# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-2
changelog:
  - Resolves: RHEL-5117 - ns-slapd crash in
    dbmdb_import_prepare_worker_entry()
  - Resolves: RHEL-31959 - [RFE] add plugin origin or source in security's
    log msg info
  - Resolves: RHEL-35241 - ns-slapd crashes in referral mode
  - Resolves: RHEL-61327 - Incomplete messages about replication in the
    errors log.
  - Resolves: RHEL-61353 - dbscan  on replication changelog does not display
    MOD_TYPE
  - Resolves: RHEL-62874 - dsidm: issue when renaming users
  - Resolves: RHEL-65660 - DSIDM: Re-enabling user accounts that reached
    inactivity limit fails with error
  - Resolves: RHEL-67003 - dsconf backend replication monitor fails if
    replica id starts with 0
  - Resolves: RHEL-67006 - dsconf  utility  should let you configure the
    "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug-
    in
  - Resolves: RHEL-67019 - Crash in __strlen_sse2 when using the nsRole
    filter rewriter.
  - Resolves: RHEL-67022 - Password modify extended operation should skip
    password policy checks when executed by root DN
  - Resolves: RHEL-70117 - Unify how group description can be added to a new
    group in WebUI and CLU
  - Resolves: RHEL-74085 - Increased memory consumption caused by NDN cache
  - Resolves: RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in
    Directory Server
  - Resolves: RHEL-76832 - Wrong backend database name syntax causes "Red Hat
    Directory Server" => "Databases" menu blank in Cockpit
  - Resolves: RHEL-76837 - dsidm Error: float() argument must be a string or
    a number, not 'NoneType'
  - Resolves: RHEL-76840 - Monitoring tab should use dsconf monitor
  - Resolves: RHEL-77490 - Complete remove the parameter "nsslapd-subtree-
    rename-switch" from DS-12
  - Resolves: RHEL-79080 - Json option does not work with "dsidm account get-
    by-dn" command
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-80253 - RHDS hangs when having online backup running
    together with automember_rebuild task executing
  - Resolves: RHEL-80497 - Can't rename users member of automember rule
    [rhel-10]
  - Resolves: RHEL-81277 - logconv.py fails when specific timestamps are
    provided
  - Resolves: RHEL-83850 - mdb database statistics don't work
  - Resolves: RHEL-86279 - Cannot create a nested role using "dsidm role
    create-nested"
  - Resolves: RHEL-86280 - Cannot create a filtered role using "dsidm role
    create-filtered"
  - Resolves: RHEL-86313 - RootDN Access Control Plugin with wildcards for IP
    addresses fails with an error "Invalid IP address"
  - Resolves: RHEL-86314 - dsidm failing with error "argument must be a
    string or a number"
  - Resolves: RHEL-86315 - Dsidm get_dn option fails for organizational unit,
    service and posixgroup
  - Resolves: RHEL-86316 - Dsidm uniquegroup members option does not work
  - Resolves: RHEL-86321 - dsidm role rename-by-dn does not rename a role
  - Resolves: RHEL-86322 - dsidm role subtree-status doesn't work
  - Resolves: RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j
    option
  - Resolves: RHEL-86324 - Deleting a role with dsidm results in proper
    deletion message, but role is still present
  - Resolves: RHEL-86785 - dscontainer: support loading custom schema
  - Resolves: RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp
    00007fed321fe100 error 6 in liblmdb.so.0.0.0
  - Resolves: RHEL-89748 - Nested group does not receive memberOf attribute
  - Resolves: RHEL-89774 - Improve the "result" field of ipa-healthcheck if
    replicas are busy [rhel-10]
  - Resolves: RHEL-89776 - RHDS12.2 NSMMReplicationPlugin - release_replica
    Unable to parse the response
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]
  - Resolves: RHEL-95761 - Improve  error message when bulk import connection
    is closed
  - Resolves: RHEL-97565 - On RHDS 12.6 The user password policy for a user
    was created, but the pwdpolicysubentry attribute for this user
    incorrectly points to the People OU password policy instead of the
    specific user policy.
  - Resolves: RHEL-101926 - ipa-backup failed with error : 'No such file or
    directory: '/usr/sbin/dsctl'


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-3
changelog:
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-4
changelog:
  - Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
  - Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
    cache is disabled.
  - Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
  - Resolves: RHEL-92054 - Memory leak in
    roles_cache_create_object_from_entry [rhel-10]
  - Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
    causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
  - Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
    world readable permission
  - Resolves: RHEL-107035 - CWE-532 Created user password hash available to
    see in audit log
  - Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
    changed by administrator


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-5
changelog:
  - Resolves: RHEL-101727 - The numSubordinates value is not matching the
    number of direct children.
  - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
  - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
    attributes using custom matching rules
  - Resolves: RHEL-111224 - Error showing local password policy on web UI
  - Resolves: RHEL-112675 - Statistics about index lookup report a wrong
    duration
  - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
  - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
  - Resolves: RHEL-113969 - AddressSanitizer: memory leak in
    memberof_add_memberof_attr


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
    tune should adapt its tuning
  - Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
    allow large groups to stay in the cache
  - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
    across different tools
  - Resolves: RHEL-83274 - Replication online reinitialization of a large
    database gets stalled.
  - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
    IDL scan limit at INT_MAX
  - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
  - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results
  - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
    requests for accounts that do not meet the criteria specified in the
    `pamFilter` option.
  - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
    messages after migrating to LMDB.
  - Resolves: RHEL-96196 - Duplicate/double local password policy entry
    display from redhat directory server webconsole
  - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
    conflicts at once instead of deleting each conflict one after the other
  - Resolves: RHEL-105578 - IPA health check up script shows time skew is
    over 24 hours
  - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
    LMDB is used.
  - Resolves: RHEL-106559 - When deferred memberof update is enabled after
    the server crashed it should not launch memberof fixup task by default
  - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
    be added.
  - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
    not exist
  - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
    groups
  - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
    operation
  - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
  - Resolves: RHEL-115179 - Several password related attributes are not
    replicating from the Replicas to the Masters
  - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
    corruption
  - Resolves: RHEL-116060 - Fix paged result search locking
  - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
  - Resolves: RHEL-117140 - Changelog trimming - add number of scanned
    entries to the log
  - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
  - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
    whole subnets
  - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes.
  - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
    replication as a consumer
  - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
    in the access logs
  - Resolves: RHEL-123275 - The new ipahealthcheck test
    ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
  - Resolves: RHEL-123663 - Online initialization of consumers fails with
    error -23
  - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
    space char in DN name correctly
  - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
  - Resolves: RHEL-124694 - Access logs are not getting deleted as
    configured.
  - Resolves: RHEL-126535 - memory corruption in alias entry plugin
  - Resolves: RHEL-128906 - Scalability issue of replication online
    initialization with large database
  - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
    replicating after importing data from ldif files
  - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
    sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
    389-ds-base-2.6.1-11
  - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
    base-2.6.1-12
  - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-2
changelog:
  - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-3
changelog:
  - Bump version to 3.2.0-3
  - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
    ou=foo,ou=people,dc=example,dc=com.
  - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
    without restarting slapd
  - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
  - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
    indexes instead of selected ones
  - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
  - Resolves: RHEL-121981 - Setting password history count to 0 does not
    flush history
  - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes.
  - Resolves: RHEL-128906 - Scalability issue of replication online
    initialization with large database
  - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication
  - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
    plugin


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-4
changelog:
  - Bump version to 3.2.0-4
  - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
    Changelog trimming.
  - Resolves: RHEL-133085 - Replica installation is failing with message
    MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
  - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
    Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
  - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
    atomic_compare_exchange()


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-6
changelog:
  - Bump version to 3.2.0-6
  - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
    Changelog trimming.


author: Al Stone <ahs3@fedoraproject.org> - 20240322-1
changelog:
  - Update source tree to 20240322 version from upstream.  NB: this update
    is done in conjunction with removing s390x support due to the large
    number of patches that are now rendered obsolete.  Closes BZ#2138250.
  - Note, too, that the upstream version of the tarball is missing two
    commits and has the wrong name; discussed this with upstream and
    included a patch with the two commits to correct this, and renamed
    the tarballs to try to maintain consistency. So, upstream is actually
    named version 20240321, but it should be 20240322 according to their
    own git tree (see tag G20240322 on github).
  - Removed executable bit from all the upstream source files
  - Remove big-endian support, aka s390x.  Closes BZ#2298855.
  - Remove several 32-bit only patches that are also obsolete since they
    are for unsupported architectures (thanks to pbonzini and PR#5).
  - Remove PIE patches since that is currently the default (again, thanks
    to pbonzini and PR#5)
  - Resolves: RHEL-66144


author: Neal Gompa <ngompa@fedoraproject.org> - 1.0.2-1
changelog:
  - Update to 1.0.2
  - Clean up some pre-1.0 scriptlet cruft
  - Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)


author: Alessandro Astone <ales.astone@gmail.com> - 1.0.2-2
changelog:
  - Backport patch to fix installing swcatalog
  - Resolves: RHEL-31497 (Backport latest build from Fedora 40)


author: Andreas Schneider <asn@redhat.com> - 1.1.7-1
changelog:
  - Update to version 1.1.7
    * Update ignore list for source tarball generation
    * Added new assert macros to compare 2 double given an epsilon
    * Added meson build system
    * Added header with version to TAP13 output
    * Fixed issues with MSVC
    * Fixed TAP output for skipped tests
    * Fixed issue with fail_msg
    * CMake generated configs for find_package(cmocka)
    * Documentation improvements


author: Jan Friesse <jfriesse@redhat.com> - 3.1.9-2
changelog:
  - Resolves: RHEL-96073

  - exec: Add support for env STATE_DIRECTORY
  - init: Use LogsDirectory in systemd unit file


author: Ales Nezbeda <anezbeda@redhat.com> - 0.8.8-49
changelog:
  - Fix SPDX license tag based on further research
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/396#note_1976038980
  - Related: RHEL-37885


author: Than Ngo <than@redhat.com> - 2:1.12.0-3
changelog:
  - Fix Non-reproducible file names in doxygen output
  - Fix broken markdown links to anchors
  Related: RHEL-58045


author: Milan Crha <mcrha@redhat.com> - 3.52.0-1
changelog:
  - Resolves: RHEL-30204 (Backport Fedora 40 changes)
  - Update to 3.52.0
  - Add patch to allow reconfiguring the dbus-prefix without rebuilding;
    this is needed to make EDS work with the new Flatpak infrastructure.
  - Remove support _eds_dbus_services_prefix - this was only used by
    F38 and earlier Flatpak builds.


author: Parag Nemade <pnemade AT redhat DOT com> - 20230101-14
changelog:
  - Resolves: RHEL-138159
    CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138144
    CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138126
    CVE-2025-15269 SFD File Parsing Use-After-Free


author: Antonio Torres <antorres@redhat.com> - 3.2.8-2
changelog:
  - Disable JIT if PCRE can't allocate executable memory
  - Fix warnings from service file
    Resolves: RHEL-116594


author: Marek Kasik <mkasik@redhat.com> - 2:3.10.3-3
changelog:
  - Initialize function pointers after resource allocation
  - Fixes CVE-2025-4478
  - Resolves: RHEL-91583


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-8
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
    Resolves: RHEL-142334, RHEL-142318


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 2.7.0-3
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Neal Gompa <ngompa@centosproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
    + Backport fixes from upstream to use BeaconDB
    + Use BeaconDB for the default location services source
    Resolves: RHEL-79063


author: Arjun Shankar <arjun@redhat.com> - 2.39-111
changelog:
  - Sync with upstream branch release/2.39/master (RHEL-126766)	
  - Upstream commit: ce65d944e38a20cb70af2a48a4b8aa5d8fabe1cc	
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814)	
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)	
  - memalign: reinstate alignment overflow check (CVE-2026-0861)	
  - support: Exit on consistency check failure in resolv_response_add_name	
  - support: Fix FILE * leak in check_for_unshare_hints in test-container	
  - sprof: fix -Wformat warnings on 32-bit hosts	
  - sprof: check pread size and offset for overflow	
  - getaddrinfo.c: Avoid uninitialized pointer access [BZ #32465]	
  - nptl: Optimize trylock for high cache contention workloads (BZ #33704)	
  - ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091)	
  - ppc64le: Restore optimized strncmp for power10	
  - ppc64le: Restore optimized strcmp for power10	
  - AArch64: Optimise SVE scalar callbacks	
  - aarch64: fix includes in SME tests	
  - aarch64: fix cfi directives around __libc_arm_za_disable	
  - aarch64: tests for SME	
  - aarch64: clear ZA state of SME before clone and clone3 syscalls	
  - aarch64: define macro for calling __libc_arm_za_disable	
  - aarch64: update tests for SME	
  - aarch64: Disable ZA state of SME in setjmp and sigsetjmp	
  - linux: Also check pkey_get for ENOSYS on tst-pkey (BZ 31996)	
  - aarch64: Do not link conform tests with -Wl,-z,force-bti (bug 33601)	
  - x86: fix wmemset ifunc stray '!' (bug 33542)	
  - x86: Detect Intel Nova Lake Processor	
  - x86: Detect Intel Wildcat Lake Processor


author: Takao Fujiwara <tfujiwar@redhat.com> - 2018.1-17
changelog:
  - Resolve RHELPLAN-170235 Fix OpenScanHub report
  - Fix deprecated g_spawn_check_exit_status with -Wdeprecated-declarations
  - Fix uninitialized n_failed with -Wanalyzer-use-of-uninitialized-value
  - Fix to check return value of g_setenv() with CWE-252


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-11
changelog:
  - Disable ibus-panel rich condition in RHEL
  - Delete ibus-xx-desktop-testing-mutter.patch
  - Delete libXtst-devel dependency
  - Replace gnome-terminal with ptyxis
  - Install gnome-desktop-testing for RHEL
  - Delete xorg-x11-server-Xvfb gnome-session-xsession
  - Delete build packages for gnome-desktop-testing for RHEL
  - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
  - Fix CI test case conditions
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31-1
changelog:
  - Bump to 1.5.31
  - Delete RHEL specific packages
  - Update installed packages in CI
  - configure option for Flatpak build
  - Move xinit post scripts
  - Require gnome-shell-extension-no-overview in RHEL


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101803


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102295


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118771
  - Resolves: RHEL-119468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118771
  - Related: RHEL-119468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-1
changelog:
  - Update to jdk-21.0.10+7 (GA)
  - Update release notes to 21.0.10+7
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-142857
  - Resolves: RHEL-139565
  - Resolves: RHEL-131428
  - Resolves: RHEL-131441
  - Resolves: RHEL-142861
  - Resolves: RHEL-142815
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-142857
  - Related: RHEL-139565
  - Related: RHEL-131428
  - Related: RHEL-131441
  - Related: RHEL-142861
  - Related: RHEL-142815


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.11.0.10-1
changelog:
  - Update to jdk-21.0.11+10 (GA)
  - Update release notes to 21.0.11+10
  - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
  - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158
  - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078
  - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047
  - Bump zlib version to 1.3.2 following JDK-8378631
  - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
  - Resolves: RHEL-169611
  - Resolves: RHEL-133215
  - Resolves: RHEL-146648
  - Resolves: RHEL-148326
  - Resolves: RHEL-148828
  - Resolves: RHEL-157090
  - Resolves: RHEL-161216
  - Resolves: RHEL-161332
  - Resolves: RHEL-169614


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-5
changelog:
  - Incorporate new FIPS patch for 25u
  - Drop static libjvm.a following adjusted build target for portable build
  - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image
  - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
  - Patch the nssadapter build to recognise LDFLAGS
  - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly
  - Resolves: RHEL-133733
  - Resolves: RHEL-133735
  - Resolves: RHEL-133763


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-6
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-133733
  - Related: RHEL-133735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-1
changelog:
  - Update to jdk-25.0.2+10 (GA)
  - Update release notes to 25.0.2+10
  - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
  - Test for java.security's existence in create-redhat-properties-files.bash
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-139579
  - Resolves: RHEL-131430
  - Resolves: RHEL-131443
  - Resolves: RHEL-142855
  - Resolves: RHEL-142799


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-139579
  - Related: RHEL-131430
  - Related: RHEL-131443
  - Related: RHEL-142855
  - Related: RHEL-142799


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-3
changelog:
  - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
  - Fix FIPS issue list to represent the new 25u version
  - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
  - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
  - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
  - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526
  - Bump harfbuzz version to 12.3.2 following JDK-8375057
  - Bump nssadapter version to bring in shared PKCS11 session fix
  - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
  - Resolves: RHEL-155000
  - Resolves: RHEL-146649
  - Resolves: RHEL-148327
  - Resolves: RHEL-148830
  - Resolves: RHEL-155044


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.2.0.10-3
changelog:
  - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
  - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
  - Resolves: RHEL-150976


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.26-1
changelog:
  - New upstream release
  - Improve TX performance and use less CPU
  - minor other improvements
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.27-1
changelog:
  - New upstream release
  - Fix potential startup race condition (corosync use case)
  - Fix crypto config check
  - Minor API cleanup
  - Test suite fixes


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Enable abidb
  - Add BuildRequires: python3-devel
  - Add libabigail.so.4 and libabigail.so.4.0.0 to the RPM


author: Dodji Seketeli <dodji@redhat.com> - 2.6-1
changelog:
  - Update to upstream 2.6 tarball
  - Update to changing SONAME (libabigail.so.5.0.0)
  - Add BuildRequires xxhash-devel


author: Dodji Seketeli <dodji@redhat.com> - 2.8-1
changelog:
  - Update to upstream 2.8 tarball
  - Remove 0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch
    that is applied upstream.
  - Update to changing SONAME (libabigail.so.7.0.0)
  - Add xxhash-devel as BuildRequires and inlined-xxhash to avoid
    depending on it at runtime


author: RHEL Packaging Agent <jotnar@redhat.com> - 2.9-1
changelog:
  - Rebase to upstream 2.9 tarball
  - Update to changing SONAME (libabigail.so.8.0.0)
  - Simplify %check section to run both test targets in single invocation
  - Resolves: RHEL-121667


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-210.el10]
changelog:
  - gpio: tegra186: Fix GPIO name collisions for Tegra410 (Jennifer Berringer) [RHEL-135122]
  - gpio: tegra186: Add support for Tegra410 (Jennifer Berringer) [RHEL-135122]
  - gpio: tegra186: Use generic macro for port definitions (Jennifer Berringer) [RHEL-135122]
  - gpio: tegra186: Add support for Tegra256 (Jennifer Berringer) [RHEL-135122]
  - dt-bindings: gpio: Add Tegra256 support (Jennifer Berringer) [RHEL-135122]
  - gpio: tegra186: fix resource handling in ACPI probe path (Jennifer Berringer) [RHEL-135122]
  - perf/arm_cspmu: nvidia: Add pmevfiltr2 support (Charles Mirabile) [RHEL-121677]
  - perf/arm_cspmu: nvidia: Add revision id matching (Charles Mirabile) [RHEL-121677]
  - perf/arm_cspmu: Add pmpidr support (Charles Mirabile) [RHEL-121677]
  - perf/arm_cspmu: Add callback to reset filter config (Charles Mirabile) [RHEL-121677]
  - tools headers arm64: Add NVIDIA Olympus part (Charles Mirabile) [RHEL-138474]
  - perf arm-spe: Add NVIDIA Olympus to neoverse list (Charles Mirabile) [RHEL-138474]
  - bpf: Fix bpf_xdp_store_bytes proto for read-only arg (Felix Maurer) [RHEL-133468]
  - bpf: Fix invalid prog->stats access when update_effective_progs fails (Felix Maurer) [RHEL-133468]
  - bpf/arm64: Fix BPF_ST into arena memory (Felix Maurer) [RHEL-133468]
  - xsk: Harden userspace-supplied xdp_desc validation (Felix Maurer) [RHEL-133468]
  - bpf, cpumap: Disable page_pool direct xdp_return need larger scope (Felix Maurer) [RHEL-133468]
  - bpf, sockmap: Fix panic when calling skb_linearize (Felix Maurer) [RHEL-133468]
  - bpf, sockmap: fix duplicated data transmission (Felix Maurer) [RHEL-133468]
  - xsk: Fix race condition in AF_XDP generic RX path (Felix Maurer) [RHEL-133468]
  - macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144130] {CVE-2026-23001}
  - soc/tegra: fuse: Do not register SoC device on ACPI boot (Jennifer Berringer) [RHEL-135124]
  - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-136089]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.el10]
changelog:
  - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-150361]
  - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-150361]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.1.1.el10_2]
changelog:
  - vsock: document write-once behavior of the child_ns_mode sysctl (Stefano Garzarella) [RHEL-151754]
  - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-151754]
  - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-151754]
  - vsock: document namespace mode sysctls (Stefano Garzarella) [RHEL-151754]
  - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148483]
  - ice: dpll: fix rclk pin state get and misplaced header macros (Ivan Vecera) [RHEL-146369]
  - ice: dpll: Support E825-C SyncE and dynamic pin discovery (Ivan Vecera) [RHEL-146369]
  - drivers: Add support for DPLL reference count tracking (Ivan Vecera) [RHEL-146369]
  - redhat: configs: Enable CONFIG_DPLL_REFCNT_TRACKER for debug (Ivan Vecera) [RHEL-146369]
  - dpll: Add reference count tracking support (Ivan Vecera) [RHEL-146369]
  - dpll: Enhance and consolidate reference counting logic (Ivan Vecera) [RHEL-146369]
  - dpll: zl3073x: Add support for mux pin type (Ivan Vecera) [RHEL-146369]
  - dpll: Support dynamic pin index allocation (Ivan Vecera) [RHEL-146369]
  - dpll: Add notifier chain for dpll events (Ivan Vecera) [RHEL-146369]
  - dpll: zl3073x: Associate pin with fwnode handle (Ivan Vecera) [RHEL-146369]
  - dpll: Allow associating dpll pin with a firmware node (Ivan Vecera) [RHEL-146369]
  - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-146257]
  - redhat: set defaults for RHEL 10.2 (Scott Weaver)


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.2.1.el10_2]
changelog:
  - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618]
  - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618]
  - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618]
  - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618]
  - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618]
  - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618]
  - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618]
  - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618]
  - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618]
  - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.3.1.el10_2]
changelog:
  - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
  - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908]
  - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367]
  - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800]
  - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714]
  - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714]
  - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521]
  - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521]
  - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.4.1.el10_2]
changelog:
  - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
  - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
  - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
  - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
  - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
  - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
  - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
  - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
  - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
  - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.5.1.el10_2]
changelog:
  - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
  - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
  - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
  - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
  - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
  - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
  - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
  - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
  - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
  - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
  - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
  - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
  - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
  - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
  - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
  - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
  - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
  - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
  - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
  - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
  - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
  - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
  - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
  - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
  - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
  - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
  - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
  - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
  - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
  - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
  - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
  - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
  - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
  - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
  - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
  - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
  - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
  - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
  - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
  - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
  - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
  - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
  - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
  - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.6.1.el10_2]
changelog:
  - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
  - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
  - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
  - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
  - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
  - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
  - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.7.1.el10_2]
changelog:
  - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
  - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
  - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
  - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
  - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
  - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
  - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
  - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
  - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
  - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
  - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
  - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
  - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
  - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
  - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
  - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Dominik Mierzejewski <rpm@greysector.net> - 2.16.01-1
changelog:
  - update to 2.16.01 (#2155636)
  - drop obsolete patch
  - drop rdoff subpackage (discontinued upstream)


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.2-1
changelog:
  - Rebase to nbdkit 1.46.2
  - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp
    from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.1-1
changelog:
  - Rebase to libnbd 1.24.1
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-74
changelog:
  - Use %{buildroot} instead of $RPM_BUILD_ROOT as it is more recent
  - Use directory macros and push/popd


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-75
changelog:
  - Fix installation on OSTree by removing %ghost (rhbz#2193429)
  - Remove %ldconfig_postun as it has no effect in Fedora


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-77
changelog:
  - Sync the RHEL version and Fedora version of the specfile
  - Update sources file and config.{sub|guess}
  - Skip verification for .soc file as it will change after install


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.227-1
changelog:
  - Update to 1.227
    - New maintainer, GTERMARS
    - Add basic GitHub Actions setup for testing
    - Typo corrections in POD
    - Eliminated use of state/node files in temp directory


author: Paul Howarth <paul@city-fan.org> - 1.18-1
changelog:
  - Update to 1.18 (rhbz#2251844)
    - Address Freebsd build issue: make function checks more robust within
      shared lib (GH#35)


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20 (rhbz#2256127)
    - Remove --no-undefined from compiler test, which is not compatible with all
      platforms (GH#37)
    - Skip t/pty_get_winsize.t tests on AIX (GH#32)
    - Fix patchlevel check for util.h (GH#27)


author: Paul Howarth <paul@city-fan.org> - 0.03-48
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Specify all dependencies
    - Fix permissions verbosely
    - Simplify find commands using -empty and -delete
    - Make %files list more explicit


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Andreas Schneider <asn@redhat.com> - 1.4.0-1
changelog:
  - Update to version 1.4.0
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.4.0/CHANGELOG


author: Jitka Plesnikova <jplesnik@redhat.com> - 4.2.1-1
changelog:
  - Resolves: RHEL-32325
  - 4.2.1 bump
  - Fix gcc's -Wformat-security warning in R Raise function
  - OCaml 5.2.0 ppc64le fix
  - Add support for Python 3.13


author: Andreas Schneider <asn@redhat.com> - 1.3.0-1
changelog:
  - Update to version 1.3.0
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.3.0/CHANGELOG


