# changelog

author: Dominik Wombacher <dominik@wombacher.cc> - 0.9.17-3
changelog:
  - Run cmake tests during package build
  - Include missing file and directories because of version bump


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.10.0-0.rc7.528dd46d0fc3.62]
changelog:
  - redhat/configs: Enable CONFIG_PTP_1588_CLOCK_MOCK in kernel-modules-internal (Davide Caratti)
  - fedora: enabled XE GPU drivers on all arches (Peter Robinson)
  - Flip SND_SOC_CS35L56_SPI from off to module for RHEL (Justin M. Forbes)
  - Flip DIMLIB from built-in to module for RHEL (Justin M. Forbes)
  - Linux v6.10.0-0.rc7.528dd46d0fc3


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.10.1-0]
changelog:
  - Initial set up for stable Fedora branch (Justin M. Forbes)
  - Reset RHEL_RELEASE for the 6.11 cycle (Justin M. Forbes)
  - redhat/configs: Enable CONFIG_VMWARE_VMCI/CONFIG_VMWARE_VMCI_VSOCKETS for RHEL (Vitaly Kuznetsov)
  - Linux v6.10.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.10.3-0]
changelog:
  - Bluetooth: hci_event: Fix setting DISCOVERY_FINDING for passive scanning (Luiz Augusto von Dentz)
  - Linux v6.10.3


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.10.4-0]
changelog:
  - wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion (Janne Grunau)
  - New config for 6.10.3 (Justin M. Forbes)
  - Linux v6.10.4


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.10.5-0]
changelog:
  - Revert "ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error" (Niklas Cassel)
  - Linux v6.10.5


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.10.5-100]
changelog:
  - Turn off libbpf dynamic for perf on F39 (Justin M. Forbes)
  - Revert "cpupower: Bump soname version" (Justin M. Forbes)
  - Drop soname for libcpupower.so since we reverted the bump (Justin M. Forbes)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.1.0-1
changelog:
  - Update to v3.1.0
  - Drop Patch0 (duplicate definitions in code - backport from this release)
  - Drop Fedora-specific metainfo file (now provided by upstream)


author: Packit <hello@packit.dev> - 314-1
changelog:
  - Diagnostic reports: Fix command injection vulnerability with crafted report names
  - Storage: Improvements to read-only encrypted filesystems


author: Packit <hello@packit.dev> - 318-1
changelog:
  - Storage: Extra confirmation before deleting non-empty partitions in Anaconda's Web UI
  - Discontinue Intel 32-bit support in Fedora, CentOS, and RHEL
  - cockpit.js: Get user primary group ID


author: Packit <hello@packit.dev> - 320-1
changelog:
  - pam-ssh-add: Fix insecure killing of session ssh-agent [CVE-2024-6126]
  - sosreport: Read report directory from sos config (fix page on Debian/Ubuntu)


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Packit <hello@packit.dev> - 0.22.1-1
changelog:
  - New upstream release
  - Drop too-strict dependencies patch. Fixed by:
    https://github.com/coreos/coreos-installer/pull/1453


author: Guenther Deschner <gdeschner@redhat.com> - 4.19.1-1
changelog:
  - resolves: #2243073 - Update to version 4.19.1
  - resolves: #2241881, #2243228: Security fix for CVE-2023-3961
  - resolves: #2241882, #2243231: Security fix for CVE-2023-4091
  - resolves: #2241883, #2243230: Security fix for CVE-2023-4154
  - resolves: #2241884, #2243229: Security fix for CVE-2023-42669
  - resolves: #2241885, #2243232: Security fix for CVE-2023-42670


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-4
changelog:
  - 2253985 - cups-browsed crashes when remote CUPS queue found by DNS-SD is not able to response on IPP Get-Printer-Attributes
  - fix several issues reported by openscanhub


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - Cups browsing with 'Autoclustering on' cannot find printer clusters for HA due incorrect orientation-requested-default


author: Simone Caronni <scaronni@nvidia.com> - 1.1.14-2.20240805gitc439cd5
changelog:
  - Update to latest snapshot with commits required for NVIDIA driver 560+ with
    explicit sync support.


author: David Michael <fedora.dm0@gmail.com> - 1.6-3
changelog:
  - Backport patches for CVE-2023-33551 and CVE-2023-33552.
  - Change conditional build feature defaults for supporting EPEL 9.


author: Dan Horák <dan[at]danny.cz> - 3.0.0-1.20230308git7de967c
changelog:
  - updated to ghdl 3.0.0
  - updated to gcc 14.0.1
  - updated to llvm 17
  - Resolves: rhbz#2161618 rhbz#2225826


author: Coiby <coxu@redhat.com> - 2.0.26-4
changelog:
  - kdumpctl: Add support for systemd-boot paths
  - mkdumprd: add --aggressive-strip as default dracut args
  - kdumpctl: Add basic UKI support
  - kdumpctl: Move temp file in get_kernel_size to global temp dir
  - kdumpctl: Move get_kernel_size to kdumpctl
  - kdumpctl: fix is_dracut_mod_omitted
  - kdump-lib: move is_dracut_mod_omitted to kdumpctl
  - kdump-lib: remove get_nmcli_connection_apath_by_ifname
  - kdump-lib: remove get_nmcli_field_by_conpath
  - dracut-module-setup: remove dead source_ifcfg_file
  - kdump-lib-initramfs: remove is_fs_dump_target
  - kdump-lib-initramfs: harden is_mounted
  - Show how much time kdump has waited for the network to be ready
  - Tell nmcli to not escape colon when getting the path of connection profile
  - kdumpctl: lower the log level in reset_crashkernel_for_installed_kernel
  - Install nfsv4-related drivers when users specify nfs dumping via dracut_args
  - sysconfig: add zfcp.allow_lun_scan to KDUMP_COMMANDLINE_REMOVE on s390
  - Use the correct command to get architecture


author: Coiby <coxu@redhat.com> - 2.0.26-5
changelog:
  - Simplify the management of the kernel parameter crashkernel
  - Let _update_kernel_cmdline return the correct return code
  - mkdumprd: call dracut with --add-device to install the drivers needed by /boot partition automatically for FIPS
  - kdump-lib: fix the matching pattern for debug-kernel


author: Coiby <coxu@redhat.com> - 2.0.26-7
changelog:
  - kdumpctl: Fix the matching of plus symbol by grep's EREs
  - kdump-lib: Evaluate the memory consumption by smmu and mlx5 separately
  - kdump-lib: add support for 64K aarch64
  - kdump-lib: Introduce parse_kver_from_path() to get kernel version from its path name
  - kdump-lib: Introduce a help function _crashkernel_add()


author: Pino Toscano <ptoscano@redhat.com> 1.29.32-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - utils: import pkg_resources only when needed (ptoscano@redhat.com)
  - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com)
  - Alter import of rhsm.config functions (mhorky@redhat.com)
  - Handle tests in containers better (mhorky@redhat.com)
  - Call parent methods in DBusServerStubProvider (mhorky@redhat.com)
  - Base D-Bus tests on SubManFixture (mhorky@redhat.com)
  - ENT-5532: Call rhsm-package-profile-uploader with --force-upload
    (jhnidek@redhat.com)
  - 2108549: do not detect containers in OCP as such (ptoscano@redhat.com)
  - tests: extend InContainerTests for path checks (ptoscano@redhat.com)
  - Resolved issues in PR feedback (jajerome@redhat.com)
  - Updated request handling in connection.py (jajerome@redhat.com)
  - Resolve issues from PR review (jajerome@redhat.com)
  - Removed fixme since activateMachine() is still used (jajerome@redhat.com)
  - Black/flake8 fixes (jajerome@redhat.com)
  - FIXME: renamed default argument to not shadow inbuilt type
    (jajerome@redhat.com)
  - FIXME: removed Restlib and using only BaseRestLib (jajerome@redhat.com)
  - FIXME: updated unregisterConsumer() to return True if status code is 204
    (jajerome@redhat.com)
  - FIXME: changed unbindBySerial/unbindByPoolId to return bool
    (jajerome@redhat.com)
  - FIXME: changed default value of facts in updateConsumerFacts()
    (jajerome@redhat.com)
  - FIXME: sanitized email/lang variables in activateMachine()
    (jajerome@redhat.com)
  - FIXME: made email argument required in activatemachine()
    (jajerome@redhat.com)
  - FIXME: changed default value of serials argument to None
    (jajerome@redhat.com)
  - FIXME: removed unused username/password arguments (jajerome@redhat.com)
  - FIXME: raise exceptions where sanitizing guest Id returns None
    (jajerome@redhat.com)
  - FIXME: renamed response argument to result in validateResponse()
    (jajerome@redhat.com)
  - FIXME: rename info argument to params in _request() (jajerome@redhat.com)
  - FIXME: added error message when redeeming subscription fails
    (jajerome@redhat.com)
  - FIXME: removed unused UEPConnection class methods (jajerome@redhat.com)
  - Fixed profile tests setting Package release numbers as int instead of str
    (jajerome@redhat.com)
  - FIXME: changed epoch data type to str in Package class (jajerome@redhat.com)
  - FIXME: added null-checks for stdout/stderr wrapper (jajerome@redhat.com)
  - FIXME: re-iterated a fix is not needed for urlparse (jajerome@redhat.com)
  - FIXME: added exception messages to parse_url() (jajerome@redhat.com)
  - FIXME: changed  lists to tuples in StatusSpinnerStyle class
    (jajerome@redhat.com)
  - FIXME: fixed type hints for _normalize_string() (jajerome@redhat.com)
  - FIXME: use super() instead of class name (jajerome@redhat.com)
  - FIXME: fixed strings not being translated in is_log_level_valid()
    (jajerome@redhat.com)
  - FIXME: resolved improper use of tempfile in save() (jajerome@redhat.com)
  - FIXME: fixed config_file argument not being used in save()
    (jajerome@redhat.com)
  - FIXME: updated default value for files_name argument in read()
    (jajerome@redhat.com)
  - FIXME: fixed minor typo in bogus() (jajerome@redhat.com)
  - FIXME: changed read() to return self instead of None (jajerome@redhat.com)
  - FIXME: set default argument 'facts' to None in registerConsumer()
    (jajerome@redhat.com)
  - FIXME: renamed argument 'type' to 'consumer_type' in registerConsumer()
    (jajerome@redhat.com)
  - FIXME: ping() resolved in rhsm/connection.py (jajerome@redhat.com)
  - Remove test dependency 'mock' (mhorky@redhat.com)
  - Fix failures of D-Bus' Register tests (mhorky@redhat.com)
  - Mark D-Bus tests (mhorky@redhat.com)
  - 2131789: Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com)
  - Catch generic OSError during HTTPSConnection.connect() (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Fix formatting of proxy errors w/o errno (ptoscano@redhat.com)
  - Catch also CertificateLoadingError for identity cert loading
    (ptoscano@redhat.com)
  - ENT-4286: Additional fix for exception handling (jajerome@redhat.com)
  - Remove D-Bus env vars from container and CI files (mhorky@redhat.com)
  - 2121350: Implement "force" register option in rhsm dbus python binding
    (jajerome@redhat.com)
  - Show locals in pytest output (mhorky@redhat.com)
  - Improve formatting of CertificateLoadingError (ptoscano@redhat.com)
  - Raise a new CertificateLoadingError on X.509 loading failures
    (ptoscano@redhat.com)
  - Improve formatting of UnknownContentException (ptoscano@redhat.com)
  - connection: improve the internal UnknownContentException
    (ptoscano@redhat.com)
  - utils: add terminal_printable_content (ptoscano@redhat.com)
  - connection: rename NetworkException to UnknownContentException
    (ptoscano@redhat.com)
  - Improve formatting of ProxyException (ptoscano@redhat.com)
  - connection: improve the internal ProxyException (ptoscano@redhat.com)
  - Improve formatting of socket.gaierror (ptoscano@redhat.com)
  - Improve formatting of ConnectionError (ptoscano@redhat.com)
  - Improve formatting of BadCertificateException (ptoscano@redhat.com)
  - connection: extend BadCertificateException w/ SSL exception
    (ptoscano@redhat.com)
  - connection: drop dead code (ptoscano@redhat.com)
  - ENT-4286: Simplify exception reporting with system_exit()
    (jajerome@redhat.com)
  - 2136694: Clear progress messages properly (mhorky@redhat.com)
  - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com)
  - 2097679: Additional fix for non-interactive parameters (jajerome@redhat.com)
  - 2097679: Fixed script hang in non-interactive execution (jajerome@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.33-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (ljanda@redhat.com)
  - Translated using Weblate (French) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Translated using Weblate (Korean) (jsefler@redhat.com)
  - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
  - Test libdnf plugin using GitHub Actions (mhorky@redhat.com)
  - libdnf: fix return value of findProductId() (ptoscano@redhat.com)
  - ENT-5541: Publish PR coverage (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Spanish) (ptoscano@redhat.com)
  - Simplify test setup for D-Bus fact collection (mhorky@redhat.com)
  - ENT-3759: Test on GitHub Actions (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.34-1
changelog:
  - Update TESTING.md (mhorky@redhat.com)
  - Improved debug print of http traffic, when proxy is used (jhnidek@redhat.com)
  - ENT-5544: Remove Jenkins jobs, Containers (mhorky@redhat.com)
  - ENT-5549: Remove unused code from entcertlib (mhorky@redhat.com)
  - ENT-5549: Fix issues found when type-hinting (mhorky@redhat.com)
  - ENT-5549: Fix return code handling of CLI (mhorky@redhat.com)
  - ENT-5549: Fix found type hint issues (mhorky@redhat.com)
  - ENT-5549: Fix object instantiation in EntitlementDirectory
    (mhorky@redhat.com)
  - ENT-5549: Refactor ProductDirectory (mhorky@redhat.com)
  - ENT-5549: Change internal implementation for some Cache methods
    (mhorky@redhat.com)
  - ENT-5549: Clean up _sync_with_server arguments of cache objects
    (mhorky@redhat.com)
  - ENT-5549: Remove 'autoheal' argument from Action clients (mhorky@redhat.com)
  - Refactored code a little bit (jhnidek@redhat.com)
  - 2093291: Make locking more reliable (jhnidek@redhat.com)
  - test: add simple test for 2178610 (ptoscano@redhat.com)
  - Small improvement of debugging of http traffic (jhnidek@redhat.com)
  - 2093883: Fix issue with race condition in rhsm.service (jhnidek@redhat.com)
  - 2178610: do not collect unentitled products in SCA mode (ptoscano@redhat.com)
  - 2174297: register: do a simple strip() on environment(s) input
    (ptoscano@redhat.com)
  - Stop subclassing 'object' (ptoscano@redhat.com)
  - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com)
  - tests: Install dnf-plugins-core every time (mhorky@redhat.com)
  - 2169251: connection: restore UEPConnection.getJob() (ptoscano@redhat.com)
  - ENT-5106: Type-hint subscription_manager/ files (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.35-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Clean up tests using Cloud What detectors properly (mhorky@redhat.com)
  - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Typo fixes (ptoscano@redhat.com)
  - Avoid string puzzle (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - 2189664: cache: fix SyspurposeComplianceStatusCache on failed load
    (ptoscano@redhat.com)
  - dbus: don't catch exceptions in DomainSocketServer.run()
    (ptoscano@redhat.com)
  - cli: directly exit on InvalidCLIOptionError (ptoscano@redhat.com)
  - Revert "ENT-5549: Fix return code handling of CLI" (ptoscano@redhat.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Update .git-blame-ignore-revs (mhorky@redhat.com)
  - Format code with black==23.3.0 (mhorky@redhat.com)
  - ENT-5535: Update black to version 23.3.0 (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Packit <hello@packit.dev> - 1.29.40-1
changelog:
  - Automatic commit of package [subscription-manager] release [1.29.40-1]. (Pino Toscano)
  - Translated using Weblate (Korean) (김인수)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (Jingge Chen)
  - spec: Add missing GLib dependency when building without DNF (Debarshi Ray)
  - Remove deprecated `locale.*()` functions (mhorky)
  - Remove version constraint of pytest (mhorky)
  - RHEL-15110: RegisterServer is stopped, when not needed (Jiri Hnidek)
  - RHEL-15110: Fix issue with registration using gsd-subman (Jiri Hnidek)
  - Fix an error in debug logging of cloud-what (mhorky)
  - ci: bump actions/upload-artifact from 3 to 4 (dependabot[bot])
  - Improve debug logging to make it faster to understand (mhorky)
  - Resolves rhbz#2258965


author: Christian Glombek <cglombek@redhat.com> 2.6.3-2.rc3
changelog:
  - Rely on presets and use standard macros for systemd unit handling (bz 2218006)
  - Cleanup is moved to %posttrans


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-4
changelog:
  - 2263053 - CUPS/libppd PPD generators didn't check required attrs when deciding which driverless format to use,
    causing PPD generation to fail


author: Didier Fabert <didier.fabert@gmail.com> 1.46.3-3
changelog:
  - Change BuildRequires from pkgconfig(libxenlight) and pkgconfig(libxenstat) to xen-devel package
  - Enable go plugin only for Fedora 40+


author: Didier Fabert <didier.fabert@gmail.com> 1.46.3-4
changelog:
  - Remove closed source parts from binary rpms
    See https://bugzilla.redhat.com/show_bug.cgi?id=2304167


author: Peter Robinson <pbrobinson@fedoraproject.org> - 1.3.4-2
changelog:
  - Enable features: Discovery serviice (LDS), JSON encoding, Discovery service,
    Methods, Subscriptions, PubSub, Event monitoring, Data Access


author: Sahana Prasad <sahana@redhat.com> - 1:3.1.1-1
changelog:
  - Rebase to upstream version 3.1.1
    Resolves: CVE-2023-0464
    Resolves: CVE-2023-0465
    Resolves: CVE-2023-0466
    Resolves: CVE-2023-1255
    Resolves: CVE-2023-2650


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.7.3-3
changelog:
  - Fix for CVE-2024-6257 CVE-2024-6104 CVE-2024-24789 - Closes rhbz#2294255
    rhbz#2294007 rhbz#2292714


author: Packit <hello@packit.dev> - 104-1
changelog:
  Changes with 104
  ----------------
    * Add installer customizations to blueprints and cloud API (HMS-1161) (#4005)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza
    * Execute OpenShift Virtualization tests only on RHEL 9.x nightly (#4044)
      * Author: Alexander Todorov, Reviewers: Jakub Rusz, Tomáš Hozza
    * bump osbuild/images to 51 and add expiredate fields to user customizations (#4041)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * cloud/awscloud: allow internet access on secure instance again (#4025)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou
    * cloudapi: Override the request distro with the blueprint distro (#4006)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou
    * osbuild-jobsite-builder: disable http.Server timeouts (#4031)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * osbuild-jobsite-manager: close writer before sending the store (#4029)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * osbuild-jobsite: increase populate timeout (#4027)
      * Author: Sanne Raymaekers, Reviewers: Michael Vogt, Simon de Vlieger
    * osbuild-worker: add support for mtls dnf repo secrets (HMS-3798) (#4035)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * repositories: remove rhel-8-beta (#4024)
      * Author: Simon de Vlieger, Reviewers: Tomáš Hozza
    * templates/packer: support ldap service account for repo mtls conf (#4049)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * test: drop oscap test script and gitlab job (HMS-3710) (#3991)
      * Author: Achilleas Koutsou, Reviewers: Simon Steinbeiß
    * worker: drop backwards compatibility for DepsolveJob serialisation (COMPOSER-1612) (#4021)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2024-04-03


author: Packit <hello@packit.dev> - 106-1
changelog:
  Changes with 106
  ----------------
    * Active worker gauge (COMPOSER-2215) (#4089)
      * Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli
    * Add CI job to detect possible problematic usage of `trap` (#3977)
      * Author: Alexander Todorov, Reviewers: Tomáš Hozza
    * Makefile: remove installation of dnf-json (#4076)
      * Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers
    * Show worker count on grafana dashboard (COMPOSER-2215) (#4092)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * Update Arm EC2 instance to a newer one (#4064)
      * Author: Alexander Todorov, Reviewers: Jakub Rusz
    * Update osbuild/images to v0.56.0 (#4096)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Ondřej Budai
    * configurable worker timeouts (COMPOSER-2215) (#4090)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * osbuild-worker: fix mtls credentials injection in depsolve job (#4082)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Brian C. Lane
    * osbuild-worker: fix nil pointer in depsolve job (#4086)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller, Tomáš Hozza
    * osbuild/images 0.55 (#4075)
      * Author: Sanne Raymaekers, Reviewers: Brian C. Lane
    * osbuildexecutor/ec2: pass extraEnv only to sources invocation (#4083)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon Steinbeiß
    * templates/packer: fix proxy config in ldap service account init (#4098)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou
    * tests: Fix leapp repo url (#4085)
      * Author: Jakub Rusz, Reviewers: Alexander Todorov
    * worker: support http proxy for depsolve and osbuild sources job HMS-3798 (#4066)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou

  — Somewhere on the Internet, 2024-04-24


author: Packit <hello@packit.dev> - 108-1
changelog:
  Changes with 108
  ----------------
    * Reenable codecov via action (#4119)
      * Author: Alexander Todorov, Reviewers: Jakub Rusz
    * Update osbuild/images v0.59.0 (HMS-4031) (#4127)
      * Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Tomáš Hozza
    * Use copr rpms for the community workers (#4129)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * build(deps): bump github.com/docker/docker from 25.0.3+incompatible to 25.0.5+incompatible (#4080)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 (#4000)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#4110)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 (#3999)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * build(deps): bump the go-deps group across 1 directory with 14 updates (#4123)
      * Author: dependabot[bot], Reviewers: Achilleas Koutsou, Ondřej Budai, Tomáš Hozza
    * cloudapi: Add UploadTypesLocal for local_save status reports (#4038)
      * Author: Brian C. Lane, Reviewers: Simon Steinbeiß
    * templates/dashboards: fix community-stage tenant variable (#4100)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * templates/packer: add failure script (#4101)
      * Author: Sanne Raymaekers, Reviewers: Ondřej Budai, Tomáš Hozza
    * test: update osname for edge deployments (#4148)
      * Author: mcattamoredhat, Reviewers: Achilleas Koutsou
    * tools/fedora-worker-packer: increase timeout further (#4134)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * tools/fedora-worker-packer: small fixes (commit sha + timeout increase) (#4133)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller

  — Somewhere on the Internet, 2024-05-15


author: Packit <hello@packit.dev> - 109-1
changelog:
  Changes with 109
  ----------------
    * Add RHEL-9.5 repo definitions (#4158)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou
    * Add support for arbitrary kickstart file injection into ISOs (HMS-3879) (#4135)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza
    * Minor user customization test improvements (#4007)
      * Author: andremarianiello, Reviewers: Brian C. Lane
    * templates/packer: invert tag logic (#4150)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller, Ondřej Budai
    * test: execute dmesg task as privileged user (#4094)
      * Author: mcattamoredhat, Reviewers: Achilleas Koutsou, Brian C. Lane

  — Somewhere on the Internet, 2024-05-29


author: Packit <hello@packit.dev> - 110-1
changelog:
  Changes with 110
  ----------------
    * :broom: Add c10s and el10 repos, update distro aliases, update SPEC, c8s EOL (#4179)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Alexander Todorov, Florian Schüller, Simon de Vlieger
    * Fix condition in `tools/provision.sh` for el10 and re-enable snapshot URL validation (#4186)
      * Author: Tomáš Hozza, Reviewers: Alexander Todorov
    * GH actions / containerfiles: update F37 to F40 (#4168)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou
    * Testing with rhel-9.5 nightly (#4126)
      * Author: Alexander Todorov, Reviewers: Jakub Rusz
    * cmd/osbuild-worker-executor: add oaas as worker executor (#4189)
      * Author: Michael Vogt, Reviewers: Sanne Raymaekers
    * go.mod: bump osbuild/images to v0.65.0 (#4198)
      * Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers
    * main: rework the way the mock logger is passed (#4196)
      * Author: Michael Vogt, Reviewers: Tomáš Hozza
    * obuild-worker: extract workerClientErrorFrom() helper and add tests (#4188)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Florian Schüller
    * osbuild-worker-executor: fix order of `assert.Equal()` in tests (#4192)
      * Author: Michael Vogt, Reviewers: Brian C. Lane
    * osbuild-worker-executor: make test output silent again (#4191)
      * Author: Michael Vogt, Reviewers: Sanne Raymaekers
    * osbuild-worker: do not use `error` in clienterror.Error.Details (#4145)
      * Author: Michael Vogt, Reviewers: Florian Schüller
    * templates/openshift/composer: remove maintenance cronjob (#4178)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * templates/packer: switch to fedora-40 (#4162)
      * Author: Sanne Raymaekers, Reviewers: Tomáš Hozza
    * templates/packer: use import_tasks instead of include_tasks (#4176)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * test/cases/ubi-wsl: test rhel9 ga (HMS-4207) (#4165)
      * Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli
    * test: skip ostree-remount due to issue RHEL-25249 (#4121)
      * Author: mcattamoredhat, Reviewers: Achilleas Koutsou, Xiaofeng Wang
    * test: update ostree osname in pending test cases (#4173)
      * Author: mcattamoredhat, Reviewers: Achilleas Koutsou

  — Somewhere on the Internet, 2024-06-12


author: Packit <hello@packit.dev> - 111-1
changelog:
  Changes with 111
  ----------------
    * Remove rhel-8.10 jobs from test matrix (#4172)
      * Author: Alexander Todorov, Reviewers: Tomáš Hozza
    * Set executor hostname via cloud-init (#4221)
      * Author: Sanne Raymaekers, Reviewers: Michael Vogt
    * Switch to oaas / osbuild-worker-executor (HMS-4097) (#4184)
      * Author: Sanne Raymaekers, Reviewers: Michael Vogt
    * Update the RH GPG release key in all repos and update test manifests. (#4194)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Use latest 9.5 for RHEL upgrade tests (#4216)
      * Author: Alexander Todorov, Reviewers: Achilleas Koutsou, Jakub Rusz
    * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#4141)
      * Author: dependabot[bot], Reviewers: Ondřej Budai
    * build(deps): bump the go-deps group across 1 directory with 15 updates (#4210)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * cloud/awscloud: use instance requirements when creating secure instance (#4207)
      * Author: Sanne Raymaekers, Reviewers: Ondřej Budai
    * cloudapi: more details for non-service errors (#4227)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * golangci: fix integration tests for images (#4214)
      * Author: Florian Schüller, Reviewers: Michael Vogt
    * internal/awscloud: retry CreateFleet (HMS-4098) (#4220)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * internal/osbuildexecutor: verify expected input from handleBuild (#4204)
      * Author: Sanne Raymaekers, Reviewers: Michael Vogt
    * main: journald support with external correlation (#4047)
      * Author: Lukáš Zapletal, Reviewers: Nobody
    * osbuild-worker-executor/main_test: use random port for tests (#4218)
      * Author: Florian Schüller, Reviewers: Michael Vogt
    * osbuild-worker-executor: `job-id` in control.json as hostname (#4208)
      * Author: Michael Vogt, Reviewers: Sanne Raymaekers
    * osbuildexecutor: allow file type `tar.TypeGNUSparse` too (#4205)
      * Author: Michael Vogt, Reviewers: Florian Schüller
    * templates/dashboards: revert active worker count (#4174)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller

  — Somewhere on the Internet, 2024-06-26


author: Packit <hello@packit.dev> - 113-1
changelog:
  Changes with 113
  ----------------
    * build(deps): bump the go-deps group across 1 directory with 10 updates (#4259)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * osbuild-worker: tweak error to not include a \n for a failed stage (#4257)
      * Author: Michael Vogt, Reviewers: Tomáš Hozza
    * repositories: update Fedora 40 gpg keys (#4258)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2024-07-11


author: Packit <hello@packit.dev> - 114-1
changelog:
  Changes with 114
  ----------------
    * (HMS-4453) Add password to User customization schema (#4267)
      * Author: Andrea Waltlová, Reviewers: Ondřej Ezr
    * Build RPMs on RHEL-10.0-nightly and c10s (COMPOSER-2161) (#4268)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Alexander Todorov
    * Create a nightly pipeline for GA/EUS releases (#4046)
      * Author: tkoscieln, Reviewers: Nobody
    * Fix distro alias loading from ENV (#4265)
      * Author: Tomáš Hozza, Reviewers: Sanne Raymaekers
    * Fix slack GA pipeline notification job failure (#4271)
      * Author: tkoscieln, Reviewers: Alexander Todorov, Jakub Rusz
    * schutzbot/terraform: bump sha (#4266)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou

  — Somewhere on the Internet, 2024-07-24


author: Packit <hello@packit.dev> - 115-1
changelog:
  Changes with 115
  ----------------
    * Change log_format for the service to json (#4279)
      * Author: Florian Schüller, Reviewers: Sanne Raymaekers
    * Makefile for templates/openshift (#4103)
      * Author: Florian Schüller, Reviewers: Brian C. Lane
    * build(deps): bump the go-deps group across 1 directory with 8 updates (#4274)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * clienterrors: rename `WorkerClientError` to `clienterrors.New` (#4278)
      * Author: Michael Vogt, Reviewers: Sanne Raymaekers
    * cloud/awscloud: fix nil pointer dereference (#4283)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * dbjobqueue: correct error wrapping (#4284)
      * Author: Sanne Raymaekers, Reviewers: Michael Vogt
    * osbuild-worker: rework the `workerClientErrorFrom()` error (#4254)
      * Author: Michael Vogt, Reviewers: Tomáš Hozza
    * osbuildexecutor: show full osbuild exector on json decode errors (#4289)
      * Author: Michael Vogt, Reviewers: Sanne Raymaekers
    * test/api: silent dump_db() (#4276)
      * Author: Achilleas Koutsou, Reviewers: Jakub Rusz, Tomáš Hozza

  — Somewhere on the Internet, 2024-08-07


author: Packit <hello@packit.dev> - 116-1
changelog:
  Changes with 116
  ----------------
    * Integration testing on CS10 & RHEL 10 (#4263)
      * Author: Alexander Todorov, Reviewers: Tomáš Hozza
    * OpenSCAP json tailoring (HMS-3827) (#4272)
      * Author: Gianluca Zuccarelli, Reviewers: Sanne Raymaekers
    * Update images to `v0.77.0` and enable `rpm` and `rhsm` customizations (COMPOSER-2308) (#4295)
      * Author: Tomáš Hozza, Reviewers: Gianluca Zuccarelli
    * ci: move rhel for edge rhel9.5 test to testing-farm (#4240)
      * Author: He Yi, Reviewers: Achilleas Koutsou
    * logrus: add deployment channel as field to the logs (#4285)
      * Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    * osbuild-composer: activate deployment-channel reporting for splunk (#4299)
      * Author: Florian Schüller, Reviewers: Sanne Raymaekers
    * prepare-source: Move go fmt to last step (#4296)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou
    * splunk_logger: move environment hook to splunk_logger pt1 (#4301)
      * Author: Florian Schüller, Reviewers: Sanne Raymaekers

  — Somewhere on the Internet, 2024-08-15


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-0.3.rc2
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.7-rc2,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7-rc2


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-0.4.rc3
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.7-rc3,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7-rc3


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-0.4.rc4
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.7-rc4,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7-rc4


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-4
changelog:
  - Update for new upstream release tarball: Pacemaker-2.1.7,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.8-0.1.rc1
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.8-rc1,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.8-rc1


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.8-0.1.rc2
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.8-rc2,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.8-rc2


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.8-0.1.rc3
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.8-rc3,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.8-rc3


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.8-0.1.rc4
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.8-rc4,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.8-rc4


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.8-1
changelog:
  - Update for new upstream release tarball: Pacemaker-2.1.8,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.8
  - updated SPDX license for nagios-plugin-metadata


author: José Matos <jamatos@fedoraproject.org> - 2.3.3-1
changelog:
  - Update to 2.3.3
  - Update license tag to SPDX license identifier
  - Update url for source
  - Add patch to work with Python 3.12


author: Miro Hrončok <mhroncok@redhat.com> - 3.12.2-3
changelog:
  - Move all test modules to the python3-test package, namely:
     - __phello__
     - _xxsubinterpreters
     - xxlimited
     - xxlimited_35
     - xxsubtype


author: Michal Ambroz <rebus at, seznam.cz> 5.8.8-2
changelog:
  - cherrypick from upstream master patches for known vulnerabilities:
  - CVE-2023-4322 - heap-buffer-overflow in the brainfuck dissassembler
  - CVE-2023-5686 - heap-buffer-overflow in /radare2/shlr/java/code.c


author: Alexander Ploumistos <alexpl@fedoraproject.org> - 2.9.0-9
changelog:
  - Add patch for liborigin-3.0.2 (https://github.com/SciDAVis/scidavis/issues/30)
  - Fix patch macro syntax


author: Nicolas Chauvet <kwizart@gmail.com> - 0.32.1-2
changelog:
  - Enable RPM conditional --with facedetect, using opencv
    Disabled by default for now - see rhbz#2190013


author: Serhei Makarov <serhei@serhei.io> - 4.8-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 5.0-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases
  - migrated to SPDX license


author: Miro Hrončok <mhroncok@redhat.com> - 5.1-2
changelog:
  - Add forward-compatibility RPM Provides for systemtap-sdt-dtrace and dtrace
    https://fedoraproject.org/wiki/Changes/Separate_dtrace_package


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-11
changelog:
  - Rebuild (xorg-x11-server)
    CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-13
changelog:
  - Rebuild (xorg-x11-server)
    CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and CVE-2024-31083


author: Jan Grulich <jgrulich@redhat.com> - 1.14.0-2
changelog:
  - vncsession: use /bin/sh if the user shell is not set
  - add missing comma in default security type list


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-2
changelog:
  - arm32: The cache may not be properly cleaned/invalidated [XSA-437,
  	CVE-2023-34321]
  - top-level shadow reference dropped too early for 64-bit PV guests
  	[XSA-438, CVE-2023-34322]
  - x86/AMD: Divide speculative information leak [XSA-439, CVE-2023-20588]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-4
changelog:
  - xenstored: A transaction conflict can crash C Xenstored [XSA-440,
  	CVE-2023-34323]
  - x86/AMD: missing IOMMU TLB flushing [XSA-442, CVE-2023-34326]
  - Multiple vulnerabilities in libfsimage disk handling [XSA-443,
  	CVE-2023-34325]
  - x86/AMD: Debug Mask handling [XSA-444, CVE-2023-34327,
  	CVE-2023-34328]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-5
changelog:
  - x86/AMD: mismatch in IOMMU quarantine page table levels [XSA-445,
  	CVE-2023-46835]
  - x86: BTC/SRSO fixes not fully effective [XSA-446, CVE-2023-46836]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-6
changelog:
  - arm32: The cache may not be properly cleaned/invalidated (take two)
  	[XSA-447, CVE-2023-46837]
  - pci: phantom functions assigned to incorrect contexts [XSA-449,
  	CVE-2023-46839]
  - VT-d: Failure to quarantine devices in !HVM build [XSA-450,
  	CVE-2023-46840]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-7
changelog:
  - x86: shadow stack vs exceptions from emulation stubs - [XSA-451,
          CVE-2023-46841] (#2266326)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-8
changelog:
  - x86: Register File Data Sampling [XSA-452, CVE-2023-28746]
  - GhostRace: Speculative Race Conditions [XSA-453, CVE-2024-2193]
  - additional patches so above applies cleanly


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-1
changelog:
  - x86: Native Branch History Injection [XSA-456, CVE-2024-2201]
  - update to xen 4.17.4, remove patches now included upstream
    rebase xen.gcc12.fixes.patch
  - x86 HVM hypercalls may trigger Xen bug check [XSA-454, CVE-2023-46842]
  - x86: Incorrect logic for BTC/SRSO mitigations [XSA-455, CVE-2024-31142]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-2
changelog:
  - x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201]
  - double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143]
  	(#2298690)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-3
changelog:
  - error handling in x86 IOMMU identity mapping [XSA-460, CVE-2024-31145]
  - PCI device pass-through with shared resources [XSA-461, CVE-2024-31146]


author: Orion Poplawski <orion@nwra.com> - 1:6.0.29-1
changelog:
  - Update to 6.0.29
  - Hopefully really get the zabbix_run_sudo SELinux boolean working for
    zabbix-agent and allow it to run lvm when enabled


