


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.2-1.20200527git7325acb477
changelog:
  - Update to v0.7.2 stable snapshot, fixes rhbz#1809676
  - exclude i686 build
  - Following stable-0.7.0 branch for TPM 2 related fixes: RSA decryption,
    PSS salt length, symmetric decryption (padding)
  - Under certain circumstances an RSA decryption could cause a buffer overflow causing
    termination of the program (swtpm)
  - Following stable-0.7.0 branch for TPM 2 related fixes; v0.7.1 + gcc related patch
  - elliptic curve fixes
  - MANUFACTURER changed from "IBM " to "IBM"
  - gcc 10 related fix
  - Following stable-0.7.0 branch for TPM 1.2 related bugfix


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.3-1.20200818git1d392d466a
changelog:
  - Update to v0.7.3 stable, fixes rhbz#1868447
  - (includes "tpm2: fix PCRBelongsTCBGroup for PCClient")


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.4-5.20201106git2452a24dab
changelog:
  - Fix CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Fixes: rhbz#1976816


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.4-6.20201106git2452a24dab
changelog:
  - Fix CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999307


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-4
changelog:
  - qemu_command: Generate memory only after controllers (rhbz#2050697)
  - qemu: Validate domain definition even on migration (rhbz#2050702)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-5
changelog:
  - node_device: Rework udevKludgeStorageType() (rhbz#2056673)
  - node_device: Treat NVMe disks as regular disks (rhbz#2056673)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-6
changelog:
  - conf: Introduce memory allocation threads (rhbz#2067126)
  - qemu_capabilities: Detect memory-backend-*.prealloc-threads property (rhbz#2067126)
  - qemu_validate: Validate prealloc threads against qemuCpas (rhbz#2067126)
  - qemu_command: Generate prealloc-threads property (rhbz#2067126)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-7
changelog:
  - cpu_map: Disable cpu64-rhel* for host-model and baseline (rhbz#1851227)
  - cputest: Drop some old artificial baseline tests (rhbz#1851227)
  - cputest: Give better names to baseline tests (rhbz#1851227)
  - cputest: Add some real world baseline tests (rhbz#1851227)
  - cpu_x86: Consolidate signature match in x86DecodeUseCandidate (rhbz#1851227)
  - cpu_x86: Refactor feature list comparison in x86DecodeUseCandidate (rhbz#1851227)
  - cpu_x86: Penalize disabled features when computing CPU model (rhbz#1851227)
  - cpu_x86: Ignore enabled features for input models in x86DecodeUseCandidate (rhbz#1851227)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-8
changelog:
  - nwfilter: fix crash when counting number of network filters (CVE-2022-0897, rhbz#2063902)
  - virDomainDiskDefValidate: Improve error messages for 'startupPolicy' checks (rhbz#2095758)
  - domain_validate: Split out validation of disk startup policy (rhbz#2095758)
  - virDomainDiskDefValidateStartupPolicy: Validate disk type better (rhbz#2095758)
  - virDomainDiskTranslateSourcePool: Fix check of 'startupPolicy' definition (rhbz#2095758)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-9
changelog:
  - conf: virtiofs: add thread_pool element (rhbz#2079582)
  - qemu: virtiofs: format --thread-pool-size (rhbz#2079582)
  - conf: Move virDomainObj::originalMemlock into qemuDomainObjPrivate (rhbz#2089433)
  - qemu_domain: Format qemuDomainObjPrivate::originalMemlock (rhbz#2089433)
  - qemu: Add qemuDomainSetMaxMemLock helper (rhbz#2089433)
  - qemu_migration: Use qemuDomainSetMaxMemLock (rhbz#2089433)
  - qemu_migration: Restore original memory locking limit (rhbz#2089433)
  - Add VIR_MIGRATE_ZEROCOPY flag (rhbz#2089433)
  - virsh: Add support for VIR_MIGRATE_ZEROCOPY flag (rhbz#2089433)
  - qemu_migration: Implement VIR_MIGRATE_ZEROCOPY flag (rhbz#2089433)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-10
changelog:
  - security_selinux.c: Relabel existing mode="bind" UNIX sockets (rhbz#2101575)
  - RHEL: qemu_migration: Fix restoring memlock limit on destination (rhbz#2107954)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-10.1.el8
changelog:
  - qemu_process: Don't require a hugetlbfs mount for memfd (rhbz#2132176)
  - qemu_namespace: Tolerate missing ACLs when creating a path in namespace (rhbz#2132176)
  - qemu_namespace: Fix a corner case in qemuDomainGetPreservedMounts() (rhbz#2132176)
  - qemu_namespace: Introduce qemuDomainNamespaceSetupPath() (rhbz#2132176)
  - qemu_process.c: Propagate hugetlbfs mounts on reconnect (rhbz#2132176)
  - qemuProcessReconnect: Don't build memory paths (rhbz#2132176)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-10.2.el8
changelog:
  - util: json: Split out array->strinlist conversion from virJSONValueObjectGetStringArray (rhbz#2152079)
  - qemuAgentGetDisks: Don't use virJSONValueObjectGetStringArray for optional data (rhbz#2152079)
  - build: Only install libvirt-guests when building libvirtd (rhbz#2157091)
  - tools: Fix install_mode for some scripts (rhbz#2157091)


author: EL Errata <el-errata_ww@oracle.com> - 8.0.0-10.2.0.1
changelog:
  - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]
  - Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-2
changelog:
  - [RFE] RFE backport allow enabling ZEROCOPY live migration to libvirt-python on RHEL8 to be consumed by VDSM (rhbz#2092756)


author: Richard W.M. Jones <rjones@redhat.com> - 1.4.2-4
changelog:
  - Remove misguided LDFLAGS hack which removed server hardening.
    https://bugzilla.redhat.com/show_bug.cgi?id=1624149#c6
    resolves: rhbz#1624149


author: Laine Stump <laine@redhat.com>
changelog:
  - Improve performance with large number of interfaces
     (Bug 1268384, Bug 1271341)
   - recognize bond devices with no slaves


author: Reuben Hawkins <reuben.hawkins@oracle.com> 4.7
changelog:
  - Fix resvport behavior and passthrough to mount.nfs
  - Fix mounting same mount target to same mount point twice
  - Ensure mounting same mount target to two different paths behaves same as mount.nfs
  - Ticket 18259


author: Reuben Hawkins <reuben.hawkins@oracle.com>
changelog:
  - Make socket non-blocking after connect
  - pick new source ports if there is a bind/connect failure
  - Revert: Refuse to uninstall if there are still mounted filesystems.


author: Reuben Hawkins <reuben.hawkins@oracle.com> 4.13
changelog:
  - Added configure check for deprecated json-c functions
  - Minor cleanups, removed unused variables
  - Added -Werror to build


author: Reuben Hawkins <reuben.hawkins@oracle.com> 4.15
changelog:
  - Fix a deadlock in report.c
  - Remove deadline/timeout code (because it can only break the stream)
  - Make oci-fss-utils mount namespace aware


author: Reuben Hawkins <reuben.hawkins@oracle.com> 4.16
changelog:
  - Do no use /tmp, use /var/run to avoid systemd PrivateTmp isolations
  - Don't start systemd services too early in mount.oci-fss (allow --version without root)


author: Reuben Hawkins <reuben.hawkins@oracle.com> 5.0
changelog:
  - Use just one forwarder process
  - Allow forwarder process to handle many mount targets
  - run everything in one systemd service
  - don't use /var/run, use /run


author: Reuben Hawkins <reuben.hawkins@oracle.com> 5.1
changelog:
  - add 'release'/'master'/'branch' tags to rpm names
  - simplify syslog logging
  - add full git hash to version.txt
  - Restart if any child processes crash


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to
    https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - require crun >= 0.17
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.3-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.3
  - fix build
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061390


author: Emmanuel Jannetti <4819607+ejannett@users.noreply.github.com> - 0.11.6-9.el7
changelog:
  - fix for LINUX-9592 - mapping between vNIC and NIC broken if some vNIC are removed (Emmanuel Jannetti)  
  - update spec file (Emmanuel Jannetti)


author: Emmanuel Jannetti <emmanuel.jannetti@oracle.com> --0.12.0
changelog:
  - LINUX-9546 - oci-image-cleanup --dry-run do not print the plan directly
  - oci-iscsi-config usage refactor
  - LINUX-9202 - oci-network-config error in oci_utils.exceptions.OCISDKError: Failed to fetch instance
  - LINUX-8946 - no warning when user select primary vnic


author: Emmanuel Jannetti <emmanuel.jannetti@oracle.com> -- 0.12.1
changelog:
  - LINUX-9315 reduce use of sleep calls
  - LINUX-9806 OCISession.get_vnic not optimised
  - LINUX-9566 oci-network-config should display NIC index
  - LINUX-9781 Should add parsable output
  - LINUX-9740 oci_api module takes long time to load
  - LINUX-9334 remove use of sleep in oci-network-config-main
  - LINUX-9770 oci-network-config usage refactor
  - LINUX-9815 oci-public-ip do not implement --human-readable option
  - LINUX-9812 oci-public-ip should leverage new output mechanism


author: Guido Tijskens <guido.tijskens@oracle.com> -- 0.12.2
changelog:
  - LINUX-8692 oci-image-cleanup: line 588: /dev/shm/oci-utils/image-cleanup.plan: Permission denied
  - LINUX-9544 oci-image-cleanup leave directories behind
  - LINUX-9545 oci-image-cleanup should no print anythings when --force is specified
  - LINUX-10007 oci-metadata autotest fails on several locations
  - LINUX-10048 oci-network-inspector autotest fails
  - LINUX-10050 oci-iscsi-config autotest fails
  - LINUX 10105 oci-iscsi-config attach -i <iqn...> fails
  - LINUX-10121 oci-iscsi detach "multiple iqns" fails with 'NoneType' object is not subscriptable
  - LINUX-10142 oci-network-config show-vnics --details inhibits output mode
  - LINUX-10149 oci-network-config attach-vnic -I 100.110.5.99 fails
  - LINUX-10316 oci-network-config attach-vnic --name <name> --subnet <subnetid> fails 
  - LINUX-10323 <>.get_compartment_id returns tenancy ocid iso compartment ocid
  - LINUX-10345 OCIVNIC cannot handle empty/absent attachement data
  - LINUX-10360 ocid service configures unconfigured vnics
  - LINUX-10363 oci-network-config --create-vnic --private-ip <ipv4> fails
  - LINUX-10373 oci-network-cofnig -X <vnic..> fails (as does -I)
  - LINUX-10382 oci-image-cleanup: add tests for source exist before running rsync
  - LINUX-10426 oci-iscsi-config fails to attach/destroy volumes on r1 tenancy
  - LINUX-10428 oci-metadata --get /vnics/privateip fail
  - LINUX-10535 oci-iscsi-config -s shows all the unattached volumes that exist in the compartment, man page needs an update to.
  - LINUX-10667 oci-iscsi-config sync --apply fails: str obj has not attr keys
  - LINUX-10686 oci-network-config compatibility issue: --add-private-ip -e <ip> <ocid>
  - added Santiago, Chile as a region
  - updated max image sizes for migrate to 400GB


author: Daniel P. Berrangé <berrange@redhat.com> - 4.5.0-4
changelog:
  - Fix typed parameter memory handling (rhbz #1602346)
  - Fix missing NWFilterBinding module (rhbz #1615841)


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/4f91b37)
  - Related: #2009106


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/c5d8129)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/801b7e8)
  - Resolves: #2074144


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/47b310e)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/4cd74c2)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-12
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/1c4d1a7)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-13
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/37cd5bf)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-14
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/ab15cf1)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-15
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/b084df1)
  - Related: #2165695


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/7154106)
  - Related: #2130911


author: Jindrich Novy <jnovy@redhat.com> - 3:4.2.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/4978898)
  - Resolves: #2125241


author: Jindrich Novy <jnovy@redhat.com> - 3:4.2.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/d520a5c)
  - Resolves: #2136433


author: Jindrich Novy <jnovy@redhat.com> - 3:4.2.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/35c0df3)
  - Resolves: #2125645


author: Jindrich Novy <jnovy@redhat.com> - 3:4.2.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/6742838)
  - Resolves: #2144754


author: Jindrich Novy <jnovy@redhat.com> - 3:4.2.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/bfac4a5)
  - Resolves: #2152027


author: Jindrich Novy <jnovy@redhat.com> - 3:4.2.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/0608f55)
  - Resolves: #2158635


author: Jindrich Novy <jnovy@redhat.com> - 3:4.2.0-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/28df097)
  - Resolves: #2158635


author: Alan Steinberg <alan.steinberg@oracle.com> - 6.1.0-1.0.1.el7
changelog:
  - OL merge for 6.1.0-1
  - PowerShell 6.1.0 requires modifications to Oracle patches [OraBug 28730117]


author: Ralph Bean <rbean@redhat.com> - 0.6.0-1
changelog:
  - new version
  - Include license file, now shipped by upstream
  - Run tests the way upstream does in their Makefile.


author: williamjmorenor@gmail.com - 2016.9.26-6
changelog:
  - Fix path of .pem file
    Thanks to @carlwgeorge
    See: https://src.fedoraproject.org/rpms/python-certifi/pull-request/1


author: <jdennis@redhat.com> - 2018.10.15-3
changelog:
  - Resolves: rhbz#1659132 Incorrect location used for system certs
    where() now returns /etc/pki/tls/certs/ca-bundle.crt


author: José Matos <jamatos@fedoraproject.org> - 3.5.0b2-0.2
changelog:
  - Improve description to make it clear that this package in only needed for python 2.7
  - Make the license tag information more explicit.


author: Avram Lubkin <aviso@fedoraproject.org> - 3.5.0b2-1
changelog:
  - Updated to build for el6
  - Updated to build Python3 packages
  - Changed Python2 package name to python2-configparser for Fedora 24+
  - Updated description
  - Removed license comments


author: EL Errata <el-errata_ww@oracle.com> 8.0-1
changelog:
  - Update to 8.0
  - Python 3.5 or higher is required. [Orabug: 31547319]
  - renamed package to python36.
  - use libclntsh.so instead of instantclient19.x as dependency.


author: Alan Steinberg <alan.steinberg@oracle.com> - 8.2.1-1.0.1.el8
changelog:
  - Changed libclntsh.so requirement to 19.1 (not 19.10 OIC version). (Alan Steinberg)  
  - Added aarch64 support with oracle-instantclient 19.10. (Alan Steinberg)


author: Iryna Shcherbina <ishcherb@redhat.com> - 1:2.6.1-2
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:2.7.0-1
changelog:
  - Fix license tag (should be BSD)
  - Update to latest version (#1469314)
    See https://github.com/dateutil/dateutil/blob/master/NEWS for details.


author: Apoorva Eliza John <apoorva.eliza.john@oracle.com> 2.150.3-2
changelog:
  - Enable python3.11 build for OL8 [JIRA: OLDIS-44040]
  - Building for OL10 [JIRA: OLDIS-40343]
  - Replace deprecated datetime methods [Orabug: 37481471]


author: Qing Lin <qing.lin@oracle.com> 1.0.1-1
changelog:
  - Update to v1.0.1
  - Remove python2 and Update based on Christopher's comments [jirabug: OLDIS-18075]


author: Alex Burmashev <alexander.burmashev@oracle.com> 2.3.0-1
changelog:
  - Update to 2.3.0
  - Update setup.cfg to actually contain version
  - Disabled python3.6 due to lack of support.


author: Jindrich Novy <jnovy@redhat.com> - 4.2.0-2
changelog:
  - fix "[RFE] python-podman: Podman support to perform custom actions on unhealthy containers"
  - Resolves: #2132360


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 3.0.29-1.0.1
changelog:
  - Update specfile macros to build for el8 - convert back to py3_macros 
  - Added dependency to python3-wcwidth


author: Fabian Affolter <mail@fabian-affolter.ch> - 0.3.6-2
changelog:
  - Use var for source URL
  - Split BRs
  - Delete hidden files from doc generation
  - Better use of wildcards (rhbz#1787140)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-14
changelog:
  - kvm-Revert-redhat-Add-some-devices-for-exporting-upstrea.patch [bz#2065043]
  - kvm-target-i386-properly-reset-TSC-on-reset.patch [bz#2070417]
  - kvm-ui-cursor-fix-integer-overflow-in-cursor_alloc-CVE-2.patch [bz#2040734]
  - Resolves: bz#2065043
    (Remove upstream-only devices from the qemu-kvm binary)
  - Resolves: bz#2070417
    (Windows guest hangs after updating and restarting from the guest OS [rhel-8.7.0])
  - Resolves: bz#2040734
    (CVE-2021-4206 virt:rhel/qemu-kvm: QEMU: QXL: integer overflow in cursor_alloc() can lead to heap buffer overflow [rhel-8.7])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-15
changelog:
  - kvm-virtio-gpu-do-not-byteswap-padding.patch [bz#1916415]
  - kvm-linux-headers-update-to-5.16-rc1.patch [bz#1916415]
  - kvm-linux-headers-Update-headers-to-v5.17-rc1.patch [bz#1916415]
  - kvm-linux-headers-include-missing-changes-from-5.17.patch [bz#1916415]
  - kvm-x86-Fix-the-64-byte-boundary-enumeration-for-extende.patch [bz#1916415]
  - kvm-x86-Add-AMX-XTILECFG-and-XTILEDATA-components.patch [bz#1916415]
  - kvm-x86-Grant-AMX-permission-for-guest.patch [bz#1916415]
  - kvm-x86-Add-XFD-faulting-bit-for-state-components.patch [bz#1916415]
  - kvm-x86-Add-AMX-CPUIDs-enumeration.patch [bz#1916415]
  - kvm-x86-add-support-for-KVM_CAP_XSAVE2-and-AMX-state-mig.patch [bz#1916415]
  - kvm-x86-Support-XFD-and-AMX-xsave-data-migration.patch [bz#1916415]
  - kvm-target-i386-kvm-do-not-access-uninitialized-variable.patch [bz#1916415]
  - kvm-KVM-x86-workaround-invalid-CPUID-0xD-9-info-on-some-.patch [bz#1916415]
  - kvm-virtio-net-setup-vhost_dev-and-notifiers-for-cvq-onl.patch [bz#2069946]
  - kvm-virtio-net-align-ctrl_vq-index-for-non-mq-guest-for-.patch [bz#2069946]
  - kvm-vhost-vdpa-fix-improper-cleanup-in-net_init_vhost_vd.patch [bz#2069946]
  - kvm-vhost-net-fix-improper-cleanup-in-vhost_net_start.patch [bz#2069946]
  - kvm-vhost-vdpa-backend-feature-should-set-only-once.patch [bz#2069946]
  - kvm-vhost-vdpa-change-name-and-polarity-for-vhost_vdpa_o.patch [bz#2069946]
  - kvm-virtio-net-don-t-handle-mq-request-in-userspace-hand.patch [bz#2069946]
  - kvm-ide-Increment-BB-in-flight-counter-for-TRIM-BH.patch [bz#2029980]
  - kvm-block-Make-bdrv_refresh_limits-non-recursive.patch [bz#2072932]
  - kvm-iotests-Allow-using-QMP-with-the-QSD.patch [bz#2072932]
  - kvm-iotests-graph-changes-while-io-New-test.patch [bz#2072932]
  - Resolves: bz#1916415
    ([Intel 8.7 FEAT] qemu-kvm Sapphire Rapids (SPR) AMX Instructions)
  - Resolves: bz#2069946
    (PXE boot crash qemu when using multiqueue vDPA)
  - Resolves: bz#2029980
    (Failed assertion in IDE emulation with Ceph backend)
  - Resolves: bz#2072932
    (Qemu coredump when refreshing block limits on an actively used iothread block device [rhel.8.7])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-16
changelog:
  - kvm-virtiofsd-Fix-breakage-due-to-fuse_init_in-size-chan.patch [bz#2097209]
  - kvm-hw-block-fdc-Prevent-end-of-track-overrun-CVE-2021-3.patch [bz#1951521]
  - kvm-tests-qtest-fdc-test-Add-a-regression-test-for-CVE-2.patch [bz#1951521]
  - Resolves: bz#2097209
    ([virtiofs] mount virtiofs failed: SELinux: (dev virtiofs, type virtiofs) getxattr errno 111)
  - Resolves: bz#1951521
    (CVE-2021-3507 virt:rhel/qemu-kvm: QEMU: fdc: heap buffer overflow in DMA read data transfers [rhel-8])


author: Camilla Conte <cconte@redhat.com> - 6.2.0-17
changelog:
  - kvm-migration-Never-call-twice-qemu_target_page_size.patch [bz#2072049]
  - kvm-multifd-Rename-used-field-to-num.patch [bz#2072049]
  - kvm-multifd-Add-missing-documentation.patch [bz#2072049]
  - kvm-multifd-The-variable-is-only-used-inside-the-loop.patch [bz#2072049]
  - kvm-multifd-remove-used-parameter-from-send_prepare-meth.patch [bz#2072049]
  - kvm-multifd-remove-used-parameter-from-send_recv_pages-m.patch [bz#2072049]
  - kvm-multifd-Fill-offset-and-block-for-reception.patch [bz#2072049]
  - kvm-multifd-Make-zstd-compression-method-not-use-iovs.patch [bz#2072049]
  - kvm-multifd-Make-zlib-compression-method-not-use-iovs.patch [bz#2072049]
  - kvm-migration-All-this-fields-are-unsigned.patch [bz#2072049]
  - kvm-multifd-Move-iov-from-pages-to-params.patch [bz#2072049]
  - kvm-multifd-Make-zlib-use-iov-s.patch [bz#2072049]
  - kvm-multifd-Make-zstd-use-iov-s.patch [bz#2072049]
  - kvm-multifd-Remove-send_write-method.patch [bz#2072049]
  - kvm-multifd-Use-a-single-writev-on-the-send-side.patch [bz#2072049]
  - kvm-multifd-Use-normal-pages-array-on-the-send-side.patch [bz#2072049]
  - kvm-QIOChannel-Add-flags-on-io_writev-and-introduce-io_f.patch [bz#2072049]
  - kvm-QIOChannelSocket-Implement-io_writev-zero-copy-flag-.patch [bz#2072049]
  - kvm-migration-Add-zero-copy-send-parameter-for-QMP-HMP-f.patch [bz#2072049]
  - kvm-migration-Add-migrate_use_tls-helper.patch [bz#2072049]
  - kvm-multifd-multifd_send_sync_main-now-returns-negative-.patch [bz#2072049]
  - kvm-multifd-Send-header-packet-without-flags-if-zero-cop.patch [bz#2072049]
  - kvm-multifd-Implement-zero-copy-write-in-multifd-migrati.patch [bz#2072049]
  - kvm-QIOChannelSocket-Introduce-assert-and-reduce-ifdefs-.patch [bz#2072049]
  - kvm-QIOChannelSocket-Fix-zero-copy-send-so-socket-flush-.patch [bz#2072049]
  - kvm-migration-Change-zero_copy_send-from-migration-param.patch [bz#2072049]
  - kvm-migration-Add-migration_incoming_transport_cleanup.patch [bz#2097652]
  - kvm-migration-Allow-migrate-recover-to-run-multiple-time.patch [bz#2097652]
  - kvm-pc-bios-s390-ccw-virtio-Introduce-a-macro-for-the-DA.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-bootmap-Improve-the-guessing-logic-.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Simplify-fix-virtio_i.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Remove-virtio_assume_.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-Set-missing-status-bits-whil.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-Read-device-config-after-fea.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-Beautify-the-code-for-readin.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-Split-virtio-scsi-code-from-virtio_.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Request-the-right-fea.patch [bz#2098076]
  - Resolves: bz#2072049
    (Pull  MSG_ZEROCOPY on QEMU Live Migration Patches into RHEL 8)
  - Resolves: bz#2097652
    (The migration port is not released if use it again for recovering postcopy migration)
  - Resolves: bz#2098076
    (virtio-blk: Can't boot fresh installation from used virtio-blk dasd disk under certain conditions)


author: Camilla Conte <cconte@redhat.com> - 6.2.0-18
changelog:
  - kvm-linux-aio-fix-unbalanced-plugged-counter-in-laio_io_.patch [bz#2105410]
  - kvm-linux-aio-explain-why-max-batch-is-checked-in-laio_i.patch [bz#2105410]
  - Resolves: bz#2105410
    (Stalled IO Operations in VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-19
changelog:
  - kvm-migration-Introduce-ram_transferred_add.patch [bz#2110203]
  - kvm-migration-Tally-pre-copy-downtime-and-post-copy-byte.patch [bz#2110203]
  - kvm-QIOChannelSocket-Fix-zero-copy-flush-returning-code-.patch [bz#2110203]
  - kvm-Add-dirty-sync-missed-zero-copy-migration-stat.patch [bz#2110203]
  - kvm-migration-multifd-Report-to-user-when-zerocopy-not-w.patch [bz#2110203]
  - kvm-migration-Avoid-false-positive-on-non-supported-scen.patch [bz#2110203]
  - kvm-migration-add-remaining-params-has_-true-in-migratio.patch [bz#2110203]
  - kvm-QIOChannelSocket-Add-support-for-MSG_ZEROCOPY-IPV6.patch [bz#2110203]
  - kvm-pc-bios-s390-ccw-Fix-booting-with-logical-block-size.patch [bz#2112296]
  - Resolves: bz#2110203
    (zerocopy capability can be enabled when set migrate capabilities with multifd and compress/xbzrle together)
  - Resolves: bz#2112296
    (virtio-blk: Can't boot fresh installation from used 512 cluster_size image under certain conditions)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-20
changelog:
  - kvm-scsi-generic-Fix-emulated-block-limits-VPD-page.patch [bz#2120279]
  - Resolves: bz#2120279
    (Wrong max_sectors_kb and Maximum transfer length on the pass-through device [rhel-8.7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-20.el8.1
changelog:
  - kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2116743]
  - kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2116743]
  - Resolves: bz#2116743
    ([RHEL8.7] Guests in VMX root operation fail to reboot with QEMU's 'system_reset' command)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-20.el8_7.2
changelog:
  - kvm-virtiofsd-use-g_date_time_get_microsecond-to-get-sub.patch [bz#2132391]
  - Resolves: bz#2132391
    ([virtiofs] virtiofsd debug log's timestamp is NULL [rhel-8.7.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-21.el8_7.2
changelog:
  - kvm-ui-vnc.c-Fixed-a-deadlock-bug.patch [bz#2148504]
  - kvm-hw-display-qxl-Have-qxl_log_command-Return-early-if-.patch [bz#2152085]
  - kvm-hw-display-qxl-Document-qxl_phys2virt.patch [bz#2152085]
  - kvm-hw-display-qxl-Pass-requested-buffer-size-to-qxl_phy.patch [bz#2152085]
  - kvm-hw-display-qxl-Avoid-buffer-overrun-in-qxl_phys2virt.patch [bz#2152085]
  - kvm-hw-display-qxl-Assert-memory-slot-fits-in-preallocat.patch [bz#2152085]
  - Resolves: bz#2148504
    (VMs hung on vnc_clipboard_send [rhel-8.7.0.z])
  - Resolves: bz#2152085
    (CVE-2022-4144 virt:rhel/qemu-kvm: QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-of-bounds read [rhel-8] [rhel-8.7.0.z])


author: Filip Zaludek <filip.zaludek@oracle.com> - 20230405-1.0.1
changelog:
  - Firmware updated to 1.20230405
  - Bundled and activated overlay to disable simple-framebuffer [OraBug 34055935]
  - Support for CM4 [OraBug 34972929]


author: Filip Zaludek <filip.zaludek@oracle.com> - 20250127-1.0.1
changelog:
  - Firmware updated to 1.20250127
  - New dma-hdmi-audio.dts overlay
  - Sources of custom overlays rewritten into more concise and readable form


author: Filip Zaludek <filip.zaludek@oracle.com> - 20250305-1.0.1
changelog:
  - Firmware updated to 1.20250305
  - Excluded 'kernel*.img' RPi Foundation kernel images from source archive


author: Filip Zaludek <filip.zaludek@oracle.com> - 20250305-1.0.2
changelog:
  - config.txt: predefined #framebuffer_swap=0
  - config.txt: dtoverlay=dma-hdmi-audio
  - config.txt: dtoverlay=vc4-kms-v3d-pi4,cma-64


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-68.rc92
changelog:
  - update to https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-73.rc95
changelog:
  - fix podman run --pid=host command causes OCI permission error
  - rc95 fixes CVE-2021-30465
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.3-6
changelog:
  - Fix every podman run invocation generates two "Couldn't stat device
    /dev/char/10:200: No such file or directory" lines in the journal
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.3-3
changelog:
  - fix "Error: runc: exec failed: unable to start container process:
    open /dev/pts/0: operation not permitted: OCI permission denied"
  - Related: #2061390


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-0
changelog:
  - Update to Samba 4.15.5
  - related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
  - resolves: rhbz#2046127 - Fix CVE-2021-44141
  - resolves: rhbz#2046153 - Fix CVE-2021-44142
  - resolves: rhbz#2044404 - Printing no longer works on Windows 7
  - resolves: rhbz#2043154 - Fix systemd notifications
  - resolves: rhbz#2049602 - Disable NTLMSSP for ldap client connections (e.g. libads)


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-1
changelog:
  - resolves: #1995849 - [RFE] Change change password change prompt phrasing
  - resolves: #2029417 - virusfilter_vfs_openat: Not scanned: Directory or special file


author: Andreas Schneider <asn@redhat.com> - 4.15.5-5
changelog:
  - resolves: rhbz#2064325 - Fix 'create krb5 conf = yes` when a KDC has a
                             single IP address.


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-8
changelog:
  - resolves: rhbz#2079303 - Fix username map for unix groups
  - resolves: rhbz#2079299 - PAM Kerberos authentication fails with a clock skew error
  - resolves: rhbz#2079304 - Fix UPNs handling in lookup_name*() calls


author: EL Errata <el-errata_ww@oracle.com> - 4.15.5-10.0.1
changelog:
  - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs
    in OL8 [Orabug: 30205755]


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.3-1
changelog:
  - related: rhbz#2013596 - Rebase to version 4.15.3
  - resolves: rhbz#2028029 - Fix possible null pointer dereference in winbind
  - resolves: rhbz#1912549 - Winexe: Kerberos Auth is respected via --use-kerberos=desired


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.4-0
changelog:
  - Update to Samba 4.15.4
  - related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
  - resolves: rhbz#2039153 - Fix CVE-2021-20316
  - resolves: rhbz#1912549 - Winexe: Kerberos flag not invoking Kerberos Auth
  - resolves: rhbz#2039157 - Fix CVE-2021-43566
  - resolves: rhbz#2038148 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7
  - resolves: rhbz#2035528 - [smb] Segmentation fault when joining the domain
  - resolves: rhbz#2038796 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-6
changelog:
  - resolves: rhbz#2059151 - Fix username map for unix groups
  - resolves: rhbz#2065212 - Fix 'create krb5 conf = yes` when a KDC has a single IP address.


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.3-0
changelog:
  - related: rhbz#2077468 - Rebase Samba to 4.16.3
  - resolves: rhbz#2106672 - The pcap background queue process should not be stopped
  - resolves: rhbz#2106263 - Fix crash in rpcd_classic
  - resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.4-5
changelog:
  - resolves: rhbz#2170394 - Fix share enum
  - resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
  - resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
  - resolves: rhbz#2170469 - Create package samba-tools


author: EL Errata <el-errata_ww@oracle.com> - 4.16.4-6.0.1
changelog:
  - Fix memleak in _nss_winbind_initgroups_dyn [Orabug: 34727815]
  - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs
    in OL8 [Orabug: 30205755]


author: Andreas Schneider <asn@redhat.com> - 4.17.2-1
changelog:
  - resolves: rhbz#2132051 - Update to version 4.17.2
  - resolves: rhbz#2126174 - Fix CVE-2022-1615
  - resolves: rhbz#2108487 - ctdb: Add dependency to samba-winbind-clients


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.2-2
changelog:
  - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
  - related: rhbz#2132051


author: Pavel Filipenský <pfilipenn@redhat.com> - 4.17.4-0
changelog:
  - related: rhbz#2132051 - Update to version 4.17.4
  - resolves: rhbz#2154370 - Fix CVE-2022-38023
  - resolves: rhbz#2142331 - Fix %U include directive for share listing (netshareenum)
  - resolves: rhbz#2148943 - Fix Winbind to retrieve user groups from Active Directory


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.5-2
changelog:
  - resolves: rhbz#2169339 - Fix winbind memory leak
  - resolves: rhbz#2152899 - Fix Samba shares not accessible issue


author: Darren Archibald <darren.archibald@oracle.com> - 4.17.5-3
changelog:
  - resolves: rhbz#2223601 - Fix trust relationship between workstation and DC
  - resolves: rhbz#2222895 - Fix CVE-2023-3347


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-1
changelog:
  - resolves: rhbz#2221594 - Fix broken symlink for libwbclient
  - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-0
changelog:
  - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-1
changelog:
  - related: rhbz#2190417 - Update to version 4.18.6
  - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command


author: Mark Will <mark.will@oracle.com> - 4.18.6-2.0.1
changelog:
  - resolves: RHEL-11937
    Fix CVE-2023-3961 - smbd must check the pipename
  - resolves: RHEL-11937
    Fix CVE-2023-4091 - SMB clients can truncate files
  - resolves: RHEL-11937
    Fix CVE-2023-42669 - Remove rpcecho server


author: Pavel Filipenský <pfilipen@redhat.com> - 4.19.4-10
changelog:
  - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up
  - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment


author: EL Errata <el-errata_ww@oracle.com> - 4.19.4-10.0.1
changelog:
  - s3: winbindd: winbindd_pam: fix leak in extract_pac_vrfy_sigs [Orabug: 36518285]
  - s3:passdb: Do not leak memory in pdb_tdb [Orabug: 36371377]
  - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs in OL8 [Orabug: 30205755]


author: Pavel Filipenský <pfilipen@redhat.com> - 4.19.3-1
changelog:
  - resolves: RHEL-16483 - Update to version 4.19.3
  - resolves: RHEL-11361
              - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-2228  - Logging Format Enhancement
  - resolves: RHEL-1965  - Fix smbget issues with DFS shares
  - resolves: RHEL-2108  - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind


author: Pavel Filipenský <pfilipen@redhat.com> - 4.19.4-2
changelog:
  - Fix error in PREIN scriptlet in rpm package samba-common
  - related: RHEL-16483 - Update to version 4.19.4


author: Darren Archibald <darren.archibald@oracle.com> - 4.19.4-3.0.1
changelog:
  - s3:passdb: Do not leak memory in pdb_tdb [Orabug: 36371377]
  - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs
    in OL8 [Orabug: 30205755]


author: Akshata Konala <akshata.konala@oracle.com> - 4.19.4-4.0.1
changelog:
  - s3: winbindd: winbindd_pam: fix leak in extract_pac_vrfy_sigs [Orabug: 36518285]
  - s3:passdb: Do not leak memory in pdb_tdb [Orabug: 36371377]
  - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs
    in OL8 [Orabug: 30205755]


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.12.0-3.el8
changelog:
  - seabios-rh-add-configs-for-ramfb-and-bochs-display.patch [bz#1724098]
  - Resolves: bz#1724098
    (enable device: bochs-display (seabios))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.12.0-4.el8
changelog:
  - seabios-tpm-Check-for-TPM-related-ACPI-tables-before-attempt.patch [bz#1705212]
  - seabios-usb-ehci-Clear-pipe-token-on-pipe-reallocate.patch [bz#1705212]
  - Resolves: bz#1705212
    (Backport 1.12.1 patches to RHEL-AV 8.1.0)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.12.0-5.el8
changelog:
  - seabios-add-get_keystroke_full-helper.patch [bz#1693031]
  - seabios-bootmenu-add-support-for-more-than-9-entries.patch [bz#1693031]
  - Resolves: bz#1693031
    (On systems with more than 10 available boot devices, keys are uninintuitive)


author: Jon Maloy <jmaloy@redhat.com> - 1.15.0-1.el8
changelog:
  - pci-reserve-resources-for-pcie-pci-bridge-to-fix-reg.patch [bz#2001921]
  - pci: let firmware reserve IO for pcie-pci-bridge.patch [bz#2001921]
  - Resolves: bz#2001921


author: Paweł Poławski <ppolawsk@redhat.com> - 1.16.0-1
changelog:
  - Rebase to upstream 1.16 tag [bz#2066828]
  - Resolves: bz#2066828
    (rebase seabios to 1.16 release)


author: Jon Maloy <jmaloy@redhat.com> - 1.16.0-2
changelog:
  - seabios-shortcut-skip-unbootable-disks-optimitation.patch [bz#2073012]
  - seabios-pci-refactor-the-pci_config_-functions.patch [bz#2083884]
  - seabios-reset-force-standard-PCI-configuration-access.patch [bz#2083884]
  - Resolves: bz#2073012
    (Guest whose os is installed multiple disks but boot partition is installed on single disk can't boot into OS on RHEL 8 [rhel-8.7.0])
  - Resolves: bz#2083884
    (qemu reboot problem with seabios 1.16.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.0-3
changelog:
  - seabios-virtio-blk-use-larger-default-request-size.patch [bz#2101787]
  - Resolves: bz#2101787
    ([rhel.8.7] Loading a kernel/initrd is sometimes very slow)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-9
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/a05ddb8)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-10
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/6c0e35a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-11
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/b4210c0)
  - Resolves: #1914884


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-12
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/3abb778)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/e72dd9c)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-10
changelog:
  - update shortnames from Pyxis
  - sync with the vendored versions in 3.0-8.5.0
  - bump release to assure upgrade path from 3.0-8.4.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/9921983)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/7300333)
  - Related: #2061390


author: EL Errata <el-errata_ww@oracle.com> - 1.2.4-2.0.1
changelog:
  - Ignore rhel-shortnames.conf [JIRA: OLDIS-3902]
  - Handling redirect from the docker registry [Orabug: 29874238] (Nikita Gerasimov)
  - Add oracle registry into the conf file [Orabug: 29845934 31306708]


author: Jindrich Novy <jnovy@redhat.com> - 1.1.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.1
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.2
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.3
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.4-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.4
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.6-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.6
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.7-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.8-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.0
  - Related: #2061390


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-12
changelog:
  - [foreman] Use psql-msgpack-decode wrapper for dynflow >= 1.6
    Resolves: bz2043102
  - [virsh] Call virsh commands in the foreground / with a TTY
    Resolves: bz2041488
  - [ovn_central] Account for Red Hat ovn package naming
    Resolves: bz2042966
  - [clean,parsers] Build regex lists for static items only once
    Resolves: bz2036697


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-15
changelog:
  - [sosnode] Handle downstream versioning for runtime option
    Resolves: bz2036697
  - [options] Fix logging on plugopts in effective sos command
    Resolves: bz2054882
  - [report] Honor plugins' hardcoded plugin_timeout
    Resolves: bz2055547
  - [policies] Set fallback to None sysroot, don't chroot to '/'
    Resolves: bz1873185
  - [ovn_central] Rename container responsable of Red Hat
    Resolves: bz2042966


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-1
changelog:
  - Rebase on upstream 4.3
    Resolves: bz2055002
  - [sapnw] Fix IndexError exception
    Resolves: bz1992938
  - [Plugin, utilities] Allow writing command output directly to disk
    Resolves: bz1726023
  - [Ceph] Add support for containerized Ceph setup
    Resolves: bz1882544
  - [unbound] Add new plugin for Unbound DNS resolver
    Resolves: bz2018228
  - [discovery] Add new discovery plugin
    Resolves: bz2018549
  - [vdsm] Exclude /var/lib/vdsm/storage/transient_disks
    Resolves: bz2029154


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-2
changelog:
  - [ovirt] answer files: Filter out all password keys
    Resolves: bz2095263
  - [plugins] Allow 'str' PlugOpt type to accept any value
    Resolves: bz2079485
  - [tigervnc] Update collections for newer versions of TigerVNC
    Resolves: bz2062908
  - [pacemaker] Redesign node enumeration logic
    Resolves: bz2065805
  - crio: switch from parsing output in table format to json
    Resolves: bz2092969
  - [report] Honor plugins' hardcoded plugin_timeout
    Resolves: bz2079187
  - [report] --list-plugins should report used, not default,
    Resolves: bz2079484
  - [utilities] Close file only when storing to file
    Resolves: bz2079486
  - [presets] Adjust OCP preset options, more OCP backports
    Resolves: bz2058279


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-3
changelog:
  - [vdsm] Set LVM option use_devicesfile=0
    Resolves: bz2093993
  - [Plugin] Make forbidden path checks more efficient
    Resolves: bz2099598


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-5
changelog:
  - [ovn_central] Rename container responsable of Red Hat
    Resolves: bz2042966
  - [PATCH] [host] Skip entire /etc/sos/cleaner directory
    Resolves: bz2023867


author: EL Errata <el-errata_ww@oracle.com> - 4.3-5.0.1
changelog:
  - append .txt to .com domain named files [Orabug: 34523347]
  - Adding dmesg -T to show timestamp for syslog comparison [Orabug: 34250313]
  - Adding uptrack-uname to show effective ksplice kernel version [Orabug: 33553351]
  - Fix ksplice plugin does not show description [Orabug: 32886513]
  - Adjusted ksplice plugin patches for path change [Orabug: 32881277]
  - Fix patch for Orabug 31969352 [Orabug: 32822570]
  - Add in some btrfs commands [Orabug: 32727607]
  - Add /var/run/ksplice/debug to sos ksplice plugin [Orabug: 32618933]
  - Do not exit on unknown plugin [Orabug: 32556170]
  - Allow a journal log size to be smaller than 100M [Orabug: 32454362]
  - Replace RH_FTP_HOST and RH_API_HOST with "_none_" [Orabug: 31975601]
  - Disable upload options for OracleLinux [Orabug: 31969352]
  - Added sos-oraclelinux-vendor-vendorurl.patch
  - Fix os detect string for Oracle Linux [Orabug: 28674897]
  - Add ksplice plugin [Orabug: 30273666] (Philippe Vanhaesendonck)
  - [ovn_central] call podman exec without a timeout
    Resolves: bz1767359


author: Anil Lal <anil.palakunnathu.kunnengeri@oracle.com> - 4.3-5.0.2
changelog:
  - Adding PluginOpt support for ksplice and btrfs  [Orabug: 34993258]
  - Adding virsh qemu-monitor info-tree command [Orabug: 34650374]


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.0-2.20200828git0c238a2
changelog:
  - Backport fixes from 0.4.0 stable branch. Resolves: rhbz#1868375
    (fixes usage of swtpm-localca with passwords when signing keys)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.2-1.20201201git2df14e3
changelog:
  - Update to 0.4.2, to address potential symlink vulnerabilities (CVE-2020-28407).
    Resolves: rhbz#1906043


author: build <ca_buildteam_grp@oracle.com> - 6.26.0-1.el7
changelog:
  - Update to v6.26.0 for Oracle build
  - Rebuild on golang-boringcrypto 1.22.11 to fix CVE-2024-24790 (Alex Burmashev)
    {CVE-2024-24790}


author: Filip Zaludek <filip.zaludek@oracle.com> - 2022.10-1.0.2
changelog:
  - Reverted RPi3 unfriendly '0006-Disable-timer-check-in-file-loading.patch'
  - Reverted RPi3 unfriendly '0008-Revert-Limit-poll-frequency-to-improve-performance.patch'


author: Filip Zaludek <filip.zaludek@oracle.com> - 2023.04-1.0.1
changelog:
  - Updated to latest stable DAS uboot repo. (2023.04)
  - Enabled CONFIG_SYS_USB_EVENT_POLL_VIA_CONTROL_EP=y [Orabug 31562826]


author: Filip Zaludek <filip.zaludek@oracle.com> - 2023.07-1.0.1
changelog:
  - Updated to stable DAS uboot repo. (2023.07)
  - Unused patches dropped:
    0004-Raspberry-Pi-UEFI-Runtime-regions-are-not-aligned-to.patch
          64k alignment patch is no more compatible with current u-boot,
          also note that from UEK7 default kernel page size for aarch64 is 4k
    0006-Disable-timer-check-in-file-loading.patch
          Experimantal patch for troubleshooting RPi3 keyboard glitches
    0008-Revert-Limit-poll-frequency-to-improve-performance.patch
          RPi3 keyboard glitches addressed by CONFIG_SYS_USB_EVENT_POLL_VIA_CONTROL_EP=y
    0009-usb-kbd-dwc2-Increase-wait-for-dwc2-controller-reset.patch
          RPi3 keyboard glitches addressed by CONFIG_SYS_USB_EVENT_POLL_VIA_CONTROL_EP=y
  - Increase usb_pgood_delay to 1000 to help RPi Zero 2 W to detect more keyboard vendors


author: Filip Zaludek <filip.zaludek@oracle.com> - 2024.04-1.0.1
changelog:
  - Updated to latest stable DAS uboot repo. (2024.04)
  - Removed 0001-Change-refs-from-bootaa64-to-grubaa64.patch
  - Removed 0020-Revert-mmc-bcm2835-host-let-firmware-manage-the-cloc.patch
  - Added 0015-uefi-Add-all-options-for-EFI-System-Partitions.patch


author: Filip Zaludek <filip.zaludek@oracle.com> - 2024.04-1.0.2
changelog:
  - Adjusted bootmeth EFI to boot from an grubaa64.efi file to mitigate [Orabug 36554488]
  - Disabled bootmgr support to mitigate [Orabug 36554488]
  - Enabled CONFIG_BOOTSTD_FULL


author: Filip Zaludek <filip.zaludek@oracle.com> - 2025.01-1.0.1
changelog:
  - Updated to latest stable DAS uboot repo. (2025.01)
  - Extra dependency 'BuildRequires: gcc' [Orabug 37508616]


author: Filip Zaludek <filip.zaludek@oracle.com> - 2025.01-1.0.3
changelog:
  - Circumvent standard UEFI boot mechanism by avoiding /EFI/BOOT/BOOTAA64.EFI [Orabug 36554488]
  - Removed 0002-rpi-Use-firmware-provided-device-tr.patch and 0003-Add-efidebug-command.patch


author: Filip Zaludek <filip.zaludek@oracle.com> - 2025.01-1.0.4
changelog:
  - Replace %patch with %autosetup, suggested by Lukas Lipinsky <lukas.lipinsky@oracle.com>
  - Patch0030: Build with OPENSSL_NO_ENGINE
  - Reintroduced 0020-Revert-mmc-bcm2835-host-let-firmware-manage-the-cloc.patch [Orabug 36073094]


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.5-1
changelog:
  - Create mock selinux and semanage module
  - Update testing section in README
  - Add travis file for Travis CI
  - Grammar fixes in the udica.8 manpage file
  - Support port ranges (Resolves: #16)
  - Test port ranges


author: Jindrich Novy <jnovy@redhat.com> - 0.2.5-2
changelog:
  - New rebase https://github.com/containers/udica/releases/tag/v0.2.5 (#1995041)
  - Replace capability dictionary with str.lower()
  - Enable udica to generate policies with fifo class
  - Sort container inspect data before processing
  - Update templates to work properly with new cil parser
  - Related: #1934415


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-11
changelog:
  - v2v: windows: Allow qxldod.inf as synonym for qxl.inf
    resolves: rhbz#1926102
  - v2v: Increase required free space in Windows to 100 MB
    resolves: rhbz#1949147
  - docs: Document how to remove "Out of HTTP sessions" limit
  - v2v: Disable readahead for VMware curl sources too
    resolves: rhbz#1848862
  - v2v: Allow output to block devices
    resolves: rhbz#1868690
  - docs: -o openstack: Clarify name of file containing OpenStack auth
    resolves: rhbz#1871754
  - docs: UEFI guest conversion to -o openstack is supported
    resolves: rhbz#1872100
  - v2v: Turn pnp_wait.exe warning into a debug message
    resolves: rhbz#1903960
  - v2v: windows: Fix schtasks /SD parameter
    resolves: rhbz#1895323


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-13
changelog:
  - docs: Fix version of virt-v2v which added UEFI for OpenStack
    related: rhbz#1872100
  - v2v: Increase Linux minimum root filesystem to 100 MB
    resolves: rhbz#1764569


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-17
changelog:
  - Correct regexps used to fix schtasks command
  - Fix backing file specified without backing format
    resolves: rhbz#2023279, rhbz#2025769


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-21
changelog:
  - Fix assertion failure when parsing OVA dir with trailing slash
    resolves: rhbz#2028823
  - For -o rhv-upload wait for VM creation task
    resolves: rhbz#1985827
  - If listing RPM applications fails, rebuild DB and retry (2089623)
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2102720


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.36.1-1
changelog:
  - Update to 2.36.1
    Related: #2061994
  - Resolves: #2075492
  - Resolves: #2075494
  - Resolves: #2075496


