# changelog

author: Mateus Rodrigues Costa <mateusrodcosta@gmail.com> - 1.0.1-1
changelog:
  - Update to 1.0.1
  - Switch to new upstream meson build system
  - Start using manual RPM changelogs and add previous missing changelogs


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.35-2
changelog:
  - Backport support for OpenSSL provider required for PKCS11 labels
  - Deactivate jemalloc default linking


author: Hector Martin <marcan@marcan.st> - 2:19.2.3-7
changelog:
  - Work around mgr `restful` module PyO3 failures
  - Fix NOTIFY_TYPES exceptions during module import (rhbz#2361850)


author: Than Ngo <than@redhat.com> - 140.0.7339.80-1
changelog:
  - Update to 140.0.7339.80
    * CVE-2025-9864: Use after free in V8
    * CVE-2025-9865: Inappropriate implementation in Toolbar
    * CVE-2025-9866: Inappropriate implementation in Extensions
      CVE-2025-9867: Inappropriate implementation in Downloads


author: Than Ngo <than@redhat.com> - 140.0.7339.127-1
changelog:
  - Update to 140.0.7339.127
    * CVE-2025-10200: Use after free in Serviceworker
    * CVE-2025-10201: Inappropriate implementation in Mojo


author: Than Ngo <than@redhat.com> - 140.0.7339.185-1
changelog:
  - Update to 140.0.7339.185
    * CVE-2025-10585: Type Confusion in V8
    * CVE-2025-10500: Use after free in Dawn
    * CVE-2025-10501: Use after free in WebRTC
    * CVE-2025-10502: Heap buffer overflow in ANGLE


author: Than Ngo <than@redhat.com> - 140.0.7339.207-1
changelog:
  - Update to 140.0.7339.207
    * CVE-2025-10890: Side-channel information leakage in V8
    * CVE-2025-10891: Integer overflow in V8
    * CVE-2025-10892: Integer overflow in V8


author: Than Ngo <than@redhat.com> - 141.0.7390.54-1
changelog:
  - Update to 141.0.7390.54
    * High CVE-2025-11205: Heap buffer overflow in WebGPU
    * High CVE-2025-11206: Heap buffer overflow in Video
    * Medium CVE-2025-11207: Side-channel information leakage in Storage
    * Medium CVE-2025-11208: Inappropriate implementation in Media
    * Medium CVE-2025-11209: Inappropriate implementation in Omnibox
    * Medium CVE-2025-11210: Side-channel information leakage in Tab
    * Medium CVE-2025-11211: Out of bounds read in Media
    * Medium CVE-2025-11212: Inappropriate implementation in Media
    * Medium CVE-2025-11213: Inappropriate implementation in Omnibox
    * Medium CVE-2025-11215: Off by one error in V8
    * Low CVE-2025-11216: Inappropriate implementation in Storage
    * Low CVE-2025-11219: Use after free in V8


author: Than Ngo <than@redhat.com> - 141.0.7390.65-1
changelog:
  - Update to 141.0.7390.65
    * High CVE-2025-11458: Heap buffer overflow in Sync
    * High CVE-2025-11460: Use after free in Storage
    * Medium CVE-2025-11211: Out of bounds read in WebCodecs


author: Jakub Jelinek <jakub@redhat.com> 15.0.1-0.13
changelog:
  - update from trunk and releases/gcc-14 branch
    - PRs ada/119643, c/88382, c/119717, c++/99214, c++/101180, c++/106618,
  	c++/111075, c++/112288, c++/113360, c++/113835, c++/114772,
  	c++/114970, c++/115639, c++/116416, c++/116954, c++/119175,
  	c++/119345, c++/119687, c++/119692, c++/119755, c++/119807,
  	cobol/119217, cobol/119302, cobol/119694, cobol/119759, cobol/119776,
  	cobol/119777, d/109023, d/119758, d/119761, d/119799, d/119817,
  	d/119826, driver/90465, driver/119727, fortran/106948, fortran/119669,
  	ipa/113203, ipa/119318, ipa/119803, libfortran/119502, libgcc/101075,
  	libgcc/119796, libgomp/119849, libstdc++/21334, libstdc++/119725,
  	libstdc++/119748, libstdc++/119840, lto/119792, middle-end/14708,
  	middle-end/105548, middle-end/119706, middle-end/119808,
  	modula2/119735, modula2/119779, rtl-optimization/118502,
  	rtl-optimization/119785, rust/119341, rust/119342, sanitizer/119801,
  	target/42683, target/97106, target/97585, target/106445,
  	target/108134, target/113633, target/116827, target/118794,
  	target/119298, target/119386, target/119533, target/119547,
  	target/119673, target/119784, target/119834, testsuite/117706,
  	translation/119684, tree-optimization/71094, tree-optimization/87909,
  	tree-optimization/112822, tree-optimization/116093,
  	tree-optimization/118476, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119718,
  	tree-optimization/119722, tree-optimization/119757,
  	tree-optimization/119778


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
  	c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
  	c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
  	fortran/102900, fortran/119928, fortran/119986, fortran/120049,
  	fortran/120107, fortran/120139, fortran/120163, fortran/120179,
  	fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
  	libfortran/120152, libfortran/120153, libfortran/120158,
  	libfortran/120196, libstdc++/118260, libstdc++/119427,
  	libstdc++/119714, libstdc++/120029, libstdc++/120114,
  	libstdc++/120159, libstdc++/120187, libstdc++/120190,
  	libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
  	modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
  	preprocessor/120061, target/119610, testsuite/119909,
  	tree-optimization/111873, tree-optimization/119712,
  	tree-optimization/120043, tree-optimization/120048,
  	tree-optimization/120074, tree-optimization/120089,
  	tree-optimization/120143, tree-optimization/120211


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-3
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/120665, ada/120705, ada/120854, c/120180, c++/116064, c++/120123,
  	c++/120363, c++/120413, c++/120414, c++/120471, c++/120502,
  	c++/120555, c++/120575, c++/120684, c++/120940, fortran/51961,
  	fortran/85750, fortran/99838, fortran/101735, fortran/102599,
  	fortran/114022, fortran/119856, fortran/119948, fortran/120193,
  	fortran/120355, fortran/120483, fortran/120711, fortran/120784,
  	ipa/120295, libfortran/119856, libstdc++/99832, libstdc++/120367,
  	libstdc++/120432, libstdc++/120465, libstdc++/120548,
  	libstdc++/120625, libstdc++/120648, libstdc++/120650,
  	libstdc++/120931, libstdc++/120934, middle-end/118694,
  	middle-end/120369, middle-end/120547, middle-end/120608,
  	middle-end/120631, rtl-optimization/116389, rtl-optimization/120050,
  	rtl-optimization/120182, rtl-optimization/120347,
  	rtl-optimization/120423, rtl-optimization/120550,
  	rtl-optimization/120795, target/86772, target/119971, target/120042,
  	target/120441, target/120442, target/120480, target/120624,
  	testsuite/52641, testsuite/120082, testsuite/120919,
  	tree-optimization/116352, tree-optimization/119960,
  	tree-optimization/120003, tree-optimization/120341,
  	tree-optimization/120357, tree-optimization/120638,
  	tree-optimization/120654, tree-optimization/120677,
  	tree-optimization/120729, tree-optimization/120927
  - fix up FE lowering of pointer arith (PR c/120837)
  - perform %check with -foffload=disable flag


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-4
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/121056, c++/87097, c++/120569, c++/120628, c++/120954,
  	fortran/104428, fortran/120637, fortran/120843, fortran/120847,
  	fortran/121060, ipa/121023, libstdc++/118681, libstdc++/119754,
  	libstdc++/120997, middle-end/120709, modula2/117203, modula2/119650,
  	modula2/120253, modula2/120389, modula2/120474, modula2/120497,
  	modula2/120542, modula2/120606, modula2/120673, modula2/120731,
  	modula2/120912, rtl-optimization/120242, rtl-optimization/120627,
  	rtl-optimization/120736, rtl-optimization/120813, target/118241,
  	target/120356, target/120807, target/120908, target/120995,
  	target/120999, tree-optimization/118669, tree-optimization/120358,
  	tree-optimization/120780, tree-optimization/120817,
  	tree-optimization/120924, tree-optimization/120944,
  	tree-optimization/121035, tree-optimization/121049,
  	tree-optimization/121059, tree-optimization/121131


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-5
changelog:
  - update from releases/gcc-15 branch
    - PRs cobol/119818, middle-end/120935, modula2/121164, testsuite/119508


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.2 release
    - PRs ada/120440, ada/121184, c/119950, c/120055, c/120353, c/120354,
  	c++/95615, c++/108080, c++/109283, c++/115605, c++/115908, c++/116775,
  	c++/118074, c++/118903, c++/119916, c++/120224, c++/120243,
  	c++/120273, c++/120412, c++/120453, c++/120495, c++/120577,
  	c++/120756, c++/120800, c++/120845, c++/121055, c++/121133,
  	c++/121219, c++/121238, cobol/119231, cobol/119323, cobol/119335,
  	cobol/119337, cobol/119377, cobol/119524, cobol/119632, cobol/119695,
  	cobol/119770, cobol/119771, cobol/119772, cobol/119790, cobol/119810,
  	cobol/119885, cobol/119975, cobol/120251, cobol/120328, cobol/120402,
  	cobol/120621, cobol/120765, cobol/120772, cobol/120779, cobol/120790,
  	cobol/120791, cobol/120794, fortran/119106, fortran/121145,
  	fortran/121203, ipa/114790, libstdc++/119962, libstdc++/121373,
  	lto/120308, middle-end/119835, middle-end/121095, middle-end/121159,
  	middle-end/121322, middle-end/121389, rtl-optimization/121340,
  	target/118891, target/119692, target/119737, target/119853,
  	target/119854, target/120119, target/120351, target/120427,
  	target/120530, target/120645, target/120714, target/121027,
  	target/121028, target/121064, target/121121, target/121274,
  	target/121277, testsuite/121286, testsuite/121288,
  	tree-optimization/117423, tree-optimization/118891,
  	tree-optimization/119085, tree-optimization/121127,
  	tree-optimization/121130, tree-optimization/121190,
  	tree-optimization/121202, tree-optimization/121256,
  	tree-optimization/121264, tree-optimization/121320,
  	tree-optimization/121323, tree-optimization/121413


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/121968, bootstrap/118009, bootstrap/119089, c++/97740, c++/119859,
  	c++/120499, c++/120620, c++/121351, c++/121396, c++/121524,
  	c++/121724, c++/121795, c++/121801, c++/121977, c++/122015,
  	c++/122019, fortran/89092, fortran/121263, libfortran/121234,
  	libgcc/117600, libstdc++/110853, libstdc++/117276, libstdc++/119861,
  	libstdc++/120390, libstdc++/120698, libstdc++/121097,
  	libstdc++/121313, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, middle-end/121453,
  	middle-end/121828, middle-end/121831, rtl-optimization/87600,
  	rtl-optimization/120718, rtl-optimization/120983,
  	rtl-optimization/121253, rtl-optimization/121757, target/49857,
  	target/81540, target/116445, target/118280, target/118885,
  	target/119830, target/120476, target/120691, target/120986,
  	target/121007, target/121118, target/121208, target/121294,
  	target/121414, target/121449, target/121464, target/121510,
  	target/121534, target/121542, target/121548, target/121602,
  	target/121608, target/121634, target/121749, target/121794,
  	target/121906, testsuite/118567, tree-optimization/107997,
  	tree-optimization/121370, tree-optimization/121527,
  	tree-optimization/121659, tree-optimization/121844,
  	tree-optimization/121870, tree-optimization/122016


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-3
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/107536, ada/113536, ada/117517, ada/118343, c/122188, c++/120757,
  	c++/121981, c++/122302, fortran/108581, fortran/121616,
  	fortran/121939, go/104290, libstdc++/122062, libstdc++/122322,
  	middle-end/121922, middle-end/122133, target/110812, target/121599,
  	target/121652, target/121742, target/121780, target/121781,
  	target/121845, target/121875, target/122119, target/122177,
  	target/122187, target/122210, target/122220, target/122222,
  	target/122223, tree-optimization/121772, tree-optimization/122104,
  	tree-optimization/122213
  - package libgcobol.spec (#2401679)


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.5-5
changelog:
  - arm64: Fix a segfault issue due to the incorrect irq_stack_size on ARM64
  - s390x: Fix "bt -f/-F" command fail with seek error
  - arm64: Introduction of support for 16K page with 2-level table support
  - Fix a "Bus error" issue caused by 'crash --osrelease' or crash loading


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.6-2
changelog:
  - Fix infinite loop during module symbols initialization
  - Fix for "help -r" segfault in case of ramdump
  - arm64: add cpu context registers to better support gdb stack unwind
  - x86_64: Mark #VC stack unavailable when CONFIG_AMD_MEM_ENCRYPT is not set
  - Fix incorrect 'bt -v' output suggesting overflow


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.6-4
changelog:
  - Doc: add compilation requirements note in README
  - Fix "net -a" option on Linux 6.13 and later kernels
  - kmem: fix the determination of slab page due to invalid page_type
  - Enhance "kmem -i[=shared]" to display(or not) shared pages
  - Fix misleading CPU count in display_sys_stats()
  - arm64: add pac mask to better support gdb stack unwind
  - x86_64: Fix 'bt -S/-I' segfault issue
  - Fix build failure in readline lib
  - tools.c: do not use keywords 'nullptr' as a variable in code
  - Fix build failure on 32bit machine(i686)


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-2
changelog:
  - vmware_guestdump: Version 7 support
  - Fix incorrect task state during exit
  - Add multi-threads support in crash target
  - Call cmd_bt silently after "set pid"
  - x86_64: Add gdb multi-stack unwind support
  - arm64: Add gdb multi-stack unwind support
  - ppc64: Add gdb multi-stack unwind support
  - Fix the issue of "page excluded" messages flooding
  - Fix "kmem -p" option on Linux 6.16-rc1 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-4
changelog:
  - x86_64: filter unwanted warning message for "bt -T" cmd
  - doc: Update requirements for building on Fedora
  - gdb: Fix a regression for eppic extension on gdb-16.2
  - Fix crash initialization failure on LoongArch with recent GDB versions
  - gdb: Disable DT_DEBUG lookup by GDB inside the vmcore


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-5
changelog:
  - Add blk_mq shared tags support for dev -d/-D
  - Support running on X86_64 with RISCV target
  - RISCV64: Add 'PAGE DIRECTORY' property to the 'vtop' command
  - vmware_vmss: support segment registers
  - vmware_guestdump: support segment registers
  - Fix the segfault issue caused by "dis -s" command
  - Add a rustfilt command to demangle a mangled Rust symbol
  - Enable demangling a mangled Rust support
  - Enable resolving mangled Rust symbol in lockless ring buffer
  - Fix a compilation error on the old gcc version 8.5.0
  - Fix for log command printed a couple of empty lines
  - Optimize extensions's compiler from gcc to $(CC)
  - Fix get_pathname() not handling stacked mounts
  - Fix "mount <address>" fail when "super_block.s_files" unavaliable
  - Fix "mount" MNT_CURSOR entries (kernels 5.8-6.7)


author: Günther Deschner <gd@samba.org> - 2:4.22.2-1
changelog:
  - Update to Samba 4.22.2
  - resolves: rhbz#2370468
  - resolves: rhbz#2370455 - Security fix for CVE-2025-0620


author: Günther Deschner <gd@samba.org> - 2:4.22.5-1
changelog:
  - Update to Samba 4.22.5
  - resolves: rhbz#2391698 - Security fix for CVE-2025-9640
  - resolves: rhbz#2394377 - Security fix for CVE-2025-10230


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.25.0-1
changelog:
  - Update to release v0.25.0
  - Resolves: rhbz#2399354, rhbz#2399081, rhbz#2398678, rhbz#2398424
  - Upstream feature additions and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.25.1-3
changelog:
  - Switch to docker-distribution package for 'registry'
  - Switch to docker-distribution as a BuildRequires for registry which
    removes dependency on unsupported golang- packages
  - Adopt gocheck2 and simplify %check


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.40.2-1
changelog:
  - Update to release v2.40.2
  - Resolves: rhbz#2405876
  - Upstream fixes
  - Adopt gocheck2 macro for %check


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Steven Presti <spresti@redhat.com> - 2.21.0-2
changelog:
  - Rename ignition.cfg -> 05_ignition.cfg to mirror upstream
    additionally backport rename.
  - Rename ignition-ignition-grub subpackage to ignition-grub
  - Update grub2 config to use the correct dir for bootupd static grub configs
    https://github.com/coreos/ignition/pull/2037#issuecomment-2736300056


author: Evan Goode <egoode@redhat.com> - 0.74.0-1
changelog:
  - Update to 0.74.0
  - Update ko.po
  - Split $releasever to $releasever_major and $releasever_minor in the C API
  - Merge `bootc` branch to master
  - ConfigParser: make splitReleasever public
  - C API: Detect releasever_major, releasever_minor from provides
  - C API: support shell-style variable substitution
  - module: Warn if module config file is inaccessible
  - Enable automatic PR reviews


author: Jerry James <loganjerry@gmail.com> - 3.1-53.20240808cvs
changelog:
  - New version (20240808-3.1)
  - Man pages have been renamed to avoid collisions
    - history*.3 -> el_history*.3
    - tok*.3 -> el_tok*.3


author: Richard W.M. Jones <rjones@redhat.com> - 2.10.0-2
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.5-1
changelog:
  - New upstream stable version 1.22.5
  - Fixes security issue with nbd+ssh URIs
    https://lists.libguestfs.org/archives/list/guestfs@lists.libguestfs.org/thread/YZMBF3SJRWTRVT5L3KWSNHITFTRMQNTT/


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation
  - Refactor parse_entitlement_data()
  - Fix relocating certificate paths to /etc/rhsm-host


author: Daniel P. Berrangé <berrange@redhat.com> - 11.0.0-2
changelog:
  - Fix location of mount, umount (rhbz #2359196)
  - Fix location of numad (rhbz #2359736)
  - Fix tests on rebuild with latest GCC 15


author: Benjamin A. Beasley <code@musicinmybrain.net> - 9.2.1-1
changelog:
  - Update to 9.2.1 (close RHBZ#2273352, fix CVE-2024-27982)
  - Switch from xz to zstd compression for the “dev” bundle archive


author: Benjamin A. Beasley <code@musicinmybrain.net> - 9.2.1-4
changelog:
  - Omit build-time license auditing on i686
  - This keeps llhttp from blocking licensecheck’s dependencies or askalono-
    cli from dropping i686 support.


author: Numan Siddique <numans@ovn.org> - 24.03.90-6
changelog:
  - Updated the OVN sources to upstream branch-24.09 commit - 8efac26f6637fc35fd1d3e5b41b935ebcb074a1d
    This is required by ovn-kubernetes to test out new features in their CI before
    OVN 24.09 is released.


author: Dumitru Ceara <dceara@redhat.com> - 24.03.90-7
changelog:
  - Updated the OVN sources to upstream branch-24.09 commit - 76bd54eb36d52d1b3fa663d185f53dcaa2cff06b
    This is required by ovn-kubernetes to test out new features in their CI before
    OVN 24.09 is released.


author: Numan Siddique <numans@ovn.org> - 24.09.2-04
changelog:
  - Update the OVN sources to upstream release v24.09.2
    with the base OVN commit df4f80a60d4cd712870aa73d32d5677448c11c78
    and OVS commit 9e07a69bbb2a7d3eb35f9b487161c50cfa5bd65e
    The below commits are also synced:

  - Prepare for 24.09.3.
  [Upstream: 0a899586b9ec222b335a956021971de1c2dd2312]

  - ic: Fix NULL ptr deref on log of duplicate routes.
  [Upstream: 5a19ae8fa2965e4bf6864f84dfd1adef85ba4b13]

  - controller: Fix IPv6 dp flow explosion by setting flow table prefixes.
  [Upstream 8d64f2b7dcef24d175151ba5e0732281cdeb6d54]

  - tests: Fix flaky "ovn-controller: Multiple OVS interfaces ...".
  [Upstream: c09c714a6beb413c479983d2a301411e81d89f71]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.0-52
changelog:
  - Updated the OVN sources to upstream release 25.03.0
    with the base OVN commit c24b1aa3c724de1aa9fd2461f07e4127a6bfa190
    and OVS commit bb059333496a9b48d6d798b6b32108c9f2720479.
    The following commits are also synced:
  - tests: Don't assume first bucket will be chosen.
  [Upstream: 362d2c0b9bc13da031c08497504c2601b5de6897]

  - ci: Add permanent fix for /etc/hosts file.
  [Upstream: 5c32795e0745897d6e6fcd9a33b9c523f5ebe919]

  - pinctrl: Remove useless volatile qualifier.
  [Upstream: 30717870c70dac547a8bd92b35010cc74dfbbbe8]

  - tests: Add direct lsp to dynamic-routing tests.
  [Upstream: 65ae5bef3db049648804535e63a72a06dbce48cc]

  - ovn-controller: Update handlers for route changes.
  [Upstream: 2a77e7230fd72ce705ac1c2ffc071f4ca20f4bb5]

  - route: Filter datapaths that should advertise.
  [Upstream: 0a9906c82158d829fb8052d764a93825ea2bc9ee]

  - northd: Set REGBIT_CONNTRACK_COMMIT earlier.
  [Upstream: 7454213615258cc445ce7e49f9d50c6c5abfbc7b]

  - contoller, northd: Limit number of claims for virtual ports.
  [Upstream: 9f1c2b14a0ba300e1719d57f62ebf1c060d63c35]

  - controller: Remove only commited virtual port binding requests.
  [Upstream: 81c5e0168c6c0fc98c3bb64a43aa1561d7900dfe]

  - controller: Make sure we will update routes on tracked port change.
  [Upstream: 2f6cf63351c0bbc2637f0a7713eec4689a9b283b]

  - northd: Prevent SB LB duplicates.
  [Upstream: 58735ad207803aa9c5d6cd236dc9aafab83c18c6]

  - tests: Fix racy hard_age value.
  [Upstream: 4b7392d1a467f1de51d4bf869f534d2d29b485d1]

  - tests: Prevent flakiness of "LR ct-commit-all" test.
  [Upstream: 2c98b6c13464ddb7c1ad40c49df4d806b6a76073]

  - ovn-nb: Improve docs for nbctl --template lb-add.
  [Upstream: b4a897ac0aeec16b01eb64b52d7ff0df40081a6a]

  - ovn-nbctl.8: Document the "--route-table" option.
  [Upstream: 5713cd605f5012d06135f302de7bcf42affedbb2]

  - ovn-architecture.7: Fix outdated nb_cfg description.
  [Upstream: eabf8251ca3ee537c9facd3d1986ab82b6b84a02]

  - tests: Don't hardcode table numbers in the default flows test.
  [Upstream: df4e4bf291f396234b29e15ee68110545a741243]

  - controller: Optimize adding 'dps' to the local datapaths.
  [Upstream: 5ad811ce400838c4d024fb23fc3b1ee66944c78a]

  - controller: Expand the helper lport_get_peer().
  [Upstream: 4e7f4a1e4c6d00382d7880eb4aa73e1db9ca3102]

  - controller: Add a helper lport_get_cr_port().
  [Upstream: 354c4b298516ad1ee45bc1a40f575b701a81c91d]

  - controller: Add debug/dump-local-datapaths unixctl.
  [Upstream: 77f6069e891df4bd96f4285149f5417d1c4fdf26]

  - northd: Avoid matching on ct_state.dnat in logical flows.
  [Upstream: 5a12b937f1a035d926842b72730656776d4ab8cf]

  - lib: northd: Add a new ct-state-save feature flag.
  [Upstream: 87f8d012aeae27f0e47066d508ea9b2278d5ee63]

  - lib: ovn-controller: Add a new ct_state_save() logical action.
  [Upstream: 001ba9a3ae1a55d41ebd5958f8f944821205bd55]

  - northd: Limit flooding the self originated neigh disc packets.
  [Upstream: fe5740e2c75fdb815a1dec7d812e88694727d366]

  - northd: Fix network_id computation for IPv6 LRP networks.
  [Upstream: 4b41c118a01a715201937f9279bd95cf562bef70]

  - ovn-nbctl: Add --template option for lb-add.
  [Upstream: 1d7951c3cedc82d32e922cb01659ae1f9c1a213a]

  - tests: Use scapy contrib BFD implementation.
  [Upstream: d5b6169d3ffc566dca7d8a34e1e89fd85b1b8ddb]

  - controller, northd: Add command to enable time warp.
  [Upstream: 202a2a8675e9030b97d5d21ba50ec1008139c346]

  - docs: Fix up stage-hint ovn-sb documentation.
  [Upstream: 40b7ffe7a0b41eda468f800dc113413eebe9663f]

  - northd: Do not drop ip traffic with destination vip expressed via template vars.
  [Upstream: 2326d64f48ad3f8f103a3238a8154bc8529a0465]

  - northd: Use next-hop network for SNAT when lb_force_snat_ip=router_ip.
  [Upstream: 6756ece392bafcc2e2041369e0dfffb377f8d9e7]

  - ovs: Update the submodule to include python F824 fix.
  [Upstream: d0143b75379761ed8a927b9bc6b66b9446076cf8]

  - ci: Add missing llvm package into Fedora.
  [Upstream: bd4c1eee96aa3fd6d4f5e294dcab604a45e54f6d]

  - controller: Redirect traffic for container port.
  [Upstream: 664a82eeb830f284ee5fdfc941f399a78e88f3f0]

  - multinode tests: Simplify/Cleanup migration test.
  [Upstream: e07c56c430be705452cfd083741e4d21b9c47042]

  - lb: Make the LB validation consistent.
  [Upstream: 1a3fd5de519b962769a5b377ff7bdc674fa4068e]

  - tests: Ignore FDB transaction errors.
  [Upstream: 5e2b1ecf945b1124c4593ea76a86cd81bfbc6a9b]

  - controller: Fix possible NULL ptr access in lport_is_local().
  [Upstream: 65e7bcbf2bc2673262c621bd714d0e8c3e855b78]

  - controller: Fix active mac-binding refresh for IPv6.
  [Upstream: e664d16d03aaeac963c203d455794d94a21978ae]

  - tests: Fix flaky "IGMP incremental processing".
  [Upstream: 4a8b656a2ad650a28c6e181c507a4326c2725290]

  - tests: Avoid adding two similar load balancers.
  [Upstream: d3adc824a28e3a19fa1067f2be4c978516c89d94]

  - Fix missing load balancer hairpin flows.
  [Upstream: a4a71fcad105e32fa09fd330b9e8b06c2f565614]

  - ovn.at: Run 'ACL Conntrack ID propagation' for each northd type.
  [Upstream: c6af3c568813f10f4971ebe7ac0fabcb0f838225]

  - ci: Bump the Ubuntu image to 24.04.
  [Upstream: 06b49b45633cae02c9060e0fa0d799514cd7aa67]

  - docs: Move "Transit Router" notes to the "Logical_Router" section.
  [Upstream: ea9d0982fa08a76c36f7e611936d30fb2edf7e15]

  - containers: Get sparse from the official GitHub mirror.
  [Upstream: 0cb2b9b2be9a6efb91fb4e6992e33251840a2884]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.1-32
changelog:
  - Updated the OVN sources to upstream release 25.03.1
    with the base OVN commit 4b8dac64fd3fbbfb39a7105365d5143c7ffa5a35
    and OVS commit a0f636163b60a6afe5e20da221b7e7a47a8a3753.
    The following commits are also synced:
  - logical-fields: Fix inconsistency of register usage.
  [Upstream: 4e12cc2cb655c09e80fa906edeb7f153e1a66040]

  - ovn-trace: Fix pop action in trace.
  [Upstream: 6a473e324ec6260a2c1ee20b95d639ba6b2bb9a0]

  - multinode tests: Fix tests for ENABLE_SSL="yes" clusters.
  [Upstream: c6edf6ad9291e2e660cb4d1292ed3032d5183d72]

  - tests: Fix flaky "interconnection".
  [Upstream: b3bff9ded592338b45b51391a6bd314e4969b69b]

  - tests: Add missing check for scapy.
  [Upstream: 0b79d0aad78a082a0a4f23917ad8027aad5cd114]

  - tests: Remove unused commands from mac-binding test.
  [Upstream: 89184aa4285766daa838e5425464d1588123b179]

  - tests: Fix flaky "send arp for nexthop".
  [Upstream: 59607a4c8f932e683ad81b6dea2f85c084dd3574]

  - tests: Fix flaky tests not properly waiting for ovn-controller exit.
  [Upstream: fddffe180bb16a222ec2cfa22d3e2ba5bdae597f]

  - tests: Fix flaky "NAT on a provider network with no localnet ports".
  [Upstream: 3c545c0bb76e1f014061d30006979e4a7e39c7db]

  - tests: Avoid calling ovs/ovn commands when ovs/ovn are stopped.
  [Upstream: eba392509f1343cec7ea0bd2315301a554351f58]

  - tests: Avoid unloading not existing modules.
  [Upstream: 09eb45dfa5bd37af23af94ffc86607b8b28e449b]

  - tests: Fix ovn-macro when ovn_check_packets__ fails.
  [Upstream: e51b73cdf1c88338d057cb3668e22a4d53d7bc39]

  - ovn-nbctl: Fix lrp set gateway chassis duplicate gc.
  [Upstream: e16b45a97b7eda51653fb14a9fc2c5709d7d6ce0]

  - multinode.at: Cleanup test interfaces created in br-ex.
  [Upstream: 857e0c931e2904c4e4b6dc59800c343939d50ed0]

  - multinode-macros: Cleanup and check resources on all chassis.
  [Upstream: f954ca224291859e4b1034dc36653205691e4de2]

  - ovn-ctl: Fix ovsdb-server/sync-status command output.
  [Upstream: 6a59909bdb36640db27a8358d2585faf11b003f2]

  - multinode tests: Dump logs when test exits.
  [Upstream: 1c12218ba7eaf33e42602855c5311fea980476d9]

  - multinode: Avoid code duplication in macros.
  [Upstream: 382e67032079d69f23f6aad38929500680e0b8a1]

  - route-exchange: Don't keep trying to delete non-existent VRFs.
  [Upstream: 14f9a157e21234b67b977a865fa370155e74f164]

  - controller: Fix bad backport of route_exchange_sb_ro_handler().
  [Upstream: 84048893727f2586c9d379fb347453f1697d47b7]

  - route-table-notify: Avoid unnecessary lookups.
  [Upstream: a264720144fda2d0091f7f6692bd4220a97c5297]

  - controller: Prevent assert with BGP when SB is read only.
  [Upstream: 3e53345ab6899617be3a94ff30b5e5f7636b5940]

  - controller: Slightly optimize the runtime_data handler for sb_ro.
  [Upstream: 02266e0c58b28514032a5bbf31c2dc1e0e1785be]

  - Revert "northd: Don't skip the unSNAT stage for traffic towards VIPs."
  [Upstream: 69a5b2e894324805e5bec0200783a462a9b348f9]

  - ci: Rebalance system tests to speed up the testing.
  [Upstream: d3a1264d29d7bdfcf156e8ec21e9a4628d46a0b7]

  - test: Add missing sync calls.
  [Upstream: 1eb9d441d1a2a47da968d6bffb4dd580976279bf]

  - controller: Install QoS rules even on 'system' ports. (#FDP-1472)
  [Upstream: 6f66904ae108917db8090b9dfe8590642e2f895f]

  - controller: Make sure we run engine_cleanup after thread destroy.
  [Upstream: fd0e5c6fa50f7d67731f168cc498c893071b6f02]

  - Prepare for 25.03.2.
  [Upstream: c1a1c3461f26e0a3e5f231f39b9ae52c78fa5a51]


author: Numan Siddique <numans@ovn.org> - 25.09.0-1
changelog:
  - Updated the OVN sources to upstream release v25.09.0 with the
    commit 8890abf5a25b7b67f08aca8917c1d00cf2296a56 and picked up
    the commits from v25.09.0 till the tip of branch-25.09
    b5f5e0f9cf58a4062a3709b237d152127eba445f (42 commits) in ovn.patch
  - Updated the OVS sources to the branch-25.09 ovs submodule
    commit - 852f07e5251c6a0c0d5c43dc980d12a4f1bcd370


author: Xavier Bachelot <xavier@bachelot.org> - 0.37-3
changelog:
  - Add BR: gcc
  - Add ExcludeArch: %{ix86} for 44+, where valkey is missing for i686
  - Unset test envars


author: Xavier Bachelot <xavier@bachelot.org> - 0.37-5
changelog:
  - Drop conditional around ExcludeArch, no i686 valkey build anywhere
  - Directly BR: valkey rather than valkey-compat-redis
  - Drop duplicate BR:


author: Doğukan Çağatay <dogukan.cagatay@aiven.io> - 2.8-1
changelog:
  - Update python-crc32c package to version 2.8
  - Bump version from 2.7.1 to 2.8
  - Remove bcond tests conditional compilation flag
  - Remove build requirement wheel and pytest which is already provided
    dynamically
  - Simplify buildrequires generation with -g test flag
  - Add manual page generation using help2man
  - Remove conditional test execution (always run tests now)
  - Update file list in the %files section
  - Clean up spec file formatting and remove unnecessary blank lines


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.0.8-10
changelog:
  - Compile as C++14 instead of C++11, for compatibility with eigen3 5.0
  - Use the original upstream for fcl, rather than the ambi-robotics fork


author: psklenar@redhat.com <psklenar@redhat.com> - 1.23.0-5
changelog:
  - fedora CI plans move to gitlab for centos-stream test space
    https://issues.redhat.com/browse/RHELMISC-13073


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.12-2
changelog:
  - Disable ESI support since ESI support has been also removed from squid 7
  - Resolves: CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.8-1
changelog:
  - Update to SSCG 3.0.8
  - Fix IP address handling in CA certificate SAN constraints * Add automatic
    single-IP subnet mask to IP addresses in CA name constraints * Update
    help text to show simplified IP format without subnet mask
  - Greatly expand the in-tree test suite


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0


author: Carl George <carlwgeorge@fedoraproject.org> - 2.7.0-1
changelog:
  - Update to version 2.7.0, resolves rhbz#2245195
  - Switch to automatically generated buildrequires
  - Switch to SPDX license identifier
  - Disable i686 build


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.1706-2
changelog:
  - broken /usr/bin/ex symlink in vim-9.1.1706-1.fc42 (fedora#2392249)
  - vim-common has broken manpages (fedora#2392178)


author: Germano Massullo <germano.massullo@gmail.com> - 2.6.0-1
changelog:
  - 2.6.0 release
  - Removed %define debug_package %{nil}
  - Added -DCMAKE_INSTALL_SYSCONFDIR=%{_sysconfdir}
  - Modified %files section


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.1-6
changelog:
  - adjust file locations now /usr/sbin is a symlink to /usr/bin
  - remove debugedit fix as no longer needed


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.2-2
changelog:
  - update to xen-4.19.2
    remove patches now included or superceded upstream
    remove xen*.efi.elf files to avoid debuginfo failure


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-2
changelog:
  - update to xen-4.19.3
    remove patches now included or superceded upstream
    includes patches for
    x86: Incorrect stubs exception handling for flags recovery [XSA-470,
  	CVE-2025-27465]
    x86: Transitive Scheduler Attacks [XSA-471, CVE-2024-36350,
   	CVE-2024-36357]


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-4
changelog:
  - Mutiple vulnerabilities in the Viridian interface [XSA-472,
          CVE-2025-27466, CVE-2025-58142, CVE-2025-58143]
  - Arm issues with page refcounting [XSA-473, CVE-2025-58144,
          CVE-2025-58145]


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-6
changelog:
  - x86: Incorrect input sanitisation in Viridian hypercalls [XSA-475,
          CVE-2025-58147, CVE-2025-58148]


