# changelog

author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.5.10-1
changelog:
  - Fix check for biosboot partition in GRUB2.check (vtrefny)
    Resolves: RHEL-55922
  - Ignore all storage errors when trying to activate swaps (vtrefny)
    Resolves: RHEL-55922


author: Martin Kolman <mkolman@redhat.com> - 34.25.5.11-1
changelog:
  - security: call /usr/libexec/fips-setup-helper (asosedkin)
    Resolves: RHEL-58667
  - release-notes: Document support for compressed kernel modules in Driver Discs
    (peter.georg)
    Related: RHEL-9913
  - Add documentation about support for compressed kernel modules (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Update test info to reflect added support for compressed kernel
    modules (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add test for zstd compressed kernel module (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add test for xz compressed kernel module (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add support for compressed kernel modules (peter.georg)
    Resolves: RHEL-9913
  - New version - 34.25.5.10 (k.koukiou)


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.5.13-1
changelog:
  - security: require pykickstart version with %certificates support (rvykydal)
    Resolves: RHEL-61430
  - security: do not crash initramfs ks parsing on failing certificate dump
    (rvykydal)
    Resolves: RHEL-61430
  - security: add service to transfer certificates from initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates in initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates in pre-install phase only for dnf payload
    (rvykydal)
    Resolves: RHEL-61430
  - security: raise exception if certificate destination is unknown (rvykydal)
    Resolves: RHEL-61430
  - security: log a warning when dumping certificate over an existing file
    (rvykydal)
    Resolves: RHEL-61430
  - security: pre-install certificates before payload installation (rvykydal)
    Resolves: RHEL-61430
  - security: add API to install certificates early before payload (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates on target system (rvykydal)
    Resolves: RHEL-61430
  - security: Add API for installation on target system (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates early after Anaconda start (rvykydal)
    Resolves: RHEL-61430
  - security: add API to import certificates to Anaconda environment (rvykydal)
    Resolves: RHEL-61430
  - security: add API: Certificate getter (rvykydal)
    Resolves: RHEL-61430
  - kickstart: extend section specification for list of section data (rvykydal)
  - security: implement the support to install certificates to Anaconda
    (rvykydal)
    Resolves: RHEL-61430
  - translations: bump dependency to l10n repo because of branch switch
    (k.koukiou)
  - util: correct errors and suppress stderr for common cases (riehecky)
  - util: Add additional information for EFI systems (riehecky)
    Resolves: RHEL-55128


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.15-1
changelog:
  - security: add a development note for certificates import in initramfs
    (rvykydal)
    Related: RHEL-77155
  - security: do not issue warning on existing certificate file during dump
    (rvykydal)
    Resolves: RHEL-77155
  - network: pass NM global dns configuration to the installed system (rvykydal)
    Resolves: RHEL-71824
  - network: pass global dns initrd option to the installed system (rvykydal)
    Resolves: RHEL-71824


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.16-1
changelog:
  - network: add dnsconfd to selected packages if used in installer (rvykydal)
    Resolves: RHEL-79803
  - network: add dnsconfd to installer environment (rvykydal)
    Resolves: RHEL-79804


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.17-1
changelog:
  - network: start dnsconfd in initramfs (rvykydal)
    Resolves: RHEL-80303
  - network: enable dnsconfd service on installed system if required (rvykydal)
    Resolves: RHEL-80023
  - network: pass 16-dns-backend.conf to target system (rvykydal)
    Resolves: RHEL-80233
  - netowrk: enable dnsconfd service in installer environment (rvykydal)
    Resolves: RHEL-80023


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.1-1
changelog:
  - network: disable NM autoconnections also when BOOTIF is used (rvykydal)
    Resolves: RHEL-78272
  - network: support inst.net.noautodefault option (rvykydal)
    Related: RHEL-78272
  - security: fix dnsconfd backend option check in initramfs (rvykydal)
    Resolves: RHEL-83214
  - Support leavebootorder for bootupd (jkonecny)
    Resolves: RHEL-40897
  - bootupd: call bootupctl with --update-firmware (awilliam)
    Resolves: RHEL-40897


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.2-1
changelog:
  - Fix typo in systemd service (jstodola)
    Resolves: RHEL-78272
  - s390x - enable raid1 as a stage2 device (dan)
    Resolves: INSTALLER-4148
    Resolves: RHEL-21691
  - edns: restart dnsconfd only after the first kickstart parsing (rvykydal)
    Resolves: RHEL-82694
  - edns: allow dnsconfd name resolution for kickstart fetching (rvykydal)
    Resolves: RHEL-82694


author: Manuel Fombuena <fombuena@outlook.com> - 059-21
changelog:
  - fix(pkcs11): delete trailing dot on libcryptsetup-token-systemd-pkcs11.so
  - fix(pcsc): add opensc load module file
  - fix(pcsc): add --disable-polkit to pcscd.service


author: Adam Williamson <awilliam@redhat.com> - 060-2
changelog:
  - Backport fix to pull in required libs for systemd (dracut-ng PR #118)
  - Backport fix to move hook directory for systemd (dracut-ng PR #194)


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.18-1
changelog:
  - Update to 1.18 - Closes rhbz#1805337
  - Swich homepage to https
  - Use upstream lzip file, koji can handle it with the correct BuildRequire
  - Check gpg signature
  - Add check section
  - Convert to rpmautospec
  - Change from GPLv3+ to GPLv2


author: Mark Wielaard <mjw@redhat.com> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Mark Wielaard <mjw@redhat.com> - 0.190-1
changelog:
  - Upgrade to upstream elfutils 0.190
  - Add eu-srcfiles
  - Drop upstreamed patches
    elfutils-0.189-debuginfod_config_cache-double-close.patch
    elfutils-0.189-elf_getdata_rawchunk.patch
    elfutils-0.189-elfcompress.patch
  - Only package debuginfod-client-config.7 manpage for debuginfod-client


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends.


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Aaron Merey <amerey@redhat.com> - 0.192-3
changelog:
  - Enable debuginfod IMA verification
  - Add elfutils-0.192-fix-configure-conditional.patch
  - Add elfutils-0.192-skip-ima-test.patch


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Michel Lind <salimma@centosproject.org> - 1:30.1-6
changelog:
  - Pick up changes from Fedora 42/43's emacs-1:30.1-5
  - Fixes: CVE-2024-53920
  - Fixes: CVE-2025-1244
  - Resolves: https://pagure.io/centos-sig-hyperscale/package-updates/issue/384


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.7-1
changelog:
  - New version
    Resolves: rhbz#1993631
  - Temporarily switch to the included regex until glibc bug (glibc#11053)
    is fixed


author: Michel Lind <salimma@centosproject.org> - 0.9.10-0.1
changelog:
  - Update to 0.9.10
  - Enable kpatch-build on aarch64
  - Rebase EL-only patches
  - Refresh clang PGO patches
  - Switch to autopatch for easier application of upstream patches


author: Michel Lind <salimma@centosproject.org> - 0.9.10-0.3
changelog:
  - Make kpatch-runtime obsolete a floating version of kpatch
    This preserves the upgrade path if in the future cXs's kpatch is updated


author: Davide Cavalca <dcavalca@centosproject.org> - 0.9.4-1.6
changelog:
  - Sync with c8s-sig-hyperscale
  - Update to 0.9.4
  - Add kpatch-build arched subpackage
  - Add kpatch-runtime noarch subpackage to provide and obsolete kpatch


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Michel Lind <salimma@centosproject.org> - 6.9.0-2
changelog:
  - Mark libbpf support as dependent on missing header file
  - some feature checks not shown unless VF=1 is passed


author: Michel Lind <salimma@centosproject.org> - 6.17.10-1
changelog:
  - Update to 6.17.10
  - Switch to using the full Linux tarball as the standalone one is missing
    some aarch64 files since 6.15.0
  - Workaround for some header files incorrectly shipped in kernel-headers


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Cole Robinson <crobinso@redhat.com> - 10.6.0-2
changelog:
  - Fix `virsh domifaddr --source=arp` on kernel 6.10 (bz #2302245)
  - Add new systemtap-sdt-dtrace to build deps


author: Daniel P. Berrangé <berrange@redhat.com> - 10.4.0-1
changelog:
  - Update to version 10.4.0
  - Change virtual network backend from iptables to nftables
  - Introduce SSH VSOCK proxy


author: Jeremy Linton <jeremy.linton@arm.com> - 1.5.3-1
changelog:
  - Ship the (newish) trc_pkt_lister man page, which is helpful and makes lint happy
  - Also, enable some basic decoding unit tests that ship with opencsd after we tweak them.


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Cole Robinson <crobinso@redhat.com> - 8.2.0-7
changelog:
  - Enable PIE for qemu-user-static builds
  - Replace PVH build fix patch with version that should work on centos


author: Roberto Campesato <render@metalabs.org> - 8.2.2-1.1
changelog:
  - Merge latest changes from Fedora
  - Re-enabled libblkio (RHBZ#2232766 closed)
  - Added fb-only patches
    . relaxing CA cert bundle validatation
    . setting default cpu_model for linux-user x86_64 and aarch64
    . btrfs v2 ioctls


author: Roberto Campesato <render@metalabs.org> - 9.1.0-1.1
changelog:
  - Merge latest changes from Fedora
  - Added fb-only patch based on experimental AMD changes for SEV/SNP
    to make PCI passthrough work with SNP


author: Roberto Campesato <render@metalabs.org> - 2:9.2.0-2.1
changelog:
  - Merge latest changes from Fedora
  - Remove fb-only patch already included upstream
  - Include fix for multifd migration regression https://gitlab.com/qemu-project/qemu/-/issues/2720


author: Michel Lind <salimma@centosproject.org> - 0.6.7-4
changelog:
  - Update unified SEL logging to only log correctable errors
  - Limit unified SEL logging changes to hs+fb builds for now


author: Michel Lind <salimma@centosproject.org> - 0.8.1-1
changelog:
  - Update to 0.8.1
  - Update SEL logging patch to PR 180
  - Incorporate changes from Fedora's rasdaemon-0.8.0-5.fc41


author: Bruno Wolff III <bruno@wolff.to> - 4.5-24.20220308git8b6ee89
changelog:
  - Continue testing upstream patches prior to 4.5.1 release.
  - Minor fixes
  - Man page tweaks
  - Tentative 4.5.1 change log


author: Neal Gompa <ngompa@fedoraproject.org> - 251.4-53
changelog:
  - Set compile-time fallback hostname to "localhost"
    https://fedoraproject.org/wiki/Changes/FallbackHostname


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 252.4-598.6
changelog:
  - Bump release for 252.4
  - Sync from rawhide
  - Build with libqrencode
  - Build with libfido2
  - Build with homed/userdb
  - Drop pam config directory override
  - Use python3dist() where applicable
  - Drop llvm-toolset in favor of having systemd use bpftool gen object
  - Add back standalone binary packages


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 252.4-598.11
changelog:
  - Backport fixes for journald crashes and bad behavior when dealing with
    corrupted journals.
  - Fix changelog date


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 252.4-598.12
changelog:
  - Remove selinux bcond in favor of boolean dependency on selinux-policy so that
    systemd-selinux is only installed if selinux-policy is installed
  - Add selinux file contexts for /efi
  - Remove policycoreutils-python-utils dependency from systemd-selinux


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 253.5-1.1
changelog:
  - Gate out systemd-selinux dependency on Facebook specific builds
  - Backport custom %clean implementation from rawhide
  - Backport selinux triggers logging revert from rawhide


author: Anita Zhang <the.anitazha@gmail.com> - 253.7-1.4
changelog:
  - Gate out selinux-policy-base versioning for facebook
  - Move repart fixes to staging repo (#28479, #28812)


author: Anita Zhang <the.anitazha@gmail.com> - 249.4-2.12
changelog:
  - Backport PR #20695: Sync if_arp.h with Linux 5.14
  - FB-only backport PR #22426: MemoryZSwapMax= to configure memory.zswap.max


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.3-3
changelog:
  - Add pam_namespace to systemd-user pam config (rhbz#2053098)
  - Drop 20-grubby.install plugin for kernel-install (rhbz#2033646)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.3-4
changelog:
  - Drop scriptlet for handling nobody user upgrades from Fedora <28
  - Specify owner of /var/log/journal as root in the rpm listing (#2018913)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.3-5
changelog:
  - Move part of %post scriptlet for resolved to %posttrans (#2018913)
  - Specify owner of utmp/wtmp/btmp/lastlog as root in the rpm listing


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 249-2.13
changelog:
  - Move to dist-git layout used by Fedora (no more SOURCES/ and SPECS/)
  - Switch to .gitignore from commit 46a40810 from the Fedora RPM repo
  - Add back removed files from commit 46a40810 from the Fedora RPM repo


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 250.3-6.1
changelog:
  - New release for v250
  - Sync latest changes from Fedora rawhide
  - Use source archives from https://pagure.io/centos-sig-hyperscale/systemd
    instead of github. All Hyperscale patches have moved to pagure
  - Added llvm-toolset to BuildRequires (for llvm-strip) to make build succeed
  - Enable p11kit and pwquality options in the systemd build


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 250.3-6.3
changelog:
  - Move systemd-network-generator and networkd man pages to networkd package to
    avoid conflicts with systemd-extras from EPEL


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 250.3-6.4
changelog:
  - Make sure our packages override the corresponding backports from EPEL.
  - Modify the networkd fix from the previous release so that it can be merged
    into the c9s branch.


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 250.3-6.6
changelog:
  - Fixed bug in networkd changes to split-files.py that caused the
    /etc/systemd/network to get moved to the networkd package (which we don't
    want because that's where link files for udev are also stored).


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 250.3-6.7
changelog:
  - Backported https://github.com/systemd/systemd/pull/23254 and
    https://github.com/systemd/systemd/pull/23205
  - Move more files to the networkd package


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 256.6-4
changelog:
  - Make backports Meta specific
  - Only apply backports when building the Meta specific build
  - Use a custom patch range for the Meta specific backports so we don't
    conflict with the ones from Fedora
  - Backport PrivateUsers=identity as well


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 256.7-2
changelog:
  - Backport various PRs to streamline upgrades
  - Logging improvements to help debug issues
  - Removing a fallback from the private manager bus to the system bus that
    isn't required and complicates debugging issues
  - Simplification of user manager reloads which also helps debugging issues
    by reducing what can go wrong during upgrades


author: Mark Wielaard <mjw@fedoraproject.org>
changelog:
  - Add valgrind-3.18.1-ppc64-cmov.patch
  - Add valgrind-3.18.1-arm64-atomics-rdm.patch
  - Add valgrind-3.18.1-rust-demangle-suffix.patch


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Dominique Martinet <asmadeus@codewreck.org> - 0.9.0-1
changelog:
  - Update to 0.9.0
  - fix fd leak (probably #2290715)
  - enable lz4 compression by default
  - add supprt for av1 software encoding/decoding
  - add support for vsock transport
  - fix build with gcc-14


author: Dominique Martinet <asmadeus@codewreck.org> - 0.9.1-1
changelog:
  - Update to 0.9.1
  - don't abort on double-^C (#2262447)
  - fix for compositors using drm_syncobj protocol


