Lower memory limits and improve their checking (rhbz#2021851)
Remove timestamp from the user manual (rhbz#2022364)

Allow local DS components (rhbz#1970529)
Fix hostname detection in offline scan of UBI 9 images (rhbz#1893888)
Add an alternative source of hostname (rhbz#1977668)
Fix oscap-chroot errors in process58_probe caused by empty /proc (rhbz#2008922)

Introduce support for Image Builder's Blueprint remediation type (rhbz#2020050)

Initialize crypto API only once (rhbz#1959570)

Add 'null' values handling to the yamlfilecontent probe (RHBZ#1981691)

Replace getlogin by cuserid

Waive known issue with hugepages in upstream testsuite (RHBZ#1912000)
Fix issues reported by the coverity scan
Introduce OSBuild 'blueprint' fix type

Fix changelog (add missing 1.3.3-6 entry)

Upgrade to the latest upstream release (RHBZ#1953092)
Fix segfault when using --stig-viewer option and latest XML file from DoD (RHBZ#1912000)
Improve doc about --stig-viewer (RHBZ#1918759)
Backport an upstream patch adding CentOS CPE (RHBZ#1907935)

Add check for non-local GPFS file system into Test Suite (RHBZ#1840578)

Use MALLOC_CHECK_=3 while executing Test Suite (RHBZ#1891770)

Fix memory allocation (RHBZ#1891770)

Enable profile composition with a specific platform (RHBZ#1896676)
Enable YAML probe to work with sets of values (RHBZ#1895715)

Fix problems uncovered by the Coverity Scan (RHBZ#1887794)

Upgrade to the latest upstream release (RHBZ#1887794)
Treat GPFS as a remote file system (RHBZ#1840578, RHBZ#1840579)
Fixed the most problematic memory issues that were causing OOM situations
Proper handling of OVALs with circular dependencies between definitions (RHBZ#1812476)

Detect remote file systems correctly (RHBZ#1870087)