# changelog

author: Richard W.M. Jones <rjones@redhat.com> - 20210217-4.git33a7322d
changelog:
  - Unbreak build by undefining _auto_set_build_flags
    See: https://fedoraproject.org/wiki/Changes/SetBuildFlagsBuildCheck


author: Christian Krause <chkr@fedoraproject.org> - 0.8-18
changelog:
  - Install glade file for avahi-discover-standalone unconditionally
    (fixes #2036073 and #2126721)
  - Install desktop files for bssh and bvnc unconditionally


author: Petr Menšík <pemensik@redhat.com> - 0.8-22
changelog:
  - Enable unit tests during check
  - Prevent crashes on some invalid DBus calls
  - Provide versioned howl compatibility package
  - Correct bootstrap option


author: Jonathan Wakely <jwakely@redhat.com> - 1.75.0-7
changelog:
  - Build with zstd support (#2091041)
  - Fix rpminspect CI warnings about missing versioned dependencies


author: Dalton Miner <daltonminer@gmail.com> - 1.21.20-1
changelog:
  - Update dpkg to 1.21.20 (#2150017)
  - Add zstd support (#2112807)
  - Fully switch to libmd for MD5 implementation
    https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/debian/?id=2767801430de3c6d4ec7394e286fc261a8180feb


author: Sérgio Basto <sergio@serjux.com> - 1.31-1
changelog:
  - Update fakeroot to 1.31 (#2167522)
  - Add fix from Debian
  - Drop fakeroot-inttypes.patch which had almost 10 year old and I dont know what his purpose
  - Drop relax_tartest.patch we don't need it anymore


author: Daiki Ueno <dueno@redhat.com> - 3.8.2-2
changelog:
  - Bump nettle dependency to 3.9.1
  - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: Reto Gantenbein <reto.gantenbein@linuxmonk.ch> 0.4-0.2
changelog:
  - Use systemd sysusers/tmpfiles
  - Update dependencies to use 'Recommends'
  - Remove unneeded incus-agent script and systemd unit


author: Neal Gompa <ngompa@fedoraproject.org> - 0.5-1
changelog:
  - Update to 0.5
  - Disable building documentation
  - Restructure packaging to be easier to conditionalize


author: Michael Stauber <mstauber@solarspeed.net> - 6.5.0-3
changelog:
  - Added qemu-runas-fix.patch to change QEMU call from -runas to
    -run-with user=...' instead to make it work with newer QEMU versions


author: Michael Stauber <mstauber@solarspeed.net> - 6.5.0-4
changelog:
  - Dropped qemu-runas-fix.patch for now
  - Added qemu_virtio-fs.patch to force QEMU to NOT use 9p for agent
    installs but to use virtio-fs instead.
  - Fixed wrong Incusd shutdown call in incus-startup.service


author: Michael Stauber <mstauber@solarspeed.net> - 6.5.0-5
changelog:
  - Dropped qemu-runas-fix.patch again for usage with COPR QEMU Spice
  - Dropped qemu_virtio-fs.patch
  - Left both patches in the Specfile for inclusion in the SRPM.


author: Michael Stauber <mstauber@solarspeed.net> - 6.5.0-6
changelog:
  - Set CGO_ENABLED=0 specifically for the build of 'incus-agent' so that
    it is built statically linked. Otherwise we're in a world of hurt 
    with missing dependencies for it depending on the used VM OS.
  - Also compiled 'incus-migrate' the same way: Statically linked.


author: Michael Stauber <mstauber@solarspeed.net> - 6.3.0-2
changelog:
  - Updated 6.3.0 build with paths changed to /home/incus where appropriate
  - Added /usr/bin/bin.linux.incus-migrate.x86_64
  - Added /root/incus_config.yaml
  - Added /etc/profile.d/incus.sh
  - Added /etc/logrotate.d/incus
  - Note: Creation of VMs fails due to "QEMU failed to run feature checks"


author: Michael Stauber <mstauber@solarspeed.net> - 6.3.0-3
changelog:
  - Added missing /home/incus/ subdirectories
  - Added server.key and server.crt creation to post-install


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Chris Leech <cleech@redhat.com> - 0.101-1
changelog:
  - update to 0.101
  - bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
  - setup new upstream tests as gating


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7
changelog:
  - Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999303


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173960
    Resolves: rhbz#2173967


author: Tom Callaway <spot@fedoraproject.org> - 1.7.0-0.1.rc2
changelog:
  - update to 1.7.0-rc2
  - disable tests on s390x (reported upstream: https://github.com/libunwind/libunwind/issues/464)


author: Jiri Denemark <jdenemar@redhat.com> - 9.10.0-1
changelog:
  - Rebased to libvirt-9.10.0 (rhbz#RHEL-15267)
  - The rebase also fixes the following bugs:
      rhbz#RHEL-16878, rhbz#RHEL-14611, rhbz#RHEL-7384, rhbz#RHEL-16870, rhbz#RHEL-18439
      rhbz#RHEL-16751, rhbz#RHEL-4452, rhbz#RHEL-17841, rhbz#RHEL-15288, rhbz#RHEL-7040


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-1
changelog:
  - Rebased to libvirt-10.0.0 (RHEL-15267)
  - The rebase also fixes the following bugs:
      RHEL-18782, RHEL-735, RHEL-18165, RHEL-4607, RHEL-700
      RHEL-7100, RHEL-15480, RHEL-7416, RHEL-20609, RHEL-7570
      RHEL-20444, RHEL-17596, RHEL-7569


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-2
changelog:
  - tests: Add hostcpudata for machine with CPU clusters (RHEL-7043)
  - conf: Report CPU clusters in capabilities XML (RHEL-7043)
  - conf: Allow specifying CPU clusters (RHEL-7043)
  - qemu: Introduce QEMU_CAPS_SMP_CLUSTERS (RHEL-7043)
  - qemu: Use CPU clusters for guests (RHEL-7043)
  - tests: Add test case for CPU clusters (RHEL-7043)
  - qemu: Make monitor aware of CPU clusters (RHEL-7043)
  - tests: Verify handling of CPU clusters in QMP data (RHEL-7043)
  - build: Make daemons depend on generated *_protocol.[ch] (RHEL-15267)
  - domain_validate: Check for domain address conflicts fully (RHEL-4452)
  - qemu_hotplug: Don't lose 'created' flag in qemuDomainChangeNet() (RHEL-22714)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-3
changelog:
  - remote_driver: Restore special behavior of remoteDomainGetBlockIoTune() (RHEL-22800)
  - conf: Introduce dynamicMemslots attribute for virtio-mem (RHEL-15316)
  - qemu_capabilities: Add QEMU_CAPS_DEVICE_VIRTIO_MEM_PCI_DYNAMIC_MEMSLOTS capability (RHEL-15316)
  - qemu_validate: Check capability for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_command: Generate cmd line for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_snapshot: fix detection if non-leaf snapshot isn't in active chain (RHEL-23212)
  - qemu_snapshot: create: refactor external snapshot detection (RHEL-22797)
  - qemu_snapshot: create: don't require disk-only flag for offline external snapshot (RHEL-22797)
  - remoteDispatchAuthPolkit: Fix lock ordering deadlock if client closes connection during auth (RHEL-20337)
  - util: virtportallocator: Add VIR_DEBUG statements for port allocations and release (RHEL-21543)
  - qemu: migration: Properly handle reservation of manually specified NBD port (RHEL-21543)
  - qemuMigrationDstStartNBDServer: Refactor cleanup (RHEL-21543)
  - virPCIVPDResourceIsValidTextValue: Adjust comment to reflect actual code (RHEL-22314)
  - util: pcivpd: Refactor virPCIVPDResourceIsValidTextValue (RHEL-22314)
  - virNodeDeviceCapVPDFormatCustom*: Escape unsanitized strings (RHEL-22314)
  - virNodeDeviceCapVPDFormat: Properly escape system-originated strings (RHEL-22314)
  - schema: nodedev: Adjust allowed characters in 'vpdFieldValueFormat' (RHEL-22314)
  - tests: Test the previously mishandled PCI VPD characters (RHEL-22314)
  - Don't overwrite error message from 'virXPathNodeSet' (RHEL-22314)
  - tests: virpcivpdtest: Remove 'testVirPCIVPDReadVPDBytes' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDReadVPDBytes' (RHEL-22314)
  - util: pcivpd: Unexport virPCIVPDParseVPDLargeResourceFields (RHEL-22314)
  - tests: virpcivpd: Remove 'testVirPCIVPDParseVPDStringResource' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDParseVPDLargeResourceString' (RHEL-22314)
  - virPCIVPDResourceGetKeywordPrefix: Fix logging (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceCustomUpsertValue (RHEL-22314)
  - conf: virNodeDeviceCapVPDParse*: Remove pointless NULL checks (RHEL-22314)
  - virpcivpdtest: testPCIVPDResourceBasic: Remove tests for uninitialized 'ro'/'rw' section (RHEL-22314)
  - util: virPCIVPDResourceUpdateKeyword: Remove impossible checks (RHEL-22314)
  - conf: node_device: Refactor 'virNodeDeviceCapVPDParseCustomFields' to fix error reporting (RHEL-22314)
  - virNodeDeviceCapVPDParseXML: Fix error reporting (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceUpdateKeyword (RHEL-22314)
  - virPCIDeviceHasVPD: Refactor "debug" messages (RHEL-22314)
  - virPCIDeviceGetVPD: Fix multiple error handling bugs (RHEL-22314)
  - virPCIDeviceGetVPD: Handle errors in callers (RHEL-22314)
  - virPCIVPDReadVPDBytes: Refactor error handling (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceString: Properly report errors (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Merge logic conditions (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Remove impossible 'default' switch case (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor processing of read data (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor return logic (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Report proper errors (RHEL-22314)
  - virPCIVPDParse: Do reasonable error reporting (RHEL-22314)
  - virt-admin: Add warning when connection to default daemon fails (RHEL-23170)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-4
changelog:
  - Set stubDriverName from hostdev driver model attribute during pci device setup (RHEL-25858)
  - qemuMigrationDstPrepareStorage: Use 'switch' statement to include all storage types (RHEL-24825)
  - qemuMigrationDstPrepareStorage: Properly consider path for 'vdpa' devices (RHEL-24825)
  - domain_validate: Account for NVDIMM label size properly when checking for memory conflicts (RHEL-4452)


author: Eduard Abdullin <eabdullin@almalinu.org> - 10.0.0-6.alma.1
changelog:
  - cpu: x86: Add support for adding features to existing CPU models
  - qemu: domain: Check arch in qemuDomainMakeCPUMigratable
  - conf: cpu: Introduce virCPUDefListFeatures
  - qemu: domain: Drop added features from migratable CPU
  - Add vmx-* features to Broadwell*
  - Add vmx-* features to Cascadelake*
  - Add vmx-* features to Conroe
  - Add vmx-* features to Cooperlake
  - Add vmx-* features to core2duo
  - Add vmx-* features to Haswell*
  - Add vmx-* features to Icelake*
  - Add vmx-* features to IvyBridge*
  - Add vmx-* features to kvm*
  - Add vmx-* features to Nehalem*
  - Add vmx-* features to Penryn
  - Add vmx-* features to SandyBridge*
  - Add vmx-* features to SapphireRapids
  - Add vmx-* features to Skylake*
  - Add vmx-* features to Snowridge
  - Add vmx-* features to Westmere*
  - qemu: virtiofs: do not crash if cgroups are missing
  - qemu: virtiofs: set correct label when creating the socket
  - qemu: virtiofs: error out if getting the group or user name fails


author: Eduard Abdullin <eabdullin@almalinux.org> - 10.0.0-6.2.el9_4.alma.1
changelog:
  - Fix off-by-one error in udevListInterfacesByStatus
  - remote: check for negative array lengths before allocation
  - qemu: Fix migration with custom XML


author: Eduard Abdullin <eabdullin@almalinux.org> - 10.0.0-6.6.el9_4.alma.1
changelog:
  - vmx: Do not require all ID data for VMWare Distributed Switch
  - vmx: Do not require DVS Port ID
  - rpc: ensure temporary GSource is removed from client event
   loop
  - qemu: Fix migration with disabled vmx-* CPU features


author: Sérgio Basto <sergio@serjux.com> - 5.0.3-1
changelog:
  - Update lxc to 5.0.3 (inspired in https://build.opensuse.org/package/show/Virtualization:containers/lxc)


author: Thomas Moschny <thomas.moschny@gmx.de> - 4.0.5-1
changelog:
  - Update to 4.0.5.
  - Enable LXC bridge per default.
  - Add wget dependency for the templates subpackage.


author: Michael Stauber <mstauber@solarspeed.net> - 6.0.4-2
changelog:
  - Rebuilt for EL9 and Aventurin{e} 6110R. Added --enable-loadavg to
    lxcfs Systemd Unit-File and auto-enable lxcfs


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Richard W.M. Jones <rjones@redhat.com> - 1.28.5-1
changelog:
  - Rebase to new stable branch version 1.28.5
    resolves: rhbz#2011709
  - Move nbdkit-null-plugin to nbdkit-server package
    resolves: rhbz#2021154
  - Add asynchronous support in nbdkit-vddk-plugin
  - Drop obsolete documentation related to thread model in vddk plugin
    resolves: rhbz#2018463
  - Switch to xorriso (instead of genisoimage)
  - Distribute README.VDDK in nbdkit-vddk-plugin subpackage
  - Fix nbdkit-cow-filter cow-block-size=4096
  - file: Fix implementation of cache=none for writes
    resolves: rhbz#2029751
  - vddk: Implement VMDK creation


author: Richard W.M. Jones <rjones@redhat.com> - 1.30.8-1
changelog:
  - Rebase to new stable branch version 1.30.8
    resolves: rhbz#2059289
  - Add automatic provides generator and subpackage nbdkit-srpm-macros
    resolves: rhbz#2059291
  - New filters: blocksize-policy, protect, retry-request
  - Fix license of bash-completion subpackage
  - vddk: Fix use of uninitialized memory when computing block size
    resolves: rhbz#2066655
  - Skip vsock tests unless the vsock_loopback module is loaded
    resolves: rhbz#2069558
  - Add support for ssh create remote file.
  - Suppress excess messages from nbdkit-nbd-plugin
    resolves: rhbz#2083498
  - Suppress incorrect VDDK error when converting guests from vCenter
    resolves: rhbz#2083617
  - Backport new readahead filter from 1.32.
  - Backport new LUKS filter from 1.32.
  - Backport new scan filter from 1.32.
  - Add new Python binding for nbdkit_parse_size from 1.32
  - Add new rate filter burstiness setting from 1.32
  - vddk: Suppress new VDDK "phone home" messages
    resolves: rhbz#2104720
  - vddk: Clearer error message when thumbprint is wrong
    resolves: rhbz#1905772
  - Fix memory allocator=malloc,mlock=true
    resolves: rhbz#2044432
  - Fix multiple Coverity problems
  - Fix bounds error in nbdkit-checkwrite-filter
    resolves: rhbz#2108545


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Neal Gompa <ngompa@datto.com> - 2:2021.8.22-1
changelog:
  - Rebase to version 2021.8.22 to fix various CVEs (RHBZ#1999869)
  - Clean up old cruft for RHEL < 7
  - Split libraries out to libs subpackage


author: Richard W.M. Jones <rjones@redhat.com> - 2:2022.5.17-1
changelog:
  - New upstream version 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-12
changelog:
  - Merging upstream branch-3.3 [RH git: 9b5e829705]
      Commit list:
      f19448b861 github: Update python to 3.12.
      b705fb8dd2 ovsdb-dot: Fix flake8 issues.
      1ac823cb03 ovsdb-doc: Fix syntax warning with Python 3.12 and flake8 issues.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-13
changelog:
  - Merging upstream branch-3.3 [RH git: 2914158441]
      Commit list:
      42e685916e ovsdb: raft: Fix probe intervals after install snapshot request.
      1c44cb5963 ovsdb: raft: Fix inability to join a cluster with a large database.
      5966c22b85 rhel/systemd: Set ovsdb-server timeout to 5 minutes.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-14
changelog:
  - Merging upstream branch-3.3 [RH git: fd340e5b9e]
      Commit list:
      a6c3b5202c netdev-dpdk: Fix possible memory leak configuring VF MAC address.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-15
changelog:
  - Merging upstream branch-3.3 [RH git: 1cb679f528]
      Commit list:
      9a5c24d70f sparse: Add immintrin.h header.
      3528cc6f45 tc: Fix -Wgnu-variable-sized-type-not-at-end warning with Clang 18.
      5814de5687 tests: Fix build failure with Clang 18 due to -Wformat-truncation.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-16
changelog:
  - Merging upstream branch-3.3 [RH git: 8c52aecb56]
      Commit list:
      4756bf4baf ofproto-dpif-trace: Fix access to an out-of-scope stack memory.
      01eca18be1 hash, jhash: Fix unaligned access to the hash remainder.
      4f61523c0d sparse: Add additional define for sparse on GCC >= 14.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-17
changelog:
  - Merging upstream branch-3.3 [RH git: a2b1d49351]
      Commit list:
      20ed5491c5 ovsdb-client: Add missing arg to help for 'dump'.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-18
changelog:
  - Merging upstream branch-3.3 [RH git: 2c450fb957]
      Commit list:
      bf1b16364b conntrack: Fully initialize conn struct before insertion.
      cf461fe282 conntrack: Do not use {0} to initialize unions.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-19
changelog:
  - Merging upstream branch-3.3 [RH git: f3bdc58258]
      Commit list:
      8d4ba3b5a8 compiler: Fix errors in Clang 17 ubsan checks.
      d153eff606 table: Fix freeing global variable.
      f02dc3cfec vlog: Destroy async_append first then close log_fd.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-20
changelog:
  - Merging upstream branch-3.3 [RH git: e37661f387]
      Commit list:
      ffbce0c428 atlocal: Replace deprecated pkg_resources.
      1f0423a4ee atlocal: Fix setting HAVE_PYTEST on unexpected errors.
      95baf295af srv6: Fix misaligned writes to segment list.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-21
changelog:
  - Merging upstream branch-3.3 [RH git: 4793020729]
      Commit list:
      a3022b08ac netdev-linux: Initialize link speed in error conditions.
      216c2c1ff9 netdev-linux: Return an error if device feature names are empty.
      1b78323a21 socket: Fix uninitialized values in inet_parse_ functions.
      4ece94d2ab dpctl: Fix uninitialized value when deleting flows.
      7ee12c5ae1 netdev-native-tnl: Fix use of uninitialized offset on SRv6 header pop.
      258bc1e0c6 netdev-linux: Fix ethtool_cmd is partly outside array bounds.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-45
changelog:
  - Merging upstream branch-3.3 [RH git: 7db7165705]
      Commit list:
      1e6c691699 dp-packet: Correct IPv4 checksum calculation. ()


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-46
changelog:
  - Merging upstream branch-3.3 [RH git: 0eb320cdf0]
      Commit list:
      a097f4a39b docs: Fix argument formatting in ovs-appctl(8) man page.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-47
changelog:
  - Merging upstream branch-3.3 [RH git: 41711102ee]
      Commit list:
      09cfc0ba9e Prepare for 3.3.3.
      dfe601bbc1 Set release date for 3.3.2.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-48
changelog:
  - Merging upstream branch-3.3 [RH git: f9a26721d9]
      Commit list:
      a6b49a6a28 userspace: Correctly set ip offload flag in native tunneling.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-49
changelog:
  - Merging upstream branch-3.3 [RH git: 3713b4e9c9]
      Commit list:
      bb49e027c1 vconn: Always properly free flow stats reply.
      a0e4171bc9 mcast-snooping: Properly check group_get_lru return code.
      58ff239470 ovsdb-idl: Fix IDL memory leak.
      5984640f02 ofproto/bond: Preserve active bond member over restarts.
      c64206c6e0 ofproto-dpif-upcall: Avoid stale ukeys leaks.
      823b3dd823 ci: Use previous sarif-tools release due to issue in latest release.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-50
changelog:
  - Merging upstream branch-3.3 [RH git: d29ec5b684]
      Commit list:
      049d00f683 github: Skip FTP SNAT orig tuple tests due to broken Ubuntu kernel.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-51
changelog:
  - Merging upstream branch-3.3 [RH git: 5ab2df5d8f]
      Commit list:
      5f5c3d9229 selinux: Update policy file.
      2d14266cb9 ofproto-dpif-mirror: Always revalidate on mirror update. (FDP-788)


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-52
changelog:
  - Merging upstream branch-3.3 [RH git: 5833c32b1e]
      Commit list:
      c4a5a2f7ee AUTHORS: Add Jun Wang.
      034145ea5e netdev-dpdk: Disable outer udp checksum offload for txgbe driver.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-53
changelog:
  - Merging upstream branch-3.3 [RH git: d3700c65da]
      Commit list:
      5802dd8ba7 Revert "ci: Use sarif-tools v3.0.1 due to issues in earlier versions."
      3974c52339 ci: Use sarif-tools v3.0.1 due to issues in earlier versions.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-54
changelog:
  - Merging upstream branch-3.3 [RH git: fecf6343f1]
      Commit list:
      618944a79f ofproto-dpif: Improve load balancing in dp_hash select groups. (FDP-826)


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-55
changelog:
  - Merging upstream branch-3.3 [RH git: 749598021a]
      Commit list:
      5d6842f424 dpdk: Use DPDK 23.11.2 release for OVS 3.3.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-56
changelog:
  - Merging dpdk subtree [RH git: 61607569a5]
      Commit list:
      e8eb14e00d version: 23.11.2
      8401a3e84b version: 23.11.2-rc2
      50e50f1d99 net/ice/base: fix preparing PHY for timesync command
      7302cab07c net/nfp: fix firmware abnormal cleanup
      92c5aa4387 net/nfp: forbid offload flow rules with empty action list
      e9c4dbd5be crypto/openssl: make per-QP auth context clones
      729e0848b7 examples: fix port ID restriction
      3fc9eb2f4f examples: fix lcore ID restriction
      776c4e37ee doc: add baseline mode in l3fwd-power guide
      8437250f9f doc: fix DMA performance test invocation
      d01561713d doc: describe mlx5 HWS actions order
      1ef3097094 doc: add power uncore in API index
      09ccd86606 doc: fix mbuf flags
      613a4879b4 examples/ipsec-secgw: revert SA salt endianness
      8b87ae54ed doc: remove reference to mbuf pkt field
      938afb0ab2 examples: fix queue ID restriction
      80da81b6f9 net/ice/base: fix temporary failures reading NVM
      034f533709 net/hns3: fix uninitialized variable in FEC query
      5fa2084ac3 examples/l3fwd: fix crash on multiple sockets
      1708229729 examples/l3fwd: fix crash in ACL mode for mixed traffic
      bef8327055 bus/vdev: fix device reinitialization
      971d455e59 malloc: fix multi-process wait condition handling
      b53fb811c0 power: fix number of uncore frequencies
      52bf7488c3 app/pdump: handle SIGTERM and SIGHUP
      6bed8020a3 app/dumpcap: handle SIGTERM and SIGHUP
      eacf416207 dma/hisilicon: remove support for HIP09 platform
      a5375f4492 bus/pci: fix FD in secondary process
      c076f02992 bus/pci: fix UIO resource mapping in secondary process
      ca12727f09 app/testpmd: fix build on signed comparison
      b858eb7a55 net/gve: fix Tx queue state on queue start
      7ff9eeeb71 ethdev: fix device init without socket-local memory
      890b02b907 app/testpmd: add postpone option to async flow destroy
      fbd7ac3b83 net/netvsc: use ethdev API to set VF MTU
      e8746659b2 ethdev: fix GENEVE option item conversion
      e2b3b0a5d4 net/ark: fix index arithmetic
      7deaec6ac8 net/hns3: check Rx DMA address alignmnent
      6bf4a626e4 net/mlx5: fix disabling E-Switch default flow rules
      3b60ef3db6 common/mlx5: remove unneeded field when modify RQ table
      1988c32194 net/mlx5: fix uplink port probing in bonding mode
      07ad92c1a6 net/mlx5: fix end condition of reading xstats
      b7c9a02306 net/mlx5/hws: remove unused variable
      1163643a1e net/mlx5/hws: fix port ID on root item convert
      4a80ab31f0 net/mlx5/hws: fix deletion of action vport
      dcd02c715e net/mlx5/hws: fix check of range templates
      3c9aff8fbf net/mlx5/hws: fix memory leak in modify header
      85eeb293b3 net/mlx5: fix MTU configuration
      c1792007ff net/mlx5: fix Arm build with GCC 9.1
      a8331ab8b2 net/mlx5: fix shared Rx queue data access race
      15e2b0e736 net/ice: fix return value for raw pattern parsing
      17e800edd1 net/ice: fix memory leaks in raw pattern parsing
      8f23521ad7 common/cnxk: fix integer overflow
      a408bd0bcb crypto/qat: fix placement of OOP offset
      b2acb5218f test/crypto: fix modex comparison
      d308cefc96 test/crypto: fix asymmetric capability test
      adffcf4383 test/crypto: remove unused stats in setup
      4b0d806bab doc: fix typo in l2fwd-crypto guide
      0e19bfa703 crypto/qat: fix log message typo
      5d66d4a3f0 test/crypto: fix allocation comment
      9fef0db81b crypto/ipsec_mb: fix function comment
      c6111cb5fd crypto/qat: fix GEN4 write
      f707532cde net/nfp: fix disabling 32-bit build
      de0c58c4b8 doc: update AF_XDP device plugin repository
      811fcdf23a net/nfp: adapt reverse sequence card
      ea7085704a net/nfp: remove unneeded logic for VLAN layer
      4c45c694ca doc: update metadata description in nfp guide
      174b2b5a9a net/nfp: fix getting firmware version
      241976029a net/nfp: remove redundant function call
      c90d304f0e net/gve: fix RSS hash endianness in DQO format
      316baf3f0b net/ena: fix checksum handling
      ffba3914ad net/ena: fix return value check
      db4ca6f1cb net/ena: fix bad checksum handling
      5453c7a0b0 net/nfp: fix repeat disable port
      51d6936232 net/nfp: fix dereference of null pointer
      d0d759188e net/nfp: disable ctrl VNIC queues on close
      c22c079e1c net/ionic: fix mbuf double-free when emptying array
      2e84f93745 net/nfp: fix flow mask table entry
      8df473a653 net/nfp: fix allocation of switch domain
      2a50559bfd net/netvsc: fix MTU set
      e2ef427581 net/nfp: fix IPv6 TTL and DSCP flow action
      3762e1ed03 net/vmxnet3: fix init logs
      fdc5f6074b net/txgbe: fix Rx interrupt
      2dfb54ff33 net/ngbe: fix memory leaks
      638e12515a net/txgbe: fix memory leaks
      d0a84e43b3 net/ngbe: fix MTU range
      0fe77d1de3 net/txgbe: fix MTU range
      db50b74b3c net/ngbe: fix hotplug remove
      5de5204582 net/txgbe: fix hotplug remove
      6d224307f6 net/ngbe: keep PHY power down while device probing
      658060fffe net/ngbe: add special config for YT8531SH-CA PHY
      85bd339e19 net/txgbe: fix VF promiscuous and allmulticast
      ea62ead19d net/txgbe: reconfigure more MAC Rx registers
      55d8be2055 net/txgbe: restrict configuration of VLAN strip offload
      ed2250e120 net/txgbe: fix Tx hang on queue disable
      6ea637699a net/txgbe: fix flow filters in VT mode
      842a7baf9c net/txgbe: fix tunnel packet parsing
      708d5a261b net/mana: fix uninitialized return value
      e113512712 app/testpmd: fix parsing for connection tracking item
      11b6493c45 doc: remove empty section from testpmd guide
      f11711212c app/testpmd: handle IEEE1588 init failure
      e7f8c62dfc net/cpfl: fix 32-bit build
      ec9de9db2d net/cpfl: add checks on control queue messages
      39b2b4c7de common/idpf: fix PTP message validation
      e0f453462f common/idpf: fix flex descriptor mask
      bd5b88d172 net/ice/base: fix masking when reading context
      67a40ce4ef net/ice/base: fix board type definition
      5167b4d2d3 net/ice/base: fix potential TLV length overflow
      abd055ea63 net/ice/base: fix check for existing switch rule
      fddfbdbf49 net/ice/base: fix return type of bitmap hamming weight
      c9eae16d5e net/ice/base: fix GCS descriptor field offsets
      8bc9ae6b59 net/ice/base: fix size when allocating children arrays
      1257bf9a7c net/ice/base: fix sign extension
      2458257e56 net/ice/base: fix resource leak
      7a6c0e6212 net/ice/base: fix memory leak in firmware version check
      87d7cf4082 net/ice/base: fix pointer to variable outside scope
      aafeb830bc buildtools: fix build with clang 17 and ASan
      a4e8a4f488 fbarray: fix finding for unaligned length
      d88beb497f net/mlx5: fix start without duplicate flow patterns
      77231b2598 net/dpaa: forbid MTU configuration for shared interface
      d21248db89 bus/dpaa: remove redundant file descriptor check
      bb85c1fd72 common/dpaax: fix node array overrun
      90c9f938e5 common/dpaax: fix IOVA table cleanup
      0b4bc3a5d1 bus/dpaa: fix memory leak in bus scan
      d36efdb2cd bus/dpaa: fix bus scan for DMA devices
      daa0d9edd1 app/testpmd: fix help string of BPF load command
      7353cb767f dma/idxd: fix setup with Ubuntu 24.04
      f563086258 eal/linux: lower log level on allocation attempt failure
      8ccf607fad devtools: fix symbol listing
      997166395e fbarray: fix lookbehind ignore mask handling
      8baf379032 fbarray: fix lookahead ignore mask handling
      24869bf93c fbarray: fix incorrect lookbehind behavior
      5e66590575 fbarray: fix incorrect lookahead behavior
      427fa07238 examples/ipsec-secgw: fix SA salt endianness
      d0d02993de crypto/dpaa2_sec: fix event queue user context
      6e2def6ca9 crypto/dpaa_sec: fix IPsec descriptor
      b977583692 common/dpaax/caamflib: fix PDCP AES-AES watchdog error
      5089ef6c28 common/dpaax/caamflib: fix PDCP-SDAP watchdog error
      4af94ab6e2 crypto/openssl: set cipher padding once
      4f8c97e941 crypto/openssl: make per-QP cipher context clones
      ee88b9496c crypto/openssl: optimize 3DES-CTR context init
      eb6a1a85e6 crypto/openssl: fix GCM and CCM thread unsafe contexts
      cc8ca588a0 examples/fips_validation: fix dereference and out-of-bound
      9b3e235581 cryptodev: validate crypto callbacks from next node
      578ee20720 cryptodev: fix build without crypto callbacks
      fbb350108f crypto/cnxk: fix minimal input normalization
      7978b75d1b test/crypto: validate modex from first non-zero
      ede34a4359 app/crypto-perf: fix result for asymmetric
      7469762567 app/crypto-perf: remove redundant local variable
      e585a0db98 crypto/cnxk: fix ECDH public key verification
      6034788bd6 crypto/cnxk: fix out-of-bound access
      ea90bc49fc net/virtio-user: fix control queue allocation for non-vDPA
      15d3dfa07a baseband/la12xx: forbid secondary process
      f798848548 telemetry: fix connection parameter parsing
      713520f91d bpf: fix load hangs with six IPv6 addresses
      59523f029e bpf: fix MOV instruction evaluation
      c9071e44b7 mbuf: fix dynamic fields copy
      c13a819a44 graph: fix mcore dispatch walk
      777f0bc1a5 vdpa/sfc: remove dead code
      583796e298 dmadev: fix structure alignment
      d859544e45 common/cnxk: fix flow aging on application exit
      c343cb088f app/bbdev: fix interrupt tests
      0c99a3d922 app/bbdev: fix MLD output size computation
      179f1c6e6b app/bbdev: fix TB logic
      acdd88c4f9 build: use builtin helper for python dependencies
      edfa6a87c8 config: fix warning for cross build with meson >= 1.3.0
      151a54d0b6 v23.11.2-rc1
      61b7d1f4c1 doc: fix link to hugepage mapping from Linux guide
      0e68080faf telemetry: lower log level on socket error
      4fe42b5bd5 test/crypto: fix enqueue/dequeue callback case
      4dc08a4d14 test/crypto: fix RSA cases in QAT suite
      f1e088abb9 net/mlx5/hws: fix matcher reconnect
      db0c8afc11 net/mlx5: fix crash on counter pool destroy
      59e27c048f net/mlx5: support jump in meter hierarchy
      15d0fcf1ac net/mlx5: fix access to flow template operations
      7cc4f4359e net/mlx5: break flow resource release loop
      8f7a4c4861 net/mlx5: fix flow template indirect action failure
      0caa8332a4 net/mlx5: fix hash Rx queue release in flow sample
      5546ccbefe net/mlx5: fix indexed pool with invalid index
      c12bd3ffbf net/mlx5/hws: fix action template dump
      096734a9b5 net/mlx5/hws: set default miss when replacing table
      df8e365511 net/mlx5/hws: extend tag saving for match and jumbo
      9b84b09d4a net/mlx5/hws: add template match none flag
      8b2eb11323 net/mlx5/hws: fix spinlock release on context open
      3811ef8d25 net/mlx5/hws: fix function comment
      21c0e76d5a common/mlx5: fix PRM structs
      aec70880d8 net/mlx5/hws: decrease log level for creation failure
      b4d5b769a9 common/mlx5: fix unsigned/signed mismatch
      5405ea2f7a hash: fix RCU reclamation size
      2f62695370 bpf: disable on 32-bit x86
      61c4175079 graph: fix stats retrieval while destroying a graph
      e022af0b88 graph: fix ID collisions
      4541f5810c net/cnxk: fix promiscuous state after MAC change
      144a806a1b net/cnxk: fix outbound security with higher packet burst
      01d4a05a9f net/cnxk: update SA userdata and keep original cookie
      802a3a7d74 net/cnxk: fix extbuf handling for multisegment packet
      67a8e5ba52 common/cnxk: fix segregation of logs based on module
      c99b186412 common/cnxk: fix flow aging cleanup
      af85590165 net/cnxk: fix RSS config
      1e2d3032e2 net/ixgbe/base: fix PHY ID for X550
      b371343ddc net/ixgbe/base: fix 5G link speed reported on VF
      3d128f41b7 net/ixgbe/base: revert advertising for X550 2.5G/5G
      7ec2441a3e net/e1000/base: fix link power down
      4c8436297f net/ixgbe: do not create delayed interrupt handler twice
      f683115cef net/ixgbe: do not update link status in secondary process
      0fc2747f6c net/ice: fix VLAN stripping in double VLAN mode
      729144bdae net/fm10k: fix cleanup during init failure
      bb9096e474 net/iavf: fix VF reset when using DCF
      b6e445d0d4 eventdev/crypto: fix opaque field handling
      32c7c20981 event/sw: fix warning from useless snprintf
      614773e8c7 baseband/acc: fix memory barrier
      ac1bd05172 net/virtio: fix MAC table update
      eb821e0ed1 net/virtio-user: fix control queue allocation
      6e4de6f224 net/virtio-user: fix shadow control queue notification init
      1d824e440e net/virtio-user: fix control queue destruction
      2fdb8840ee vhost: cleanup resubmit info before inflight setup
      8c020a6f4d vhost: fix build with GCC 13
      1af612de7e hash: check name when creating a hash
      9616fce23b hash: fix return code description in Doxygen
      44bcfd6b38 net/nfp: fix xstats for multi PF firmware
      8bf40f1d11 app/testpmd: fix lcore ID restriction
      80c5c9789b net/iavf: remove outer UDP checksum offload for X710 VF
      1970a0ca45 net/i40e: fix outer UDP checksum offload for X710
      e8c2cccfbd net: fix outer UDP checksum in Intel prepare helper
      dda814c495 app/testpmd: fix outer IP checksum offload
      4d57f72a5b net/ice: fix check for outer UDP checksum offload
      c61b23292e net/axgbe: fix linkup in PHY status
      b7eddfc563 net/axgbe: delay AN timeout during KR training
      388f022054 net/axgbe: fix Tx flow on 30H HW
      e3632f6bbb net/axgbe: check only minimum speed for cables
      141a4ff6d5 net/axgbe: fix connection for SFP+ active cables
      4eda15db34 net/axgbe: fix SFP codes check for DAC cables
      d72913dcad net/axgbe: enable PLL control for fixed PHY modes only
      3cf40bf1c3 net/axgbe: disable RRC for yellow carp devices
      ec06a8c3d4 net/axgbe: disable interrupts during device removal
      a2be089e35 net/axgbe: update DMA coherency values
      17290bc90b net/axgbe: fix fluctuations for 1G Bel Fuse SFP
      a61b3c008a net/axgbe: reset link when link never comes back
      498a5720e3 net/axgbe: fix MDIO access for non-zero ports and CL45 PHYs
      dea5481a8f net/tap: fix file descriptor check in isolated flow
      c22f99f86c net/nfp: fix configuration BAR
      ab2e5cf865 net/nfp: fix resource leak in secondary process
      442ca8b2ec net/af_xdp: remove unused local statistic
      b0a4771394 net/af_xdp: fix stats reset
      fdda0d4d83 net/af_xdp: count mbuf allocation failures
      c6891273d3 net/af_xdp: fix port ID in Rx mbuf
      60f2e572ea doc: fix testpmd ring size command
      bd69f5a43d net/af_packet: align Rx/Tx structs to cache line
      e9da7f4655 net/vmxnet3: add missing register command
      e754c1c6d8 ethdev: fix strict aliasing in link up
      b1be619a77 net/af_xdp: fix multi-interface support for k8s
      3bbccce3a9 doc: fix AF_XDP device plugin howto
      02d2453afc net/hns3: disable SCTP verification tag for RSS hash input
      6e37e43fe3 net/hns3: fix variable overflow
      16a24e9f99 net/hns3: fix double free for Rx/Tx queue
      78e4da4546 net/hns3: fix Rx timestamp flag
      c491084749 net/hns3: fix offload flag of IEEE 1588
      beda536606 app/testpmd: fix indirect action flush
      dae924d0a2 net/bonding: fix failover time of LACP with mode 4
      453e0c281b net/nfp: fix representor port queue release
      83149f4fea latencystats: fix literal float suffix
      50b99c8b12 eal/windows: install sched.h file
      11af26df38 net/virtio-user: add memcpy check
      eb02060534 pcapng: add memcpy check
      2dd9223248 eal/unix: support ZSTD compression for firmware
      09e70301ee eal: fix type in destructor macro for MSVC
      338632b663 bus/pci: fix build with musl 1.2.4 / Alpine 3.19
      a6ec5765cf version: 23.11.1
      51783c9b60 version: 23.11.1-rc2
      152600d10e net/mlx5/hws: fix tunnel protocol checks
      67f3179f5c net/mlx5: fix rollback on failed flow configure
      750d393405 net/mlx5: fix async flow create error handling
      41c5baeffc net/mlx5/hws: fix port ID for root table
      cfa8a4cb90 net/ena/base: fix metrics excessive memory consumption
      a20a3c1129 dts: strip whitespaces from stdout and stderr
      abc6816134 examples/ipsec-secgw: fix typo in error message
      cf631810bf test/cfgfile: fix typo in error messages
      f48e923b46 test/power: fix typo in error message
      ed3a625fe6 doc: fix typo in packet framework guide
      e85092f875 doc: fix typo in profiling guide
      df1119d4a9 net/mlx5: fix sync flow meter action
      aeebcd33c0 net/mlx5/hws: fix memory access in L3 decapsulation
      0291a1f49e net/igc: fix timesync disable
      07fde8240d net/vmxnet3: ignore Rx queue interrupt setup on FreeBSD
      d2d309e5cf net/ena: fix mbuf double free in fast free mode
      f7d1b5cff3 app/testpmd: fix auto-completion for indirect action list
      4aa1a64204 net/nfp: fix uninitialized variable
      a5ac9baa7a doc: fix default IP fragments maximum in programmer guide
      f7909e3c75 examples/ipsec-secgw: fix Rx queue ID in Rx callback
      0a44e64c41 net/bnxt: fix number of Tx queues being created
      5a8ca987e9 net/mlx5: fix warning about copy length
      2864fd3102 net/mlx5: fix drop action release timing
      9aba4dee4d net/mlx5: fix age position in hairpin split
      fc12ccc047 net/mlx5: prevent ioctl failure log flooding
      8117b4b2f7 net/mlx5: fix flow configure validation
      b1749f6ed2 net/mlx5: fix template clean up of FDB control flow rule
      3735e8e88c net/mlx5/hws: fix direct index insert on depend WQE
      859bafedf3 net/mlx5: fix DR context release ordering
      9a9f0acac6 net/mlx5: fix IP-in-IP tunnels recognition
      c551015ebb net/mlx5: remove duplication of L3 flow item validation
      a8b06881d9 net/mlx5: fix meter policy priority
      78d38b5d67 net/mlx5: fix VLAN ID in flow modify
      f01fd28181 doc: update link to Windows DevX in mlx5 guide
      af41defcf7 net/mlx5: fix non-masked indirect list meter translation
      1994df02c9 net/mlx5: fix indirect action async job initialization
      7192f0ed82 net/mlx5: fix sync meter processing in HWS
      50eb03f8d3 net/mlx5: fix HWS meter actions availability
      fe697bbce3 net/hns3: support new device
      97089aa02e app/testpmd: fix error message for invalid option
      92c08367ea app/testpmd: fix burst option parsing
      6c2174ad80 app/testpmd: fix --stats-period option check
      0884b3bd36 net/nfp: fix initialization failure flow
      dd48153b15 net/nfp: fix switch domain free check
      aa850bad00 net/ena/base: restructure interrupt handling
      e1abac3de0 net/ena/base: limit exponential backoff
      2fa8497bd3 net/ena: fix fast mbuf free
      5f75adca7e net/nfp: fix IPsec data endianness
      bec3117648 net/nfp: fix getting firmware VNIC version
      5853ebb3b9 doc: add link speeds configuration in features table
      15952c71eb app/testpmd: fix async indirect action list creation
      166c5df810 doc: add traffic manager in features table
      cadb90f711 net/hns3: enable PFC for all user priorities
      72d3dfa9de crypto/qat: fix crash with CCM null AAD pointer
      90d0e13d7d examples/ipsec-secgw: fix cryptodev to SA mapping
      9796ac2ab8 build: pass cflags in subproject
      7105c8a299 net/virtio: fix vDPA device init advertising control queue
      587143897e examples/l3fwd: fix Rx queue configuration
      2f8836901c dts: fix smoke tests driver regex
      ce95b8c9cd examples/l3fwd: fix Rx over not ready port
      10296d5f50 examples/packet_ordering: fix Rx with reorder mode disabled
      e8dccbca30 test: do not count skipped tests as executed
      5c5df0f292 test: assume C source files are UTF-8 encoded
      de3976eb27 test/mbuf: fix external mbuf case with assert enabled
      ced51dd5ef config: fix CPU instruction set for cross-build
      6148604a43 bus/vdev: fix devargs in secondary process
      ef4c8a57f3 test: fix probing in secondary process
      272feb8eb9 net/mlx5: remove device status check in flow creation
      a10a65c396 net/mlx5: fix flow action template expansion
      0c31d1220f net/mlx5: fix counters map in bonding mode
      091234f3cb net/mlx5: fix flow counter cache starvation
      b90c42e4ff net/mlx5: fix parameters verification in HWS table create
      0198b11a11 net/mlx5: fix VLAN handling in meter split
      86c66608c2 net/mlx5/hws: enable multiple integrity items
      ca1084cd48 net/mlx5: fix HWS registers initialization
      527857d5c2 net/mlx5: fix connection tracking action validation
      1d65510ff6 net/mlx5: fix conntrack action handle representation
      a5d0545e5d net/mlx5: fix condition of LACP miss flow
      17f644b4a8 net/mlx5/hws: fix VLAN inner type
      99be466799 net/mlx5: prevent querying aged flows on uninit port
      bfa6cbba4c net/mlx5: fix error packets drop in regular Rx
      213cb88068 net/mlx5: fix use after free when releasing Tx queues
      a06ab8044a net/mlx5/hws: fix VLAN item in non-relaxed mode
      21d51e8848 net/mlx5/hws: check not supported fields in VXLAN
      b80ca5960e net/mlx5/hws: skip item when inserting rules by index
      2368f82fd8 doc: fix aging poll frequency option in cnxk guide
      630dbc8a92 net/cnxk: improve Tx performance for SW mbuf free
      37256aa1bf common/cnxk: fix possible out-of-bounds access
      9172348240 common/cnxk: remove dead code
      9cb9b9c8a0 common/cnxk: fix link config for SDP
      6f05d2d461 net/cnxk: fix mbuf fields in multi-segment Tx
      a6bd2f39c1 common/cnxk: fix mbox struct attributes
      e5450b2bba net/cnxk: add cookies check for multi-segment offload
      0e5159a223 net/cnxk: fix indirect mbuf handling in Tx
      6c6cd1fe53 common/cnxk: fix RSS RETA configuration
      f4c83ba01c net/cnxk: fix MTU limit
      3e73021b35 common/cnxk: fix Tx MTU configuration
      e71ac13a38 net/cnxk: fix buffer size configuration
      fbfaa5ae04 common/cnxk: remove CN9K inline IPsec FP opcodes
      b3ef799286 net/bnx2x: fix warnings about memcpy lengths
      2d11f389b0 net/cnxk: fix Rx packet format check condition
      8bc81d5447 common/cnxk: fix inline device pointer check
      dbdcd8bb85 net/ice: remove incorrect 16B descriptor read block
      72093d3d41 net/iavf: remove incorrect 16B descriptor read block
      542c8410cb net/i40e: remove incorrect 16B descriptor read block
      33b5bed057 net/ixgbe: increase VF reset timeout
      eefc0111de net/iavf: remove error logs for VLAN offloading
      2aa5a75750 net/ixgbevf: fix RSS init for x550 NICs
      a71de447a2 net/bnxt: fix null pointer dereference
      1d5bfd9fdf net/tap: fix traffic control handle calculation
      e9462a5690 net/tap: do not overwrite flow API errors
      4a1ffc9b02 app/testpmd: fix async flow create failure handling
      92ab2d6da2 app/testpmd: return if no packets in GRO heavy weight mode
      61ce57b13a net/mlx5: fix modify flex item
      4d1331e972 app/testpmd: fix flow modify tag typo
      c2d52df599 net/af_xdp: fix leak on XSK configuration failure
      b2dba501cf vhost: fix VDUSE device destruction failure
      af414b892d common/qat: fix legacy flag
      6cacd0e502 doc: fix typos in cryptodev overview
      14c38e2db1 app/crypto-perf: add missing op resubmission
      a1f1843146 app/crypto-perf: fix out-of-place mbuf size
      f0cfffc636 app/crypto-perf: fix copy segment size
      b2cd908926 eventdev/crypto: fix enqueueing
      e5ed464710 eventdev: fix Doxygen processing of vector struct
      2faf71417f eventdev: improve Doxygen comments on configure struct
      7721c9f498 test/event: fix crash in Tx adapter freeing
      524c60f422 event/dlb2: remove superfluous memcpy
      4e8d39a298 doc: fix configuration in baseband 5GNR driver guide
      b0b971bf66 23.11.1-rc1
      05bea47b81 app/testpmd: fix GRO packets flush on timeout
      cc670c7833 net/nfp: fix NFDk metadata process
      8e79562a0e net/nfp: fix NFD3 metadata process
      1f3f996269 net/mlx5: fix stats query crash in secondary process
      5982bea06b net/mlx5: fix GENEVE option item translation
      22653f6966 net/mlx5: remove GENEVE options length limitation
      06c494555f common/mlx5: fix query sample info capability
      10061b4047 common/mlx5: fix duplicate read of general capabilities
      1825629903 net/mlx5: fix GENEVE TLV option management
      c3eb862979 net/mlx5/hws: fix ESP flow matching validation
      d25716a8a0 net/mlx5: fix flow tag modification
      7c8f2e719a net/mlx5: fix jump action validation
      01c5db8d99 net/cnxk: fix aged flow query
      ecdb679c52 common/cnxk: fix VLAN check for inner header
      4f69dab88c common/cnxk: fix mbox region copy
      0e5798d30b net/thunderx: fix DMAC control register update
      874fd28866 net/cnxk: fix flow RSS configuration
      f047cea926 ml/cnxk: fix xstats calculation
      a77f545bd7 net/bnxt: fix deadlock in ULP timer callback
      d9e1762f07 net/bnxt: modify locking for representor Tx
      c26cb2a644 net/bnxt: fix backward firmware compatibility
      1fb50b8baa net/bnxt: fix speed change from 200G to 25G on Thor
      e1f8152ede net/bnxt: fix 50G and 100G forced speed
      3fa018b15a net/bnxt: fix array overflow
      c3ccbda492 net/netvsc: fix VLAN metadata parsing
      de2d362411 net: add macros for VLAN metadata parsing
      561a3f508f net/gve: fix DQO for chained descriptors
      de543e342a net/softnic: fix include of log library
      edaeda9ef7 net/memif: fix extra mbuf refcnt update in zero copy Tx
      c7b50f40e1 common/sfc_efx/base: use C11 static assert
      216918c28c net/mana: handle MR cache expansion failure
      6679de7a8f net/mana: fix memory leak on MR allocation
      3fb4840708 net/bonding: fix flow count query
      1ce60b941d net/ionic: fix device close
      9583f634f3 net/ionic: fix RSS query
      2ea5bde557 net/ionic: fix missing volatile type for cqe pointers
      49b4ce1f94 app/testpmd: fix crash in multi-process forwarding
      db4ba50b3a drivers/net: fix buffer overflow for packet types list
      7de2520f2d net/mana: prevent values overflow returned from RDMA layer
      84e9d93f57 net/nfp: free switch domain ID on close
      a581442d9b net/nfp: fix device resource freeing
      52bd57a03b net/nfp: fix device close
      c65a2bfc26 net/vmxnet3: fix initialization on FreeBSD
      edc0e91ffc app/testpmd: hide --bitrate-stats in help if disabled
      ec2260423e doc: add --latencystats option in testpmd guide
      e670d64d34 net/hns3: remove QinQ insert support for VF
      48fe88cb3c net/nfp: fix Rx descriptor
      e024c471f9 net/nfp: fix Rx memory leak
      cb1cef89c4 net/hns3: fix reset level comparison
      a3584fcde6 net/hns3: fix disable command with firmware
      48d9241bbd net/hns3: fix VF multiple count on one reset
      8abf8591dc net/hns3: refactor handle mailbox function
      1be4ad59be net/hns3: refactor send mailbox function
      f876981e54 net/hns3: refactor PF mailbox message struct
      c1c62366ed net/hns3: refactor VF mailbox message struct
      9cf299a873 net/memif: fix crash with Tx burst larger than 255
      01809245ba net/af_xdp: fix memzone leak on config failure
      c2a5c0d085 net/nfp: fix resource leak for VF
      ddeb9d64a9 net/nfp: fix resource leak for exit of flower firmware
      e65a677895 net/nfp: fix resource leak for exit of CoreNIC firmware
      09e1df883a net/nfp: fix resource leak for flower firmware
      02916557c1 net/nfp: fix resource leak for PF initialization
      1d53d5495b net/nfp: fix resource leak for CoreNIC firmware
      f2ee31d52c net/nfp: fix resource leak for device initialization
      8610d2715d ethdev: fix NVGRE encap flow action description
      d06a344524 doc: fix commands in eventdev test tool guide
      9350513462 test/event: skip test if no driver is present
      6ccd84cf16 event/cnxk: fix dequeue timeout configuration
      b7fd1f73fe app/crypto-perf: fix encrypt operation verification
      04d9dfd665 app/crypto-perf: fix data comparison
      dfc9d45365 app/crypto-perf: fix next segment mbuf
      8988726643 crypto/cnxk: fix CN9K ECDH public key verification
      ea096d3e48 common/cnxk: fix memory leak in CPT init
      f5d6c54154 examples/ipsec-secgw: fix width of variables
      96d48b5b40 cryptodev: remove unused extern variable
      e951bbbd18 vhost: fix memory leak in Virtio Tx split path
      19f0cf0927 vdpa/mlx5: fix queue enable drain CQ
      5eb1dd92dc vhost: fix deadlock during vDPA SW live migration
      33fbddf9a4 net/virtio: remove duplicate queue xstats
      c8e7cd6c6d vhost: fix virtqueue access check in vhost-user setup
      692a7a0034 vhost: fix virtqueue access check in VDUSE setup
      bbba917213 vhost: fix virtqueue access check in datapath
      c139df70dd net: fix TCP/UDP checksum with padding data
      c30a4f8b31 rcu: fix acked token in debug log
      94b20c14a6 rcu: use atomic operation on acked token
      8878a84e2e build: link static libs with whole-archive in subproject
      5e24d7f2de build: fix linker warnings about undefined symbols
      63241d7662 net/sfc: fix calloc parameters
      acad009eed net/nfp: fix calloc parameters
      238a03cdec net/bnx2x: fix calloc parameters
      e3ae3295ee common/mlx5: fix calloc parameters
      7c10528d68 rawdev: fix calloc parameters
      ad881b0db8 dmadev: fix calloc parameters
      9173abff75 eventdev: fix calloc parameters
      600e30b793 pipeline: fix calloc parameters
      5331b41382 examples/vhost: verify strdup return
      88f1c9af33 examples/qos_sched: fix memory leak in args parsing
      fbd04d26f3 test: verify strdup return
      c830d9e2af app/testpmd: verify strdup return
      8d5327fcfd app/dma-perf: verify strdup return
      fefe40a5ed app/crypto-perf: verify strdup return
      e0fd44c6ab app/pdump: verify strdup return
      1387327fa4 app/dumpcap: verify strdup return
      c6790ef542 net/nfp: verify strdup return
      2044a179a7 net/failsafe: fix memory leak in args parsing
      cedf721f24 event/cnxk: verify strdup return
      df74839ea1 dma/idxd: verify strdup return
      b4943e7a51 bus/vdev: verify strdup return
      82d4ba69f2 bus/fslmc: verify strdup return
      8c8e7aeb90 bus/dpaa: verify strdup return
      2feed5de50 eal: verify strdup return
      bb34c79bf4 doc: remove cmdline polling mode deprecation notice
      5f30c47cc5 eal/x86: add AMD vendor check for TSC calibration
      a9e8fc49d9 ci: update versions of actions in GHA
      d7a30d20c4 gro: fix reordering of packets
      b5c580913f telemetry: fix empty JSON dictionaries
      cbd1c165bb telemetry: fix connected clients count
      d7dc480432 app/graph: fix build reason
      7872a7b0bd build: fix reasons conflict
      54e4045c78 kernel/freebsd: fix module build on FreeBSD 14
      943de5c27e net/ice: fix memory leaks
      9aa2da4c02 net/iavf: fix crash on VF start
      0a72821dd9 net/iavf: fix no polling mode switching
      c321ba6a9d net/ice: fix tunnel TSO capabilities
      48efa16873 net/ice: fix link update
      c655f20c8f net/ixgbe: fix memoy leak after device init failure
      3defa10a78 net/iavf: fix memory leak on security context error
      ca47a866b5 net/i40e: remove redundant judgment in flow parsing
      ec5fe01a28 dma/dpaa2: fix logtype register
      fd6f07da94 lib: remove redundant newline from logs
      ec5e780f09 lib: add newline in logs
      e421bcd708 lib: use dedicated logtypes and macros
      f1e3dec4b4 regexdev: fix logtype register
      dc0428a5e4 hash: remove some dead code
      2c512fe65a buildtools/cmdline: fix IP address initializer
      3cedd8b9e4 buildtools/cmdline: fix generated code for IP addresses


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-57
changelog:
  - Merging upstream branch-3.3 [RH git: 7e02cc5483]
      Commit list:
      f1b70cb48d meta-flow: Fix nw_frag mask while parsing from string.
      1fbb050141 ci: Remove dependency on libpcap.
      a9db0f3177 github: Remove ASLR entropy workaround.
      4f7c8c2592 bond: Always revalidate unbalanced bonds when active member changes. (FDP-845)
      a9e40e3227 ofproto-dpif-upcall: Fix redundant mirror on metadata modification. (FDP-699)


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-58
changelog:
  - Merging upstream branch-3.3 [RH git: a7940d36e8]
      Commit list:
      f872d79c9d ipsec: libreswan: Reduce chances for crossing streams.
      d7f5090848 tests: ipsec: Check that nodes can ping each other in the NxN test.
      6e2cfd3add tests: ipsec: Add NxN + reconciliation test.
      641cba7027 system-tests: Verbose cleanup of ports and namespaces.
      63a753b758 ipsec: Make command timeout configurable.
      ace5640c9f ipsec: libreswan: Avoid monitor hanging on stuck ipsec commands. (FDP-846)
      461a3247e6 ipsec: libreswan: Try to bring non-active connections up.
      d8856e9c14 ipsec: libreswan: Reconcile missing connections periodically.
      6df9627305 ipsec: libreswan: Fix regexp for connections waiting on child SA.
      eb30c1bbee ipsec: Add a helper function to run commands from the monitor.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-59
changelog:
  - Merging upstream branch-3.3 [RH git: 4bd7df7dc6]
      Commit list:
      c51063b552 ci: Update GitHub actions runner from Ubuntu 22.04 to 24.04.
      9944e864ea dpdk: Fix dpdk logs being split over multiple lines.


author: Dumitru Ceara <dceara@redhat.com> - 23.09.0-106
changelog:
  - Sync to upstream OVN branch-23.09. Below are the commits
  since last update (23.09.0-100)
  - northd: Make sure that affinity flows match on VIP.
  [Upstream: 859e8d917408d50272c910f78ac44ab8a593aa13]

  - Fix segfault due to ssl-ciphers.
  [Upstream: d39e7c0068ecc719a3d6154e2078d6d9a3435fc9]

  - ovn: Add tunnel PMTUD support. (#2241711)
  [Upstream: 6d2f9d60760a793c15ca7423b24ff586b653fc76]

  - controller: fixed potential segfault when changing tunnel_key and deleting ls.
  [Upstream: 120075357a624293d52a1905c47a1bd249d2157c]

  - northd: Use proper field for lookup_nd
  [Upstream: 8e25c1c37aa3301f69bc89ee49ffaef5aa2f76fd]

  - checkpatch.py: Port checkpatch related changes from the OVS repo.
  [Upstream: bf334c65e1ead50013880049564d445919aee61f]


author: Numan Siddique <numans@ovn.org> - 23.09.0-109
changelog:
  - Sync to upstream OVN branch-23.09. Below are the commits
  since last update (23.09.0-106)
  - ovs: Bump submodule to tip of OVS branch-3.2.
  [Upstream: f224c6e5f69c099ddb008f99dba2e19a902a612f]
  - actions: Use random port selection for SNAT with external_port_range.
  [Upstream: 7ee483a45df19e11e26487e64a93940e0de64b9a]
  - ovn-ic: Handle NB:name updates properly.
  [Upstream: 0e684ec206e8979694912ad1037145ccd0d0b7dc]


author: Dumitru Ceara <dceara@redhat.com> - 23.09.0-112
changelog:
  - Sync to upstream OVN branch-23.09. Below are the commits since
  last update (23.09.0-109)
  - northd: Remove the protocol match from ECMP symmetric reply flows.
  [Upstream: a36f2955be67a6581e81fb3ae27de825e0046b52]
  - northd: Explicitly handle SNAT for ICMP need frag.
  [Upstream: 6a4c412f43d5f1c076fac3784a4ffeb8a3861436]
  - actions: Adjust the ct_commit_nat action.
  [Upstream: 069842478601c0b01b0cc3117637e5a00344fcb6]


author: Numan Siddique <numans@ovn.org> - 23.09.0-131
changelog:
  - Sync to upstream OVN branch-23.09. Below are the commits since
  last update (23.09.0-109)

  - northd: Don't create fair Sb meters for ACLs with logging disabled.
  [Upstream: 215d53ea1436f03ab26a1a65df0824b319e6a4c3]

  - ci: Update crun in GitHub actions runner.
  [Upstream: 5bf1773c90ef7b61a85946027a987184e8d74fa0]

  - ci: Update crun in Cirrus CI cloud image.
  [Upstream: afa3da7677ed4d484612b820d8f09642d5821bd4]

  - controller: ofctrl: Use index for meter lookups.
  [Upstream: 683fb6dd2fc3c2ab025b1dd87ba2883e40d6d775]

  - tests: Fix "router port type update and then ...".
  [Upstream: c463d1de1a0c2cd368a4809f0d9eda9792b79851]

  - tests: Fix "ovn-controller - Chassis other_config".
  [Upstream: cbd4f2fcd0223a96c739dd07eded753f8f9b2a30]

  - tests: Fix "ofctrl wait before clearing flows".
  [Upstream: 81486b62bcac0d081ca907533ae34d826605b485]

  - tests: Fix flaky "ovn-controller-vtep - binding 1".
  [Upstream: 48a08a447340b095e8472d40aaaac5156320b4c1]

  - tests: Fix flaky "options:requested-chassis ...".
  [Upstream: a088df5aa75a7207ccdd751d2167e1536113737f]

  - tests: Fix typos in tests.
  [Upstream: 0a5726652b202add51d1dc8b6557268673e6cc51]

  - tests: Have tests fail when adding veth peer fails.
  [Upstream: 609a943e33c734d368f2019e7d3b41e31bb31d6f]

  - pinctrl: dns: Ignore additional records.
  [Upstream: 511f5a214226be84ae3b9434ffcab973e37295eb]

  - ovn-ic: Fix global blacklist filter for IPv6 addresses.
  [Upstream: 27d23712260b9faba23018ce973010743e30ccf7]

  - tests: Fix macro OVN_CHECK_PACKETS_CONTAIN.
  [Upstream: 28b0eddff68c5a64b80071a9a27cb79e3fac792a]

  - features.c: Always wait on the rconn.
  [Upstream: c0c9e507470439c3220b99c361f71e0cff3406fc]

  - ci: Bump CirrusCI Ubuntu image version
  [Upstream: 41e7f01872dae61b9ffcc1d3871865313ff90619]

  - Documentation: Fix broken links in ovn-sandbox.rst.
  [Upstream: 99d22a176f45971516803129f08c7a37a50bc4a1]

  - ovn-sb.xml: Remove IPv4-only restriction from Service Monitors.
  [Upstream: 97fca0f846bf6839144fc04fed6f0873198b4f89]

  - github: Update versions of action dependencies (Node.js 20).
  [Upstream: 2981936b61e0e0694c16df979b986dd1cb60b147]


author: Numan Siddique <numans@ovn.org> - 23.09.0-139
changelog:
  - github: Reduce ASLR entropy to be compatible with asan in llvm 14.
  [Upstream: 835b43811dfcf469da3123911240cc953b52bac3]

  - Prepare for 23.09.4.
  [Upstream: 5ce1740aaa02ebeed561ffb6298b71035b5c908a]

  - Set release date for 23.09.3.
  [Upstream: fbdc94d4309f28ad59e41025ff42945478dd12cc]

  - controller: Set check_tnl_key for BFD on tunnel ifaces.
  [Upstream: c966c35f1b1cd8c5351ccac3051843fbf765c2ae]

  - tests: Skip EDNS test if the scapy version doesn't support it.
  [Upstream: 7af89a5e50a4ba75a3ea5c393499f1e0fa0a6abb]

  - northd: Don't skip the unSNAT stage for traffic towards VIPs.
  [Upstream: 094b1217345a8ae5935fdd4dfec4949f46197377]

  - Prepare for 23.09.3.
  [Upstream: 7bd52d7a25f2ddad0be25a5e54a3eb63d98a19d8]

  - Set release date for 23.09.2.
  [Upstream: 04b23938302ad54f453f622a4b0c2fa5e27d3e41]


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-2
changelog:
  - udp: Actually use host resolver to forward DNS queries (rhbz#2177075)
  - conf: Split add_dns{4,6}() out of get_dns() (rhbz#2177075)
  - conf, udp: Allow any loopback address to be used as resolver (rhbz#2177075)
  - tcp, tcp_splice: Get rid of false positive CWE-394 Coverity warning from fls() (rhbz#2177084)
  - tcp: Avoid false (but convoluted) positive Coverity CWE-476 warning (rhbz#2177084)
  - tcp: Avoid (theoretical) resource leak (CWE-772) Coverity warning (rhbz#2177084)
  - Fix definitions of SOCKET_MAX, TCP_MAX_CONNS (rhbz#2177084)
  - doc/demo: Fix and suppress ShellCheck warnings (rhbz#2177084)
  - contrib/selinux: Drop duplicate init_daemon_domain() rule (rhbz#2176813)
  - contrib/selinux: Let passt write to stdout and stderr when it starts (rhbz#2176813)
  - contrib/selinux: Allow binding and connecting to all UDP and TCP ports (rhbz#2176813)
  - contrib/selinux: Let interface users set paths for log, PID, socket files (rhbz#2176813)
  - contrib/selinux: Drop "example" from headers: this is the actual policy (rhbz#2176813)
  - contrib/selinux: Drop unused passt_read_data() interface (rhbz#2176813)
  - contrib/selinux: Split interfaces into smaller bits (rhbz#2176813)
  - fedora: Install SELinux interface files to shared include directory (rhbz#2176813)
  - tcp, udp, util: Pass socket creation errors all the way up (rhbz#2177080)
  - tcp, udp: Fix partial success return codes in {tcp,udp}_sock_init() (rhbz#2177080)
  - conf: Terminate on EMFILE or ENFILE on sockets for port mapping (rhbz#2177080)
  - tcp: Clamp MSS value when queueing data to tap, also for pasta (rhbz#2177083)
  - Fix up SELinux labels on install/uninstall, require matching -selinux package (rhbz#2176813)
  - Resolves: rhbz#2177075 rhbz#2177084 rhbz#2177080 rhbz#2177083 rhbz#2176813


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-3
changelog:
  - Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089)
  - Don't install useless SELinux interface file for pasta (rhbz#2183106)


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-4
changelog:
  - Drop (pointless) patches 20, 21, 22, actually apply changes to the spec file!
  - Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089)
  - Don't install useless SELinux interface file for pasta (rhbz#2183106)


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-2
changelog:
  - Drop user_namespace create allow rule, incompatible with current el9 kernel
  - Resolves: RHELPLAN-155811


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-3
changelog:
  - Explicit restorecon in scriptlet as rpm(8) mix up contexts with hard links
  - Resolves: RHELPLAN-155811


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-4
changelog:
  - Switch to copies instead of links for pasta: previous workaround unreliable
  - Resolves: RHELPLAN-155811


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-1
changelog:
  - Rebased to libvirt-python-8.5.0 (rhbz#2060316)
  - The rebase also fixes the following bugs:
      rhbz#2092752


author: Charalampos Stratakis <cstratak@redhat.com> - 1:3.4.3-7
changelog:
  - Obsolete and provide the python-sphinx-locale package to fix the upgrade path
  Related: rhbz#1985219


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-8
changelog:
  - kvm-introduce-pc_rhel_9_5_compat.patch [RHEL-39544]
  - kvm-target-i386-add-guest-phys-bits-cpu-property.patch [RHEL-39544]
  - kvm-kvm-add-support-for-guest-physical-bits.patch [RHEL-39544]
  - kvm-i386-kvm-Move-architectural-CPUID-leaf-generation-to.patch [RHEL-39544]
  - kvm-target-i386-Introduce-Icelake-Server-v7-to-enable-TS.patch [RHEL-39544]
  - kvm-target-i386-Add-new-CPU-model-SierraForest.patch [RHEL-39544]
  - kvm-target-i386-Export-RFDS-bit-to-guests.patch [RHEL-39544]
  - kvm-pci-host-q35-Move-PAM-initialization-above-SMRAM-ini.patch [RHEL-39544]
  - kvm-q35-Introduce-smm_ranges-property-for-q35-pci-host.patch [RHEL-39544]
  - kvm-hw-i386-acpi-Set-PCAT_COMPAT-bit-only-when-pic-is-no.patch [RHEL-39544]
  - kvm-confidential-guest-support-Add-kvm_init-and-kvm_rese.patch [RHEL-39544]
  - kvm-i386-sev-Switch-to-use-confidential_guest_kvm_init.patch [RHEL-39544]
  - kvm-ppc-pef-switch-to-use-confidential_guest_kvm_init-re.patch [RHEL-39544]
  - kvm-s390-Switch-to-use-confidential_guest_kvm_init.patch [RHEL-39544]
  - kvm-scripts-update-linux-headers-Add-setup_data.h-to-imp.patch [RHEL-39544]
  - kvm-scripts-update-linux-headers-Add-bits.h-to-file-impo.patch [RHEL-39544]
  - kvm-linux-headers-update-to-current-kvm-next.patch [RHEL-39544]
  - kvm-runstate-skip-initial-CPU-reset-if-reset-is-not-actu.patch [RHEL-39544]
  - kvm-KVM-track-whether-guest-state-is-encrypted.patch [RHEL-39544]
  - kvm-KVM-remove-kvm_arch_cpu_check_are_resettable.patch [RHEL-39544]
  - kvm-target-i386-introduce-x86-confidential-guest.patch [RHEL-39544]
  - kvm-target-i386-Implement-mc-kvm_type-to-get-VM-type.patch [RHEL-39544]
  - kvm-target-i386-SEV-use-KVM_SEV_INIT2-if-possible.patch [RHEL-39544]
  - kvm-i386-sev-Add-legacy-vm-type-parameter-for-SEV-guest-.patch [RHEL-39544]
  - kvm-hw-i386-sev-Use-legacy-SEV-VM-types-for-older-machin.patch [RHEL-39544]
  - kvm-trace-kvm-Split-address-space-and-slot-id-in-trace_k.patch [RHEL-39544]
  - kvm-kvm-Introduce-support-for-memory_attributes.patch [RHEL-39544]
  - kvm-RAMBlock-Add-support-of-KVM-private-guest-memfd.patch [RHEL-39544]
  - kvm-kvm-Enable-KVM_SET_USER_MEMORY_REGION2-for-memslot.patch [RHEL-39544]
  - kvm-kvm-memory-Make-memory-type-private-by-default-if-it.patch [RHEL-39544]
  - kvm-HostMem-Add-mechanism-to-opt-in-kvm-guest-memfd-via-.patch [RHEL-39544]
  - kvm-RAMBlock-make-guest_memfd-require-uncoordinated-disc.patch [RHEL-39544]
  - kvm-physmem-Introduce-ram_block_discard_guest_memfd_rang.patch [RHEL-39544]
  - kvm-kvm-handle-KVM_EXIT_MEMORY_FAULT.patch [RHEL-39544]
  - kvm-kvm-tdx-Don-t-complain-when-converting-vMMIO-region-.patch [RHEL-39544]
  - kvm-kvm-tdx-Ignore-memory-conversion-to-shared-of-unassi.patch [RHEL-39544]
  - kvm-hw-i386-x86-Eliminate-two-if-statements-in-x86_bios_.patch [RHEL-39544]
  - kvm-hw-i386-Have-x86_bios_rom_init-take-X86MachineState-.patch [RHEL-39544]
  - kvm-hw-i386-pc_sysfw-Remove-unused-parameter-from-pc_isa.patch [RHEL-39544]
  - kvm-hw-i386-x86-Don-t-leak-isa-bios-memory-regions.patch [RHEL-39544]
  - kvm-hw-i386-x86-Don-t-leak-pc.bios-memory-region.patch [RHEL-39544]
  - kvm-hw-i386-x86-Extract-x86_isa_bios_init-from-x86_bios_.patch [RHEL-39544]
  - kvm-hw-i386-pc_sysfw-Alias-rather-than-copy-isa-bios-reg.patch [RHEL-39544]
  - kvm-i386-correctly-select-code-in-hw-i386-that-depends-o.patch [RHEL-39544]
  - kvm-i386-pc-remove-unnecessary-MachineClass-overrides.patch [RHEL-39544]
  - kvm-hw-i386-split-x86.c-in-multiple-parts.patch [RHEL-39544]
  - kvm-scripts-update-linux-header.sh-be-more-src-tree-frie.patch [RHEL-39544]
  - kvm-scripts-update-linux-headers.sh-Remove-temporary-dir.patch [RHEL-39544]
  - kvm-scripts-update-linux-headers.sh-Fix-the-path-of-setu.patch [RHEL-39544]
  - kvm-update-linux-headers-fix-forwarding-to-asm-generic-h.patch [RHEL-39544]
  - kvm-update-linux-headers-move-pvpanic.h-to-correct-direc.patch [RHEL-39544]
  - kvm-linux-headers-Update-to-current-kvm-next.patch [RHEL-39544]
  - kvm-update-linux-headers-import-linux-kvm_para.h-header.patch [RHEL-39544]
  - kvm-machine-allow-early-use-of-machine_require_guest_mem.patch [RHEL-39544]
  - kvm-i386-sev-Replace-error_report-with-error_setg.patch [RHEL-39544]
  - kvm-i386-sev-Introduce-sev-common-type-to-encapsulate-co.patch [RHEL-39544]
  - kvm-i386-sev-Move-sev_launch_update-to-separate-class-me.patch [RHEL-39544]
  - kvm-i386-sev-Move-sev_launch_finish-to-separate-class-me.patch [RHEL-39544]
  - kvm-i386-sev-Introduce-sev-snp-guest-object.patch [RHEL-39544]
  - kvm-i386-sev-Add-a-sev_snp_enabled-helper.patch [RHEL-39544]
  - kvm-i386-sev-Add-sev_kvm_init-override-for-SEV-class.patch [RHEL-39544]
  - kvm-i386-sev-Add-snp_kvm_init-override-for-SNP-class.patch [RHEL-39544]
  - kvm-i386-cpu-Set-SEV-SNP-CPUID-bit-when-SNP-enabled.patch [RHEL-39544]
  - kvm-i386-sev-Don-t-return-launch-measurements-for-SEV-SN.patch [RHEL-39544]
  - kvm-i386-sev-Add-a-class-method-to-determine-KVM-VM-type.patch [RHEL-39544]
  - kvm-i386-sev-Update-query-sev-QAPI-format-to-handle-SEV-.patch [RHEL-39544]
  - kvm-i386-sev-Add-the-SNP-launch-start-context.patch [RHEL-39544]
  - kvm-i386-sev-Add-handling-to-encrypt-finalize-guest-laun.patch [RHEL-39544]
  - kvm-i386-sev-Set-CPU-state-to-protected-once-SNP-guest-p.patch [RHEL-39544]
  - kvm-hw-i386-sev-Add-function-to-get-SEV-metadata-from-OV.patch [RHEL-39544]
  - kvm-i386-sev-Add-support-for-populating-OVMF-metadata-pa.patch [RHEL-39544]
  - kvm-i386-sev-Add-support-for-SNP-CPUID-validation.patch [RHEL-39544]
  - kvm-hw-i386-sev-Add-support-to-encrypt-BIOS-when-SEV-SNP.patch [RHEL-39544]
  - kvm-i386-sev-Invoke-launch_updata_data-for-SEV-class.patch [RHEL-39544]
  - kvm-i386-sev-Invoke-launch_updata_data-for-SNP-class.patch [RHEL-39544]
  - kvm-i386-kvm-Add-KVM_EXIT_HYPERCALL-handling-for-KVM_HC_.patch [RHEL-39544]
  - kvm-i386-sev-Enable-KVM_HC_MAP_GPA_RANGE-hcall-for-SNP-g.patch [RHEL-39544]
  - kvm-i386-sev-Extract-build_kernel_loader_hashes.patch [RHEL-39544]
  - kvm-i386-sev-Reorder-struct-declarations.patch [RHEL-39544]
  - kvm-i386-sev-Allow-measured-direct-kernel-boot-on-SNP.patch [RHEL-39544]
  - kvm-memory-Introduce-memory_region_init_ram_guest_memfd.patch [RHEL-39544]
  - kvm-hw-i386-sev-Use-guest_memfd-for-legacy-ROMs.patch [RHEL-39544]
  - kvm-hw-i386-Add-support-for-loading-BIOS-using-guest_mem.patch [RHEL-39544]
  - kvm-i386-sev-fix-unreachable-code-coverity-issue.patch [RHEL-39544]
  - kvm-i386-sev-Move-SEV_COMMON-null-check-before-dereferen.patch [RHEL-39544]
  - kvm-i386-sev-Return-when-sev_common-is-null.patch [RHEL-39544]
  - kvm-target-i386-SEV-fix-formatting-of-CPUID-mismatch-mes.patch [RHEL-39544]
  - kvm-i386-sev-Fix-error-message-in-sev_get_capabilities.patch [RHEL-39544]
  - kvm-i386-sev-Fallback-to-the-default-SEV-device-if-none-.patch [RHEL-39544]
  - kvm-i386-sev-Don-t-allow-automatic-fallback-to-legacy-KV.patch [RHEL-39544]
  - kvm-target-i386-SEV-fix-mismatch-in-vcek-disabled-proper.patch [RHEL-39544]
  - kvm-virtio-rng-block-max-bytes-0.patch [RHEL-50336]
  - kvm-scsi-disk-Use-positive-return-value-for-status-in-dm.patch [RHEL-50000]
  - kvm-scsi-block-Don-t-skip-callback-for-sgio-error-status.patch [RHEL-50000]
  - kvm-scsi-disk-Add-warning-comments-that-host_status-erro.patch [RHEL-50000]
  - kvm-scsi-disk-Always-report-RESERVATION_CONFLICT-to-gues.patch [RHEL-50000]
  - kvm-nbd-server-Plumb-in-new-args-to-nbd_client_add.patch [RHEL-52617]
  - kvm-nbd-server-CVE-2024-7409-Cap-default-max-connections.patch [RHEL-52617]
  - kvm-nbd-server-CVE-2024-7409-Drop-non-negotiating-client.patch [RHEL-52617]
  - kvm-nbd-server-CVE-2024-7409-Close-stray-clients-at-serv.patch [RHEL-52617]
  - Resolves: RHEL-39544
    ([QEMU] Add support for AMD SEV-SNP to Qemu)
  - Resolves: RHEL-50336
    (Fail to boot up the guest including vtpm and virtio-rng (max-bytes=0) devices)
  - Resolves: RHEL-50000
    (scsi-block: Cannot setup Windows Failover Cluster, qemu crashes on assert)
  - Resolves: RHEL-52617
    (CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-9.5])


author: Jean-Marc Liger <ligenix@iscp.fr> - 9.0.0-8.el9_spice
changelog:
  - Rebuild with SPICE, VirGLrenderer, GL and IVSHMEM support for aarch64 and x86_64
  - Rebuild with gluster, iscsi, ssh block driver support


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-9
changelog:
  - kvm-qemu-guest-agent-Update-the-logfile-path-of-qga-fsfr.patch [RHEL-52250]
  - Resolves: RHEL-52250
    (fsfreeze hooks break on the systems first restorecon)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-10
changelog:
  - kvm-nbd-server-CVE-2024-7409-Avoid-use-after-free-when-c.patch [RHEL-52617]
  - Resolves: RHEL-52617
    (CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-9.5])


author: Michael Stauber <mstauber@solarspeed.net> - 9.0.0-11.el9_spice
changelog:
  - Rebuild with --enable-virtfs for Incus usage
  - Added 0999-qemu_9p_support.patch to add CONFIG_VIRTIO_9P=y to both
    configs/devices/x86_64-softmmu/x86_64-rh-devices.mak and 
    configs/devices/rh-virtio.mak


author: Michael Stauber <mstauber@solarspeed.net> - 9.0.0-12.el9_spice
changelog:
  - Modified 0999-qemu_9p_support.patch to add CONFIG_VIRTIO_SERIAL=y to both
    configs/devices/x86_64-softmmu/x86_64-rh-devices.mak and 
    configs/devices/rh-virtio.mak


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.6-9
changelog:
  - Add package to EPEL 9, keep it synched with Fedora Rawhide.
  - Use qemu-kvm package on EPEL.
  - Remove comment about armv7, no longer applicable on Fedora.


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.0-4
changelog:
  - seabios-virtio-blk-use-larger-default-request-size.patch [bz#2108555]
  - Resolves: bz#2108555
    ([rhel.9.1] Loading a kernel/initrd is sometimes very slow)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-1
changelog:
  - Rebase to 1.16.3 [RHEL-19239]
  - Removed vgabios-qxl.bin [RHEL-383]
  - Resolves: RHEL-19239
    (Rebase seabios to 1.16.3)
  - Resolves: RHEL-383
    (remove vgabios-qxl.bin from seavgabios in rhel9)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-2
changelog:
  - seabios-add-hwerr_printf-function-for-threads.patch [RHEL-7110]
  - seabios-display-error-message-for-blocksizes-512.patch [RHEL-7110]
  - Resolves: RHEL-7110
    ([seabios] Can't boot from a disk with 4K sector size)


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60.2
   - i/builtin: allow directories in private /dev/shm
   - i/builtin: add read access to /proc/task/schedstat in system-
     observe
   - snap-bootstrap: print version information at startup
   - go.mod: update gopkg.in/yaml.v3 to v3.0.1 to fix CVE-2022-28948
   - snap, store: filter out invalid snap edited links from store info
     and persisted state
   - o/configcore: write netplan defaults to 00-snapd-config on seeding
   - snapcraft.yaml: pull in apparmor_parser optimization patches from
     https://gitlab.com/apparmor/apparmor/-/merge_requests/711
   - snap-confine: fix missing \0 after readlink
   - cmd/snap: hide append-integrity-data
   - interfaces/opengl: add support for ARM Mali


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60.3
   - i/b/shared-memory: handle "private" plug attribute in shared-
     memory interface correctly
   - i/apparmor: support for home.d tunables from /etc/


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60.4
   - i/b/qualcomm_ipc_router.go: switch to plug/slot and add socket
     permission
   - interfaces/builtin: fix custom-device udev KERNEL values
   - overlord: allow the firmware-updater snap to install user daemons
   - interfaces: allow loopback as a block-device


author: Philip Meulengracht <philip.meulengracht@canonical.com>
changelog:
  - New upstream release 2.61
   - Fix control of activated services in 'snap start' and 'snap stop'
   - Correctly reflect activated services in 'snap services'
   - Disabled services are no longer enabled again when snap is
     refreshed
   - interfaces/builtin: added support for Token2 U2F keys
   - interfaces/u2f-devices: add Swissbit iShield Key
   - interfaces/builtin: update gpio apparmor to match pattern that
     contains multiple subdirectories under /sys/devices/platform
   - interfaces: add a polkit-agent interface
   - interfaces: add pcscd interface
   - Kernel command-line can now be edited in the gadget.yaml
   - Only track validation-sets in run-mode, fixes validation-set
     issues on first boot.
   - Added support for using store.access to disable access to snap
     store
   - Support for fat16 partition in gadget
   - Pre-seed authority delegation is now possible
   - Support new system-user name  daemon
   - Several bug fixes and improvements around remodelling
   - Offline remodelling support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.1
   - Stop requiring default provider snaps on image building and first
     boot if alternative providers are included and available
   - Fix auth.json access for login as non-root group ID
   - Fix incorrect remodelling conflict when changing track to older
     snapd version
   - Improved check-rerefresh message
   - Fix UC16/18 kernel/gadget update failure due volume mismatch with
     installed disk
   - Stop auto-import of assertions during install modes
   - Desktop interface exposes GetIdletime
   - Polkit interface support for new polkit versions
   - Fix not applying snapd snap changes in tracked channel when remodelling


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.2
   - Fix to enable plug/slot sanitization for prepare-image
   - Fix panic when device-service.access=offline
   - Support offline remodeling
   - Allow offline update only remodels without serial
   - Fail early when remodeling to old model revision
   - Fix to enable plug/slot sanitization for validate-seed
   - Allow removal of core snap on classic systems
   - Fix network-control interface denial for file lock on /run/netns
   - Add well-known core24 snap-id
   - Fix remodel snap installation order
   - Prevent remodeling from UC18+ to UC16
   - Fix cups auto-connect on classic with cups snap installed
   - u2f-devices interface support for GoTrust Idem Key with USB-C
   - Fix to restore services after unlink failure
   - Add libcudnn.so to Nvidia libraries
   - Fix skipping base snap download due to false snapd downgrade
     conflict


author: systemd maintenance team <systemd-maint@redhat.com> - 252-30
changelog:
  - resolved: limit the number of signature validations in a transaction (RHEL-26643)
  - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26643)
  - efi: alignment of the PE file has to be at least 512 bytes (RHEL-26133)
  - units: change assert to condition to skip running in initrd/os (RHEL-16182)
  - ci: add configuration for regression sniffer GA (RHEL-1086)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-31
changelog:
  - bootctl: rework random seed logic to use open_mkdir_at() and openat() (RHEL-16952)
  - bootctl: properly sync fs before/after moving random seed file into place (RHEL-16952)
  - bootctl: when updating EFI random seed file, hash old seed with new one (RHEL-16952)
  - sha256: add helper than hashes a buffer *and* its size (RHEL-16952)
  - random-seed: don't refresh EFI random seed from random-seed.c anymore (RHEL-16952)
  - bootctl: downgrade graceful messages to LOG_NOTICE (RHEL-16952)
  - units: rename/rework systemd-boot-system-token.service → systemd-boot-random-seed.service (RHEL-16952)
  - bootctl: split out setting of system token into function of its own (RHEL-16952)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-32.2
changelog:
  - coredump: generate stacktraces also for processes running in containers w/o coredump forwarding (RHEL-34061)
  - test: add a couple of tests for systemd-coredump (RHEL-34061)
  - test: don't expand the subshell expression prematurely (RHEL-34061)
  - coredump filter: fix stack overflow with =all (RHEL-34061)
  - coredump filter: add mask for 'all' using UINT32_MAX, not UINT64_MAX (RHEL-34061)
  - test: add coverage for CoredumpFilter=all (RHEL-34061)
  - test: rotate journal before storing coredumps (RHEL-34061)
  - test: sync with the fake binary before killing it (RHEL-34061)
  - test: check coredump handling in containers & namespaces (RHEL-34061)
  - ukify: make the test happy with the latest OpenSSL (RHEL-34061)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-32.6
changelog:
  - cryptsetup: do not assert when unsealing token without salt (RHEL-40119)
  - cryptsetup: check the existence of salt by salt_size > 0 (RHEL-40119)
  - bootspec: fix null-dereference-read (RHEL-40119)


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-3
changelog:
  - progress: Fix showing correct final total (rhbz#2156247)
  - virtinstall: Fix the allocating disk size printed by the progress bar (rhbz#2156247)
  - virtinstall: Hide total_size in the progress bar if it doesn't need (rhbz#2156247)


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-4
changelog:
  - virt-install: Recommend '--boot uefi' (rhbz#2112154)
  - virt-install: Document Secure Boot setups (rhbz#2112154)


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-5
changelog:
  - On aarch64 the vm will shut off immediately shut off when using virt-install --cloud-init (RHEL-1705)


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-7
changelog:
  - tests: Add more cloud-init and TPM test cases (RHEL-34608)
  - installer: drop default TPM for --cloud-init install phase (RHEL-34608)
  - Add gating for centos stream 10 (RHEL-34608)
  - xmleditor: make gtksourceview optional (RHEL-35859)


author: Sergio Lopez <slp@redhat.com> - 1.1.0-2
changelog:
  - Explicitly declare the conflict with qemu-virtiofsd
  - Remove explicit library dependencies
  - Remove useless "Provides: virtiosfd"
  - Remove Windows binaries from vendor tarball


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.10.1-1
changelog:
  - Update to upstream version 1.10.1 [RHEL-22739]
  - Resolves: RHEL-22739
    (Rebase virtiofsd to latest version for RHEL 9.4)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.64.2-1
changelog:
  - Update to 0.64.2
  - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174)
  - Fix the License fields and ship the correct license texts (#1973299)


author: Neal Gompa <ngompa@fedoraproject.org> - 1.22.10-4
changelog:
  - Work around broken brp-mangle-shebangs behavior (see RHBZ#1998924)
  - Fix broken macro variable for legacy "nodejs-yarn" binary name (RHBZ#1904279)


author: zsvetlik@redhat.com - 1.22.17-1
changelog:
  - Update to latest upstream release
  - use --force in yarnpkg-tarball.sh to workaround dependency conflincts


