# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.1.2-4
changelog:
  - Update to 3.1.2-4
  - Resolves: Issue 6489 - After log rotation refresh the FD pointer
  - Resolves: Issue 6554 - During import of entries without nsUniqueId, a
    supplier generates duplicate nsUniqueId (LMDB only)
  - Resolves: Issue 6555 - Potential crash when deleting a replicated backend


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-2
changelog:
  - Update to 3.1.3-2
  - Resolves: Issue 5120 - Fix compilation error
  - Resolves: Issue 6782 - Improve paged result locking
  - Resolves: Issue 6929 - Compilation failure with rust-1.89 on Fedora ELN
  - Resolves: Issue 6822 - Backend creation cleanup and Database UI tab error
    handling (#6823)
  - Resolves: Issue 6753 - Add 'add_exclude_subtree' and
    'remove_exclude_subtree' methods to Attribute uniqueness plugin
  - Resolves: Issue 6857 - uiduniq: allow specifying match rules in the
    filter
  - Resolves: Issue 6756 - CLI, UI - Properly handle disabled NDN cache
    (#6757)
  - Resolves: Issue 6854 - Refactor for improved data management (#6855)
  - Resolves: Issue 6850 - AddressSanitizer: memory leak in mdb_init
  - Resolves: Issue 6848 - AddressSanitizer: leak in do_search
  - Resolves: Issue 6865 - AddressSanitizer: leak in agmt_update_init_status
  - Resolves: Issue 6868 - UI - schema attribute table expansion break after
    moving to a new page
  - Resolves: Issue 6859 - str2filter is not fully applying matching rules
  - Resolves: Issue 6872 - compressed log rotation creates files with world
    readable permission
  - Resolves: Issue 6888 - Missing access JSON logging for TLS/Client auth
  - Resolves: Issue 6772 - dsconf - Replicas with the "consumer" role allow
    for viewing and modification of their changelog. (#6773)
  - Resolves: Issue 6893 - Log user that is updated during password modify
    extended operation
  - Resolves: Issue 6901 - Update changelog trimming logging
  - Resolves: Issue 6430 - implement read-only bdb (#6431)
  - Resolves: Issue 6663 - Fix NULL subsystem crash in JSON error logging
    (#6883)
  - Resolves: Issue 6895 - Crash if repl keep alive entry can not be created
  - Resolves: Issue 6884 - Mask password hashes in audit logs (#6885)
  - Resolves: Issue 6778 - Memory leak in
    roles_cache_create_object_from_entry part 2
  - Resolves: Issue 6901 - Update changelog trimming logging - fix tests
  - Resolves: Issue 6181 - RFE - Allow system to manage uid/gid at startup
  - Resolves: Issue 6468 - CLI - Fix default error log level
  - Resolves: Issue 6768 - ns-slapd crashes when a referral is added (#6780)
  - Resolves: Issue 6430 - Fix build with bundled libdb


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-2
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7173)
  - Issue 7108 - Fix shutdown crash in entry cache destruction (#7163)
  - Issue - Revise paged result search locking
  - Issue 7096 - During replication online total init the function
    idl_id_is_in_idlist is not scaling with large database (#7145)
  - Issue 7160 - Add lib389 version sync check to configure (#7165)
  - Issue 7166 - db_config_set asserts because of dynamic list (#7167)
  - Sync lib389 version to 3.1.4 (#7161)
  - Issue 7150 - Compressed access log rotations skipped, accesslog-list out
    of sync (#7151)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-4
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7180)


author: Dominik Mierzejewski <dominik@greysector.net> - 3.6.2.7-1
changelog:
  - update to 3.6.2.7
  - switch build system to cmake
  - unbundle miniz
  - update SPDX expression in License: field after review


author: Simone Caronni <negativo17@gmail.com> - 30.0-1
changelog:
  - Update to 30.0
  - Drop version for bundles, it contains snapshots for most libraries.
  - Drop removed BDB bits, adjust docs and information.
  - Add new metapackage with multiprocess bitcoin programs and new meta
    command "bitcoin".
  - Package a standalone libbitcoinkernel, which is used by the new IPC
    programs.
  - Set a shared object version on libbitcoinkernel that matches with the
    major release.


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.1.0-1
changelog:
  - Update to v3.1.0
  - Drop Patch0 (duplicate definitions in code - backport from this release)
  - Drop Fedora-specific metainfo file (now provided by upstream)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.1.1-1
changelog:
  - Update to v3.1.1
  - Drop Patch2 (C99 issues) - backport from this release
  - Drop Patch3 (missing includes) - merged upstream


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Jan Macku <jamacku@redhat.com> - 8.11.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2024-9681 - HSTS subdomain overwrites parent cache entry


author: Jan Macku <jamacku@redhat.com> - 8.11.1-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2024-11053 - netrc and redirect credential leak


author: Paul Howarth <paul@city-fan.org> - 8.11.1-2
changelog:
  - Fix crash with Unexpected error 9 on netlink descriptor 10 (rhbz#2332350)
    - https://github.com/curl/curl/issues/15725
    - https://github.com/curl/curl/pull/15727


author: Jan Macku <jamacku@redhat.com> - 8.11.1-6
changelog:
  - Fix Out of bounds read for cookie path (CVE-2025-9086)
  - Fix predictable WebSocket mask (CVE-2025-10148)


author: Richard W.M. Jones <rjones@redhat.com> - 3.8.3-5
changelog:
  - Rebuild for Jansson 2.14 (https://lists.fedoraproject.org/archives/list/d
    evel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Petr Menšík <pemensik@redhat.com> - 10.1.0-1
changelog:
  - Update to 10.1.0 (rhbz#2316744)
  - https://github.com/NetworkConfiguration/dhcpcd/releases/tag/v10.1.0
  - https://github.com/NetworkConfiguration/dhcpcd/compare/v10.0.10...v10.1.0


author: Petr Lautrbach <lautrbach@redhat.com> - 1.3.5-2
changelog:
  - Modify queue to use ring buffer
  - Fix memory leaks in the AVL tests
  - Do not exit in do_database_reload when stop in progress
  - Add /var/lib/fapolicyd to tmpfiles
  - Fix owner:group of /etc/fapolicyd on boot
  - Change /usr/share/fapolicyd to root:root


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Martin Stransky <stransky@redhat.com> - 146.0-3
changelog:
  - Added aarch64 crash fix
  - Fixed rawhide gcc build (kudos to jhorak who hacked it! He's just awesome.)


author: Martin Stransky <stransky@redhat.com> - 146.0-6
changelog:
  - Added upstream patch IWYU (libwebrtc IWYU fixes for PipeWire)
  - Claude AI assisted editing (failed to do whole work, but it was close!)


author: Ondrej Holy <oholy@redhat.com> - 2:3.21.0-1
changelog:
  - Update to 3.21.0 (CVE-2026-23530, CVE-2026-23531, CVE-2026-23532,
    CVE-2026-23533, CVE-2026-23534, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884)
    Resolves: rhbz#2430928


author: Florian Weimer <fweimer@redhat.com> - 2.41-7
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit 6e489c17f827317bcf8544efefa65f13b5a079dc:
  - ppc64le: Revert "powerpc: Optimized strcmp for power10" (CVE-2025-5702)
  - ppc64le: Revert "powerpc : Add optimized memchr for POWER10" (Bug 33059)
  - ppc64le: Revert "powerpc: Fix performance issues of strcmp power10" (CVE-2025-5702)
  - ppc64le: Revert "powerpc: Optimized strncmp for power10" (CVE-2025-5745)
  - elf: Keep using minimal malloc after early DTV resize (bug 32412)
  - nptl: Fix pthread_getattr_np when modules with execstack are allowed (BZ 32897)


author: Florian Weimer <fweimer@redhat.com> - 2.41-9
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit e7c419a2957590fb657900fc92a89708f41abd9d:
  - iconv: iconv -o should not create executable files (bug 33164)
  - CVE-2025-8058: Fix double-free after allocation failure in regcomp (#2383154)


author: Florian Weimer <fweimer@redhat.com> - 2.41-10
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit 513629b14d43bffd83985ffb9cf10e5599e649d2:
  - elf: Handle ld.so with LOAD segment gaps in _dl_find_object (bug 31943)
  - elf: Extract rtld_setup_phdr function from dl_main
  - elf: Do not add a copy of _dl_find_object to libc.so
  - stdlib: resolve a double lock init issue after fork [BZ #32994]


author: Florian Weimer <fweimer@redhat.com> - 2.41-11
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit a52c9b75c70124fe4f69e6b0ed288e2c14bd7ce9:
  - Optimize __libc_tsd_* thread variable access
  - i386: Add GLIBC_ABI_GNU_TLS version [BZ #33221]
  - i386: Also add GLIBC_ABI_GNU2_TLS version [BZ #33129]
  - i386: Update ___tls_get_addr to preserve vector registers
  - elf: Preserve _rtld_global layout for the release branch
  - elf: Test dlopen (NULL, RTLD_LAZY) from an ELF constructor
  - elf: Fix handling of symbol versions which hash to zero (bug 29190)
  - x86-64: Add GLIBC_ABI_DT_X86_64_PLT [BZ #33212]
  - x86-64: Add GLIBC_ABI_GNU2_TLS version [BZ #33129]
  - elf: Compile _dl_debug_state separately (bug 33224)
  - elf: Restore support for _r_debug interpositions and copy relocations
  - elf: Introduce _dl_debug_change_state
  - elf: Introduce separate _r_debug_array variable
  - Use TLS initial-exec model for __libc_tsd_CTYPE_* thread variables [BZ #33234]
  - ctype: Fallback initialization of TLS using relocations (bug 19341, bug 32483)
  - Use proper extern declaration for _nl_C_LC_CTYPE_{class,toupper,tolower}
  - Remove <libc-tsd.h>
  - AArch64: Improve codegen SVE log1p helper
  - AArch64: Optimise SVE FP64 Hyperbolics
  - AArch64: Optimize SVE exp functions
  - AArch64: Improve codegen in SVE log1p
  - AArch64: Optimize inverse trig functions
  - AArch64: Optimize algorithm in users of SVE expf helper
  - AArch64: Avoid memset ifunc in cpu-features.c [BZ #33112]
  - nptl: Fix SYSCALL_CANCEL for return values larger than INT_MAX (BZ 33245)


author: Frédéric Bérat <fberat@redhat.com> - 2.41-12
changelog:
  - Auto-sync with upstream branch master,
    commit 6a0b8e366520a09722aef6c17ec1b103e82f3c28:
  - ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091) (Sachin Monga)
  - ppc64le: Restore optimized strncmp for power10 (Sachin Monga)
  - ppc64le: Restore optimized strcmp for power10 (Sachin Monga)
  - AArch64: Fix and improve SVE pow(f) special cases (Pierre Blanchard)
  - AArch64: fix SVE tanpi(f) [BZ #33642] (Pierre Blanchard)
  - AArch64: Fix instability in AdvSIMD sinh (Joe Ramsay)
  - AArch64: Fix instability in AdvSIMD tan (Joe Ramsay)
  - AArch64: Optimise SVE scalar callbacks (Joe Ramsay)
  - aarch64: fix includes in SME tests (Yury Khrustalev)
  - aarch64: Do not link conform tests with -Wl,-z,force-bti (bug 33601) (Florian Weimer)
  - aarch64: fix cfi directives around __libc_arm_za_disable (Yury Khrustalev)
  - aarch64: tests for SME (Yury Khrustalev)
  - aarch64: clear ZA state of SME before clone and clone3 syscalls (Yury Khrustalev)
  - aarch64: define macro for calling __libc_arm_za_disable (Yury Khrustalev)
  - aarch64: update tests for SME (Yury Khrustalev)
  - aarch64: Disable ZA state of SME in setjmp and sigsetjmp (Yury Khrustalev)
  - x86: fix wmemset ifunc stray '!' (bug 33542) (Jiamei Xie)
  - x86: Detect Intel Nova Lake Processor (Sunil K Pandey)
  - x86: Detect Intel Wildcat Lake Processor (Sunil K Pandey)
  - nss: Group merge does not react to ERANGE during merge (bug 33361) (Florian Weimer)
  - AArch64: Fix SVE powf routine [BZ #33299] (Pierre Blanchard)


author: Frédéric Bérat <fberat@redhat.com> - 2.41-13
changelog:
  - Auto-sync with upstream branch master,
    commit c96b4ed1e26f06ebc56c17ba2c29d1647be68c1e:
  - nptl: Optimize trylock for high cache contention workloads (BZ #33704) (Sunil K Pandey)
  - support: Exit on consistency check failure in resolv_response_add_name (Florian Weimer)
  - support: Fix FILE * leak in check_for_unshare_hints in test-container (Florian Weimer)
  - sprof: fix -Wformat warnings on 32-bit hosts (Collin Funk)
  - sprof: check pread size and offset for overflow (DJ Delorie)


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.25.2-3
changelog:
  - hp-plugin failed checksum due usage of different hashes (fedora#2361230)
  - output is not seen after installing plugin (fedora#2361230)


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.25.6-1
changelog:
  - hp-scan command failed to run and gives an error (fedora#2395809)
  - use new GPG key from HP - new key was used as fix for CVE-2025-43023


author: Packit <hello@packit.dev> - 37-1
changelog:
  Changes with 37
  ----------------
    - Support uploading to libvirt (#300)
      - Author: Jakub Kadlčík, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - blueprintload: improve error message in Load (#333)
      - Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger, Tomáš Hozza
    - doc: mention CentOS (#336)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - go.mod: update to v0.197.0 (#326)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - main: add `--bootc-build-ref` option to set build container (#325)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - test: add missing test container cleanups (#330)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - test: check that we get the expected image types (HMS-9426) (#320)
      - Author: Michael Vogt, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-01


author: Packit <hello@packit.dev> - 38-1
changelog:
  Changes with 38
  ----------------
    - deps: bump images to 0.202.0 (#339)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt

  — Somewhere on the Internet, 2025-10-06


author: Packit <hello@packit.dev> - 39-1
changelog:
  Changes with 39
  ----------------
    - ci: consistent triggers for spec check (#346)
      - Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    - ci: split apart test cases (#331)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - cmd/image-builder: adjust code to unified rpmmd.Package struct (HMS-9457) (#334)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - deps: update images and blueprint (#345)
      - Author: Simon de Vlieger, Reviewers: Florian Schüller, Tomáš Hozza
    - main: add osbuild version to version command (#332)
      - Author: Lukáš Zapletal, Reviewers: Michael Vogt, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-15


author: Packit <hello@packit.dev> - 40-1
changelog:
  Changes with 40
  ----------------
    - Allow setting custom tags when uploading to AWS (#327)
      - Author: Jakub Kadlčík, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Support uploading to IBM Cloud (#338)
      - Author: Jakub Kadlčík, Reviewers: Michael Vogt, Simon de Vlieger
    - Support uploading to OpenStack (#337)
      - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: switch yaml libraries (#354)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - main: add support for bootc-installer image types (#341)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - progress: detect real terminal width for messages (#316)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-29


author: Packit <hello@packit.dev> - 41-1
changelog:
  Changes with 41
  ----------------
    - Drop the need for --privileged for all subcommands except `build` (#361)
      - Author: Ondřej Budai, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - ci: add gobump action (#365)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - main: add `--rpmmd-cache` options [HMS-9646] (#358)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: fix missing append of `repositories` when using --data-dirs (#360)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane
    - many: update all refs to Fedora 43 (#362)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 42-1
changelog:
  Changes with 42
  ----------------
    - Fix release action (#368)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Michael Vogt
    - build(deps): bump actions/checkout from 5 to 6 (#381)
      - Author: dependabot[bot], Reviewers: Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#382)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - ci: split gobump into two PRs (#371)
      - Author: Lukáš Zapletal, Reviewers: Michael Vogt, Simon de Vlieger
    - cmd: modify success message to include image path (#377)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    - doc/installation: mention RHEL 9.7 and 10.1 (#378)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal, Tomáš Hozza
    - doc: additional information on `ostree` (HMS-9741) (#373)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - doc: document `bootc` specifics (HMS-9740) (#375)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt, Tomáš Hozza
    - github: disable gomod updates with dependabot (#372)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: move to images v0.218 (#370)
      - Author: Michael Vogt, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - go.mod: move to images v0.223 (#383)
      - Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger
    - main: add `--bootc-defaultfs` option (#324)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - many: metrics option for stage durations (#317)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-26


author: Packit <hello@packit.dev> - 43-1
changelog:
  Changes with 43
  ----------------
    - Containerfile: add subscription-manager (#390)
      - Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger
    - bib: drop inContainerOrUnknown() and use setup.IsContainer() (#395)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - chore: bump dependencies via gobump (#389)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#394)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - cmd: make bootc-image-builder a multi-call binary of ibcli (HMS-9808) (#374)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - cmd: move the "upload" comand from bib here (#396)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - deps: update images to 0.228.0 (#393)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - docs: add a note about satellite (#385)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - go.mod: move to images v0.226.0 (#384)
      - Author: Michael Vogt, Reviewers: Anna Vítová, Simon de Vlieger
    - main: add `{supported,required}` bp options to describe-image (#376)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: rename `data-dir` to `force-data-dir` (#386)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - readme: new `--force-data-dir` (#387)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt
    - repos: force data is an override (#388)
      - Author: Simon de Vlieger, Reviewers: Michael Vogt, Tomáš Hozza
    - test: add test for subscribed content (#391)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2025-12-10


author: Packit <hello@packit.dev> - 44-1
changelog:
  Changes with 44
  ----------------
    - [RFC] main: print pretty json manifest (#414)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bib: document details about  {,bib}cmd{ManifestFromCobra,Build} (#402)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bib: fix anaconda-iso mTLS key extraction (#404)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Ondřej Budai
    - bib: small cleanups (#400)
      - Author: Michael Vogt, Reviewers: Simon de Vlieger, Tomáš Hozza
    - cmd: move `awscloudNewUploader` back into upload.go (#397)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - cmd: remove bibupload as it was never exposed to the public (#405)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - data: install tmpfiles.d/image-builder.conf to auto-clean cache (#418)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: error when image-builder is used to create anaconda-iso (#401)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Lukáš Zapletal
    - test: add rhel specific tests (#403)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 45-1
changelog:
  Changes with 45
  ----------------
    - deps: bump images to 0.231.0 (#425)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal

  — Somewhere on the Internet, 2026-01-05


author: Packit <hello@packit.dev> - 47-1
changelog:
  Changes with 47
  ----------------
    - Revert "spec: Use gosource macro for Source0" (#433)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-01-16


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.1-0]
changelog:
  - Initial setup for stable Fedora releases (Justin M. Forbes)
  - Reset RHEL_RELEASE for the 6.19 cycle (Justin M. Forbes)
  - add libasan-static and libubsan as BR for selftests (Thorsten Leemhuis)
  - add liburing-devel as BR for selftests (Thorsten Leemhuis)
  - add a few optional BRs for perf (Thorsten Leemhuis)
  - Linux v6.18.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.3-0]
changelog:
  - Config update due to stable patches (Justin M. Forbes)
  - wifi: iwlwifi: Fix firmware version handling (Ville Syrjälä)
  - Linux v6.18.3


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.5-0]
changelog:
  - erofs: fix file-backed mounts no longer working on EROFS partitions (Gao Xiang)
  - erofs: don't bother with s_stack_depth increasing for now (Gao Xiang)
  - Linux v6.18.5


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.6-0]
changelog:
  - Conifg update for 6.18.6 backports (Justin M. Forbes)
  - fedora: aarch64: Enable TI_SCI_INTR_IRQCHIP as built-in (Ayush Singh)
  - Backport of Intel ISH HID patches to support sensors on Lenovo platforms (Vishnu Sankar) [2428677]
  - Backport of Intel ISH HID patches to support sensors on Lenovo platforms (Vishnu Sankar) [2428677]
  - Linux v6.18.6


author: Michel Lind <salimma@fedoraproject.org> - 0.5.4-2
changelog:
  - Revert Packit-related changes as we need to manually audit licenses
  - Account for licensing of dependencies


author: Ondrej Holy <oholy@redhat.com> - 1.1.22-2
changelog:
  - Use 
  %setup        -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-doc-Don-t-document-internal-endian-macros.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-disabled-foxconn-487-e111-id.-https-github.com-libmt.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: Björn Esser <besser82@fedoraproject.org> - 1:7.10.1-1
changelog:
  - Update to v7.10.1
    Fixes rhbz#2357284
  - Add patch to fix deprecation of the <ciso646> header for C++17


author: Björn Esser <besser82@fedoraproject.org> - 1:7.10.3-1
changelog:
  - Update to v7.10.3
    Fixes rhbz#2401105
  - Drop patch to fix deprecation of the <ciso646> header for C++17,
    solved upstream


author: Terje Rosten <terjeros@gmail.com> - B.02.20-10
changelog:
  - Improve cmake patch to get all required flags added
  - Increase required cmake version
  - Update to latest commit 209f83


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-10
changelog:
  - Backport fixes for CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-32906
    CVE-2025-32907 CVE-2025-32909


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-12
changelog:
  - Backport fixes for CVE-2025-4476, CVE-2025-4948, CVE-2025-4969,
    CVE-2025-46420, CVE-2025-46421, CVE-2025-4945


author: Jens Petersen <petersen@redhat.com> - 2.31.2-33
changelog:
  - ghost /nix/var/nix/* and sockets
  - add builds/ ghost back to daemon (since it creates it)
  - db/ and gcroots/auto/ remain after uninstalling


author: Jens Petersen <petersen@redhat.com> - 2.31.2-36
changelog:
  - trivial spec changes
  - list nix-daemon files without glob
  - commented TEST_ROOT: doesn't actually work


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.1.1-1
changelog:
  - Update to 3.1.1
  - [MIDI] loading files would cause crash (null dereference) if ~/.timidity.cfg not present


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.1.1-2
changelog:
  - [MIDI] Add patch to prefer /etc/timidity++.cfg to /etc/timidity.cfg
  - [MIDI] Add upstream patch to set comment to .pat filename without full path
  - Recommends: fluid-soundfont-gm


author: Sandro Mani <manisandro@gmail.com> - 9.11-2
changelog:
  - Regenerate vendor tarball to pull in newer devalue and svelte, fixes
    CVE-2026-22775 and CVE-2025-15265


author: Remi Collet <remi@remirepo.net> - 8.4.15-2
changelog:
  - Fix GH-20528 regression breaks mysql connexion using an IPv6 address enclosed
    in square brackets (upstream patch)


author: Wim Taymans <wtaymans@redhat.com> - 1.4.8-2
changelog:
  - Add patch for xrun regression when stopping nodes.
  - Add patch for libcamera IPA spawn problem.
  - Add patch to fix UMP event sorting.


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.12-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Karolina Surma <ksurma@redhat.com> - 3.15.0~a1-2
changelog:
  - Use bundled wheels on Fedora < 43
  - Properly export CFLAGS+LDFLAGS when invoking make install to fix 3rd-party extension building


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.22-2
changelog:
  - Add RPM Provides for python3.9-libs, python3.9-devel, python3.9-idle, python3.9-tkinter, python3.9-test


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.70.2-1
changelog:
  - Update to 1.70.2 - Closes rhbz#2254045 rhbz#2336979 rhbz#2337234
    rhbz#2341265 rhbz#2348838 rhbz#2350844 rhbz#2352327 rhbz#2354433
    rhbz#2360615 rhbz#2360653


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-3
changelog:
  - Add helpers subpackage
  - Add wek deps: conditional recommends on recoll-krunner if
    kf6-krunner is present and corresponding backwards conditional supplements


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-6
changelog:
  - Add forward and backwards weak deps in -gssp subpackage to gnome-shell
  - Remove wrong req. on -kio
  - Let -kio subpackage Supplement kf6-kio-core


author: Peter Jones <pjones@redhat.com> - 15.8-1
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Clark Williams <williams@redhat.com> - 1.21.2-1
changelog:
  - Makefile: bump version to v1.20.1
  - bpf: Improve task tracking in sched_switch
  - bpf/stalld: Introduce compute_ctxswc helper and update ctxswc on sched_switch


author: Clark Williams <williams@redhat.com> - 1.21.1-1
changelog:
  - refactor: Remove unused 'exiting' variable
  - bpf: Introduce task_is_rt() helper
  - bpf: Correctly update nr_rt_running on sched_switch
  - Simplify __die() function to use abort()
  - Refactor: Use path length macros in check_dl_server_dir_exists
  - Refactor: Remove duplicated find_debugfs function
  - utils: Remove unused find_mount() function
  - bpf: Reorder functions to prepare for future changes
  - bpf: Pass stalld_cpu_data pointer to queuing functions
  - bpf: Make update_or_add_task() return void
  - bpf: Reuse enqueue_task() in update_or_add_task()
  - bpf: Use tracepoints to avoid fentry startup stall
  - bpf: Centralize monitoring check in get_cpu_data()
  - bpf: Remove unused 'task' variable
  - bpf: Use task_cpu() to get the correct CPU data
  - bpf: Handle wakeup of new tasks with sched_wakeup_new
  - daemon: Refactor cleanup logic into a helper function
  - daemon: Clean up stale tasks during the boost phase
  - bpf: Document and enhance dequeue_task return value
  - bpf: Handle task migrations with sched_migrate_task
  - bpf: a task is dequeued just by setting its pid to 0
  - bpf: Improve logging in stalld.bpf.c
  - bpf: Use BPF CO-RE for task CPU field access
  - bpf: Add const qualifier to task_struct pointers
  - bpf: Add task iterator for initial state snapshot
  - bpf: Simplify task queue management by removing redundant rt parameter
  - bpf: Add cpu to log_task_prefix
  - stalld: Refactor tgid_field handling to use sizeof
  - refactor: Move helper functions to utils.c
  - stalld: Simplify get_cpu_idle_time() function using sscanf
  - refactor: Simplify update_cpu_starving_vector()
  - refactor: Remove unused headers from stalld.c
  - stalld: Extract repeated buffer reallocation pattern
  - stalld: Flatten nested conditionals using early returns
  - refactor: Extract common idle detection pattern into helper function
  - refactor: Standardize memory allocation with calloc-compatible helper
  - bpf: Use CO-RE to check for running tasks
  - systemd:  change systemd service startup to use RuntimeDirectory
  - Makefile: version bump to v1.21.1


author: Clark Williams <williams@redhat.com> - 1.22.1-1
changelog:
  - bpf: Reduce arguments to log() to fix verifier error
  - stalld: Always reset starving vector in merge_taks_info
  - stalld: Remove forced log-only mode with DL-server
  - Makefile: version bump to v1.22.1


author: Clark Williams <williams@redhat.com> - 1.24.1-1
changelog:
  - sched_debug: Unify parsing methods for task_info
  - sched_debug: Fix runqueue task parsing logic and state filtering
  - sched_debug: Fix double-free crash in fill_waiting_task()
  - stalld.c: remove noisy idle report and added report to should_skip_idle_cpus()
  - stalld.c: initialize cpu_info->idle_time to be -1
  - stalld.c: get rid of misleading print about DL-Server
  - stalld.c: Add starvation logging in single-threaded log-only mode
  - stalld: Add -N/--no_idle_detect flag to disable idle detection
  - stalld: Add defensive checks in print_boosted_info
  - Makefile: Add support for legacy kernels
  - scripts: fix run-local if bashism
  - sched_debug: Fix segfault in adaptive/aggressive modes
  - Makefile: Remove redhat-specific checks
  - Makefile: Add a help target
  - Makefile: Check compatible compiler versions
  - stalld.c: Ensure queue_track backend is not referenced when USE_BPF=0
  - Makefile: version bump to v1.24.1


author: Clark Williams <williams@redhat.com> - 1.25.1-1
changelog:
  - docs: add CLAUDE.md, .claude agents, and update .gitignore
  - tests: Add comprehensive test suite with infrastructure and functional tests
  - tests: Add Phase 2 command-line option tests (8 new tests)
  - docs: Add project rules and agent usage guidelines
  - docs: Update context snapshot with Phase 2 completion
  - tests: Add Phase 3.1 core logic tests (starvation detection and parsing)
  - tests: Add Phase 3.2 boosting mechanism tests (DEADLINE, FIFO, restoration)
  - tests: Add Phase 3.3 task merging and idle detection tests - Phase 3 COMPLETE
  - tests: Add RT throttling save/restore helpers
  - tests: Automatically save and restore RT throttling state
  - tests: Fix test_task_merging empty variable errors and add DL-server check
  - tests: Add DL-server save/disable/restore support
  - docs: Update TODO.md with DL-server management and recent improvements
  - docs: Update context snapshot with Phase 3 completion and state management
  - tests: Add legacy test integration and backend selection support
  - test01: add ability to specify backend
  - tests: remove binary accidentally committed
  - tests: Fix cleanup EXIT trap to preserve test exit codes
  - tests: Fix test_log_only.sh timing and starvation reliability
  - tests: Add backend selection support to individual tests
  - saved claude context snapshot and moved CLAUDE.md to .claude dir
  - .claude: Add context-snapshot.json and update CLAUDE.md
  - tests: Fix starvation_gen to create actual RT starvation
  - tests: Fix test_starvation_detection.sh to respect backend selection
  - tests: Fix test_starvation_detection.sh timing and idle detection issues
  - tests: Fix EPERM errors in cleanup by improving process termination handling
  - docs: Update CLAUDE.md with backend selection and debugfs/procfs clarification
  - tests: Fix infinite hang in test_starvation_detection.sh Test 5
  - tests: Rewrite test_cpu_selection.sh to use modern test framework
  - tests: Rewrite test_boost_period.sh to fix hanging issues
  - tests: Fix PID tracking and backgrounding issues in test suite
  - tests: Rewrite test_starvation_threshold.sh to fix undefined variables
  - tests: Fix test_starvation_threshold.sh log file collision issue
  - tests: Update TODO.md with 2025-10-09 progress and old-style test issues
  - tests: Update context snapshot for 2025-10-09 test framework hardening session
  - tests: Rewrite all remaining old-style Phase 2 tests using modern framework
  - tests: Fix EPERM errors in test cleanup by replacing wait with polling
  - tests: Fix Phase 1 test issues (affinity, backend_selection, fifo_boosting)
  - tests: Add -N flag to disable idle detection in starvation/FIFO tests
  - tests: Fix argument ordering in backend selection tests
  - tests: Fix hanging issues in test_boost_duration.sh
  - tests: Fix test_boost_runtime.sh hanging and improve reliability
  - save LLM context
  - add helpers for git-scm-master AI agent
  - tests: Fix output redirection issues in test_affinity.sh
  - test: Fix test_pidfile.sh output handling and CLI options
  - tests: Fix test_boost_period.sh helper integration and reliability
  - test: Fix test_boost_restoration.sh for stability and standard infrastructure
  - docs: Document mass test suite fixes session with 7 tests and 4 critical discoveries
  - tests: Fix grep pattern in test_starvation_threshold.sh for actual log format
  - docs: Update context snapshot for queue_track backend test fixes
  - tests: Implement matrix testing for backends and threading modes
  - docs: Update CLAUDE.md with correct threading mode flags and matrix testing
  - context: Document matrix testing infrastructure implementation
  - tests: Add timeout protection to test01_wrapper.sh
  - Document queue_track backend limitation in test_starvation_threshold.sh
  - docs: Update documentation with segfault fix and queue_track limitation
  - tests: Add FIFO-on-FIFO priority starvation test
  - tests: Enhance starvation_gen and fix test infrastructure
  - .claude: Update context snapshot
  - .claude: Update context snapshot - BPF RT task tracking fix completed
  - tests: Change starvation_gen default work_target to 1
  - .claude: Update context snapshot - 14/16 tests passing with queue_track
  - tests: Improve starvation_gen thread coordination and shutdown
  - .claude: Update context snapshot - starvation_gen improvements and test progress
  - tests: Add --test option to run individual tests by name
  - .claude: Update context snapshot - test infrastructure improvements complete
  - tests: Fix test_boost_restoration to properly test SCHED_FIFO restoration
  - tests: Add SCHED_OTHER option to starvation_gen
  - tests: Update test_boost_restoration Test 3 to use SCHED_OTHER
  - context snapshot
  - tests: Add kworker denylist to test_boost_restoration
  - tests: Fix Test 5 timing and parameter validation
  - tests: Add journal logging for test activity correlation
  - context snapshot
  - tests: Increase test01 timeout and document kworker competition
  - context snapshot
  - tests: Add unified test environment management framework
  - context snapshot
  - tests: Fix timing race conditions in starvation detection tests
  - docs: Update TODO.md with test suite timing race condition fixes
  - docs: Add context snapshot for test suite timing race fixes
  - tests: Fix timing race conditions in starvation detection tests
  - tests: Fix timing race conditions in test_deadline_boosting
  - tests: Fix timing race conditions in 4 remaining functional tests
  - tests: Fix output buffering and kernel worker interference
  - tests: Fix output buffering in test_starvation_detection Test 3
  - docs: Context snapshot for Nov 3 evening session - timing fixes and buffering issues
  - tests: Fix test_starvation_detection Test 3 flawed counting logic
  - tests: Consolidate duplicate helper functions (Part 1 complete)
  - context snapshot
  - bpf: Add BPF CO-RE compatibility for older kernels
  - Makefile: Make BPF compilation verbose
  - Makefile: Append -std=c99 to CFLAGS
  - doc: update Releases.md for repository instructions
  - tests: Fix start_stalld() PID detection for daemon and slow architectures
  - doc: Release notes for v1.25.1 release
  - Makefile: version bump to v1.25.1


author: Clark Williams <williams@redhat.com> - 1.26.3-1
changelog:
  - tests: Add pre-test and post-test cleanup of stalld processes
  - Makefile: version bump to v1.26.3
  - Makefile: Remove unnecessary -m64 compiler flag
  - Makefile: version bump to v1.26.2
  - Makefile: Remove LTO flags from build options
  - Makefile: switch to using gzip for tarball compression
  - Makefile: version bump to v1.26.1
  - Makefile: Add support for riscv64
  - Fix typo: rename 'merge_taks_info' to 'merge_tasks_info'
  - gitignore: Exclude Serena and Claude Code metadata
  - Makefile: Print BPF tool versions for debugging
  - Makefile: Remove redundant GCC version check
  - Makefile: Explicitly run the 'test' target in the tests directory
  - Makefile: Improve compiler flag detection for -fcf-protection
  - Makefile: Conditionally add -mno-omit-leaf-frame-pointer


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.1.2-2
changelog:
  - Workaround for use-after-free when trying to repaint window after opening
    supprted file (bug 2425678)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


