# changelog

author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.1-5
changelog:
  - Python 2 binary package renamed to python2-nss
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: <jdennis@redhat.com> - 1.0.1-10
changelog:
  - Move documentation generator from epydoc to Sphinx autodoc
  - Modify py2/py3 build logic to comply with new guidelines


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-7
changelog:
  - Add upstream patch to solve build-time warning
  - Move patches to dist-git
  - Resolves: rhbz#1639348


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-14
changelog:
  - Fixes for CVE-2021-25290, CVE-2021-25292, CVE-2021-25293, CVE-2021-27921
  CVE-2021-27922, and CVE-2021-27923
  Resolves: rhbz#1934685 rhbz#1934699 rhbz#1934705 rhbz#1935384 rhbz#1935396 rhbz#1935401


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-15
changelog:
  - Fixes for CVE-2021-25288, CVE-2021-25287, CVE-2021-28675, CVE-2021-28676,
  CVE-2021-28677 and CVE-2021-28678
  Resolves: rhbz#1958231, rhbz#1958226, rhbz#1958240, rhbz#1958252, rhbz#1958257, rhbz#1958263


author: Charalampos Stratakis <cstratak@redhat.com> - 5.1.1-18
changelog:
  - Fixup for CVE-2022-22817
  - Security fixes for CVE-2022-22815, CVE-2022-22816
  Resolves: rhbz#2042511, rhbz#2042522


author: Charalampos Stratakis <cstratak@redhat.com> - 5.6.4-4
changelog:
  - Security fix for CVE-2019-18874: double free because of refcount mishandling
  Resolves: rhbz#1772014


author: Tomas Orsava <torsava@redhat.com> - 2.7.4-3
changelog:
  - Revert switching Python 3 subpackages to the python3X- prefix
  - Switch only the requires for python3-devel/debug to the python36-prefix:
    the rest of the packages in the python36 collection will have the python3
    prefix to be unified with the Python 3 packages for Platform-Python


author: Tomas Orsava <torsava@redhat.com> - 2.7.5-5
changelog:
  - Require python2-psycopg2 instead of python-psycopg2 from the
    python2-psycopg2-debug subpackage
  - Resolves: rhbz#1628242


author: Tomas Orsava <torsava@redhat.com> - 2.8.4-3
changelog:
  - Fix shebang mangling
  - Don't ship the debug module, it is not needed and was not shipped in RHEL8 either


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0-15
changelog:
  - enable vsftpd-based tests
  - run the test-suite for Python 3 only
  - do not disable TLS-SRP test because it is now supported by OpenSSL in Fedora


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0.2-4
changelog:
  - fix populating list of decoded strings (#1792213)
  - fix programming mistakes detected by static analyzers (#1666003)


author: Tomas Orsava <torsava@redhat.com> - 3.6.1-6
changelog:
  - BuildRequire the python36-devel package when building for the python36 module
  - BuildRequire also python36-rpm-macros as part of the python36 module build


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5-5
changelog:
  - Python 2 binary package renamed to python2-schedutils
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.3.0-11
changelog:
  - Python 2 binary package renamed to python2-urwid
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: David Cantrell <dcantrell@redhat.com> - 1.3.1-2
changelog:
  - Apply upstream fix for EINTR handling in test_vterm test case
  - Apply upstream fix for test_remove_watch_file flakiness
  - Apply upstream fix for test_vterm handling of NUL characters


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-16
changelog:
  - Bump NVR to redo CI gating tests, because the "update test" was
    malfunctioning and had to be fixed
  Resolves: rhbz#1565560


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.16-5
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1704369 and rhbz#1703537


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-2
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in httplib.putrequest
  Resolves: rhbz#1883258


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-6
changelog:
  - Security fix for CVE-2020-27619: eval() call on content received via HTTP in the CJK codec tests
  Resolves: rhbz#1889886


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-9
changelog:
  - Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response
  Resolves: rhbz#2036020


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-10
changelog:
  - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
  Resolves: rhbz#2047376


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-11
changelog:
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Miro Hrončok <mhroncok@redhat.com> - 2.7.16-11
changelog:
  - Use RPM built wheels of pip and setuptools in ensurepip instead of our rewheel patch
  - Require python2-setuptools from python2-devel to prevent packaging errors
  Resolves: rhbz#1718398


author: Tomas Orsava <torsava@redhat.com> - 2.7.16-12
changelog:
  - Adding FIPS compliance to Python 2 in RHEL8:
    - Updated patch 146 with a new version of the FIPS patch
    - Patch 169 has been removed, obsoleted by the updated patch 146
  Resolves: rhbz#1734126


author: Tomas Orsava <torsava@redhat.com> - 2.7.17-2
changelog:
  - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
  Resolves: rhbz#1856481


author: Nikola Forró <nforro@redhat.com> - 1.0.0-13
changelog:
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1624172


author: Victor Stinner <vstinner@python.org> - 3.6.8-30
changelog:
  - Remove downstream 00178-dont-duplicate-flags-in-sysconfig.patch which
    introduced a bug on distutils.sysconfig.get_config_var('LIBPL')
    (rhbz#1851090).


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-31
changelog:
  - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
  Resolves: rhbz#1856481
  - Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
  Resolves: rhbz#1854926


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-32
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in http.client
  Resolves: rhbz#1883257


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-33
changelog:
  - Add support for upstream architecture names
  https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names
  Resolves: rhbz#1868003


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-34
changelog:
  - Security fix for CVE-2020-27619: eval() call on content received via HTTP in the CJK codec tests
  Resolves: rhbz#1890237


author: Victor Stinner <vstinner@redhat.com> - 3.6.8-39
changelog:
  - Fix reentrant call to threading.enumerate() (rhbz#1959459)
  - Don't exit Python with abort() when a thread exit and there is no available
    file descriptor to load dynamically the libgcc_s.so.1 library (rhbz#1972293)


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-41
changelog:
  - Security fix for CVE-2021-3733: Denial of service when identifying crafted invalid RFCs
  Resolves: rhbz#1995234


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-43
changelog:
  - Change shouldRollover() methods of logging.handlers to only rollover regular files
  Resolves: rhbz#2009200


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-44
changelog:
  - Use the monotonic clock for theading.Condition
  - Use the monotonic clock for the global interpreter lock
  Resolves: rhbz#2003758


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-46
changelog:
  - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2047376, rhbz#2060435


author: Tomas Orsava <torsava@redhat.com> - 1:1.14.3-5
changelog:
  - Switch runtime dependency of the python3-numpy-f2py package from
    python3-devel (that's now buildroot-only) to python3-libs-devel
  Resolves: rhbz#1610863


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.3-13
changelog:
  - Python 2 binary package renamed to python2-pyxattr
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Florian Festi <ffesti@redhat.com> - 4.14.3-5
changelog:
  - Don't error out when replacing an invalid signature (#1874062)
  - Raise an expection when erasing a package fails in Python (#1872623)
  - Fix builds on NFS filesystems (#1840728)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-12
changelog:
  - Bump up the limit of signature header to 64MB (#1918777)
  - Add fapolicyd plugin (#1923167)
  - Unblock signals in forked scriptlets (#1913765)
  - Fix ambiguous diagnostics output on file triggers (#1883338)
  - Ensure ELF files get stripped when debuginfo is disabled (#1634084)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-13
changelog:
  - Fix minor issues found by COVSCAN in fapolicyd plugin
  - Actually honor libarchive bcond at configure time (#1902887)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-15
changelog:
  - Add out-of-bounds checks to hdrblobInit() (#1929445)
  - Fixes CVE-2021-20266
  - Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-16
changelog:
  - Add support for read-only sqlite rpmdb (#1938928)
  - Drop compat .decode() method from returned Py3 strings (#1840142)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-20
changelog:
  - Add --path query option (#1940895)
  - Macroize find-debuginfo script location (#2019540)
  - Validate and require subkey binding sigs on PGP pubkeys (#1958480)
  - Fixes CVE-2021-3521


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-22
changelog:
  - Fix spurious %transfiletriggerpostun execution (#2023693)
  - Skip recorded symlinks in --setperms (#1900662)


author: Vit Mojzis <vmojzis@redhat.com> - 4.2.1-3
changelog:
  - Use 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS instead of -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection


author: Vit Mojzis <vmojzis@redhat.com> - 4.3.0-1
changelog:
  - SETools 4.3.0 release (#1820079)
  - Revised sediff method for TE rules. This drastically reduced memory and run time.
  - Added infiniband context support to seinfo, sediff, and apol.
  - Added apol configuration for location of Qt assistant.
  - Fixed sediff issue where properties header would display when not requested.
  - Fixed sediff issue with type_transition file name comparison.
  - Fixed permission map socket sendto information flow direction.
  - Added methods to TypeAttribute class to make it a complete Python collection.
  - Genfscon now will look up classes rather than using fixed values which
    were dropped from libsepol.
  - setools requires -console, -console-analyses and -gui packages (#1820078)


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018.2-7
changelog:
  - Selectively build python2 or python3 based on current version.
  - Don't use pathfix.py as it fails prep on RHEL when building on systems
    do not have python installled.


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-12
changelog:
  - Remove KSK-2010 from configuration files
  - Resolves: rhbz#1665502
  - Replace legacy directory /var/run/ with /run
  - Resolves: rhbz#1766463
  - Resolves: rhbz#1805978
  - Fix memory leak when DNS over TLS forwarding is configured
  - Resolves: rhbz#1819870


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-13
changelog:
  - Fix two previous patches and add missing patch lines to %prep
  - Fix amplifying an incoming query into a large number of queries directed to a target
  - Resolves: rhbz#1839178 (CVE-2020-12662)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-14
changelog:
  - Fix unbound-1.7.3-amplifying-an-incoming-query.patch patch
  - Resolves: rhbz#1839178 (CVE-2020-12662)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-15
changelog:
  - Fix SPEC file to not check md5 mtime and size of /var/lib/unbound/root.key
  - Resolves: rhbz#1714175
  - Use system-wide crypto policy setting (PROFILE=SYSTEM) instead of custom setting
  - Resolves: rhbz#1842837
  - Enable additional logging in unbound
  - Resolves: rhbz#1850460
  - security hardening from x41 report
  - Resolves: rhbz#1859933
  - symbolic link traversal when writing PID file
  - Resolves: rhbz#1899058


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-16
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1922448


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-17
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1830625


author: Lumír Balhar <lbalhar@redhat.com> - 3.8.6-2
changelog:
  - Add support for upstream architecture names
  https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names
  Resolves: rhbz#1868006


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.8-3
changelog:
  - Security fix for CVE-2021-29921: Leading zeros in IPv4 addresses are no longer tolerated
  Resolves: rhbz#1957458


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.13-1
changelog:
  - Rebase to 3.8.13
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.0-8
changelog:
  - Skip test_startup_imports from test_site if we have a .pth file in sys.path
  Resolves: rhbz#1815643


author: Tomas Orsava <torsava@redhat.com> - 3.8.3-1
changelog:
  - Rebased to 3.8.3 final
  - Backported changes from Fedora
    - Recommend python3-tkinter when tk is installed
    - Add bcond for no_semantic_interposition (enabled by default)
    - Update the ensurepip module to work with setuptools >= 45
  Resolves: rhbz#1847416


author: Petr Viktorin <pviktori@redhat.com> - 1.2.1-6
changelog:
  - Remove build dependency on python2-pytest-xdist and python2-pytest-timeout
  - Enable parallel tests in Python 3 %check
  - Use macros for Python interpreter in tests


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.1-1
changelog:
  - Update to 1.3.1 (#1674101)
  - Drop Python 2 packages (not supported by SciPy >= 1.3)
  - Backported upstream patch for cKDTree (fixes FTBFS)


author: Lumír Balhar <lbalhar@redhat.com> - 1.3.1-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.6-1
changelog:
  - Update to 3.9.6
  - Fix CVE-2021-29921: Improper input validation of octal strings in the ipaddress module
  Resolves: rhbz#1957458


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.13-1
changelog:
  - Update to 3.9.13
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0~rc2-2
changelog:
  - Use upstream architecture names on Fedora 34+
  - https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names


author: Nikola Forró <nforro@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - Increase test timeout, 300 seconds is not always enough
    for test_logpdf_overflow on s390x
    resolves: #1894887


author: Tomas Orsava <torsava@redhat.com> - 1.5.4-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983 rhbz#1877430


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 4.2.0-25
changelog:
  - Resolves: bz#1810193
    (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)
    Another sync


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-28.el8
changelog:
  - kvm-redhat-Install-the-s390-netboot.img-that-we-ve-built.patch [bz#1828317]
  - kvm-linux-headers-update-kvm.h.patch [bz#1828317]
  - kvm-s390x-Don-t-do-a-normal-reset-on-the-initial-cpu.patch [bz#1828317]
  - kvm-s390x-Move-reset-normal-to-shared-reset-handler.patch [bz#1828317]
  - kvm-s390x-Move-initial-reset.patch [bz#1828317]
  - kvm-s390x-Move-clear-reset.patch [bz#1828317]
  - kvm-s390x-Beautify-diag308-handling.patch [bz#1828317]
  - kvm-s390x-kvm-Make-kvm_sclp_service_call-void.patch [bz#1828317]
  - kvm-s390x-Fix-cpu-normal-reset-ri-clearing.patch [bz#1828317]
  - kvm-tests-boot-sector-Fix-the-bad-s390x-assembler-code.patch [bz#1828317]
  - kvm-pc-bios-s390x-Fix-reset-psw-mask.patch [bz#1828317]
  - kvm-s390x-Properly-fetch-and-test-the-short-psw-on-diag3.patch [bz#1828317]
  - kvm-s390x-Rename-and-use-constants-for-short-PSW-address.patch [bz#1828317]
  - kvm-s390x-Add-missing-vcpu-reset-functions.patch [bz#1828317]
  - kvm-s390-sclp-improve-special-wait-psw-logic.patch [bz#1828317]
  - kvm-pc-bios-s390x-Save-iplb-location-in-lowcore.patch [bz#1828317]
  - kvm-s390-ipl-sync-back-loadparm.patch [bz#1828317]
  - kvm-s390-ipl-fix-off-by-one-in-update_machine_ipl_proper.patch [bz#1828317]
  - kvm-s390x-ipl-Consolidate-iplb-validity-check-into-one-f.patch [bz#1828317]
  - kvm-vhost-correctly-turn-on-VIRTIO_F_IOMMU_PLATFORM.patch [bz#1828317]
  - kvm-s390x-Move-diagnose-308-subcodes-and-rcs-into-ipl.h.patch [bz#1828317]
  - kvm-s390x-protvirt-Support-unpack-facility.patch [bz#1828317]
  - kvm-s390x-protvirt-Add-migration-blocker.patch [bz#1828317]
  - kvm-s390x-protvirt-Inhibit-balloon-when-switching-to-pro.patch [bz#1828317]
  - kvm-s390x-protvirt-KVM-intercept-changes.patch [bz#1828317]
  - kvm-s390x-Add-SIDA-memory-ops.patch [bz#1828317]
  - kvm-s390x-protvirt-Move-STSI-data-over-SIDAD.patch [bz#1828317]
  - kvm-s390x-protvirt-SCLP-interpretation.patch [bz#1828317]
  - kvm-s390x-protvirt-Set-guest-IPL-PSW.patch [bz#1828317]
  - kvm-s390x-protvirt-Move-diag-308-data-over-SIDA.patch [bz#1828317]
  - kvm-s390x-protvirt-Disable-address-checks-for-PV-guest-I.patch [bz#1828317]
  - kvm-s390x-protvirt-Move-IO-control-structures-over-SIDA.patch [bz#1828317]
  - kvm-s390x-protvirt-Handle-SIGP-store-status-correctly.patch [bz#1828317]
  - kvm-s390x-Add-unpack-facility-feature-to-GA1.patch [bz#1828317]
  - kvm-s390x-protvirt-Fix-stray-error_report_err-in-s390_ma.patch [bz#1828317]
  - kvm-s390x-pv-Retry-ioctls-on-EINTR.patch [bz#1828317]
  - kvm-s390x-s390-virtio-ccw-Fix-build-on-systems-without-K.patch [bz#1828317]
  - kvm-s390x-pv-Fix-KVM_PV_PREP_RESET-command-wrapper-name.patch [bz#1828317]
  - kvm-spapr-Pass-the-maximum-number-of-vCPUs-to-the-KVM-in.patch [bz#1756946]
  - kvm-introduce-kvm_kernel_irqchip_-functions.patch [bz#1756946]
  - kvm-target-s390x-kvm-Enable-adapter-interruption-suppres.patch [bz#1756946]
  - kvm-vfio-nvlink-Remove-exec-permission-to-avoid-SELinux-.patch [bz#1823275]
  - Resolves: bz#1756946
    ([zKVM] Re-enable KVM_CAP_S390_AIS for new machine types)
  - Resolves: bz#1823275
    (RHEL8.1 - GPU Numa nodes not visible in guest post the pass-through.)
  - Resolves: bz#1828317
    ([IBM 8.3 FEAT] s390x: Base KVM setup for secure guests - qemu part)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-29.el8
changelog:
  - kvm-vfio-ccw-Fix-error-message.patch [bz#1660916]
  - kvm-vfio-ccw-allow-non-prefetch-ORBs.patch [bz#1660916]
  - kvm-linux-headers-support-vfio-ccw-features.patch [bz#1660916]
  - kvm-vfio-ccw-Refactor-cleanup-of-regions.patch [bz#1660916]
  - kvm-vfio-ccw-Add-support-for-the-schib-region.patch [bz#1660916]
  - kvm-vfio-ccw-Refactor-ccw-irq-handler.patch [bz#1660916]
  - kvm-s390x-css-Refactor-the-css_queue_crw-routine.patch [bz#1660916]
  - kvm-vfio-ccw-Add-support-for-the-CRW-region-and-IRQ.patch [bz#1660916]
  - kvm-config-enable-VFIO_CCW.patch [bz#1660916]
  - kvm-virtio-blk-Refactor-the-code-that-processes-queued-r.patch []
  - kvm-virtio-blk-On-restart-process-queued-requests-in-the.patch []
  - kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1838070]
  - Resolves: bz#1660916
    ([IBM 8.3 FEAT] KVM s390x: DASD passthrough support - qemu part)
  - Resolves: bz#1838070
    (CVE-2020-1983 virt:rhel/qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-30.el8
changelog:
  - kvm-i386-Mask-SVM-features-if-nested-SVM-is-disabled.patch [bz#1835390]
  - kvm-s390x-sigp-Fix-sense-running-reporting.patch [bz#1854092]
  - kvm-s390x-tcg-clear-local-interrupts-on-reset-normal.patch [bz#1854092]
  - kvm-virtio-net-fix-removal-of-failover-device.patch []
  - Resolves: bz#1835390
    (qemu promote host does not support 'EDX.npt' and 'EDX.nrip-save' when test with Q35 machine type on EPYC host)
  - Resolves: bz#1854092
    (kvm-unit-tests: tcg smp FAIL)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-31.el8
changelog:
  - kvm-qcow2-Fix-alloc_cluster_abort-for-pre-existing-clust.patch [bz#1807057]
  - kvm-iotests-026-Test-EIO-on-preallocated-zero-cluster.patch [bz#1807057]
  - kvm-iotests-026-Test-EIO-on-allocation-in-a-data-file.patch [bz#1807057]
  - kvm-iotests-026-Move-v3-exclusive-test-to-new-file.patch [bz#1807057]
  - Resolves: bz#1807057
    (qcow2_alloc_cluster_abort() frees preallocated zero clusters)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-32.el8
changelog:
  - kvm-i386-Add-2nd-Generation-AMD-EPYC-processors.patch [bz#1780385]
  - kvm-target-i386-sev-provide-proper-error-reporting-for-q.patch [bz#1689341]
  - kvm-target-i386-sev-fail-query-sev-capabilities-if-QEMU-.patch [bz#1689341]
  - kvm-s390x-protvirt-allow-to-IPL-secure-guests-with-no-re.patch [bz#1863034]
  - Resolves: bz#1689341
    (QEMU should report an error and return failure if AMD SEV is not enabled in the kernel)
  - Resolves: bz#1780385
    ([RFE] AMD EPYC-Rome support for KVM / QEMU guest)
  - Resolves: bz#1863034
    (RHEL8.3 Beta - Secure Execution: Unable to start Qemu with "-no-reboot" option (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-33.el8
changelog:
  - kvm-Require-libfdt-1.6.0.patch [bz#1867847]
  - Resolves: bz#1867847
    ([ppc] virt module 7629: /usr/libexec/qemu-kvm: undefined symbol: fdt_check_full, version LIBFDT_1.2)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-34.el8
changelog:
  - kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869710]
  - Resolves: bz#1869710
    (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-8.3.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-35.el8
changelog:
  - kvm-qga-commands-posix-Rework-build_guest_fsinfo_for_rea.patch [bz#1755075]
  - kvm-qga-commands-posix-Move-the-udev-code-from-the-pci-t.patch [bz#1755075]
  - kvm-qga-commands-posix-Support-fsinfo-for-non-PCI-virtio.patch [bz#1755075]
  - kvm-nvram-Exit-QEMU-if-NVRAM-cannot-contain-all-prom-env.patch [bz#1874780]
  - kvm-pc-bios-s390-ccw-Makefile-Compile-with-std-gnu99-fwr.patch [bz#1846975]
  - kvm-pc-bios-s390-ccw-Move-ipl-related-code-from-main-int.patch [bz#1846975]
  - kvm-pc-bios-s390-ccw-Introduce-ENODEV-define-and-remove-.patch [bz#1846975]
  - kvm-pc-bios-s390-ccw-Move-the-inner-logic-of-find_subch-.patch [bz#1846975]
  - kvm-pc-bios-s390-ccw-Do-not-bail-out-early-if-not-findin.patch [bz#1846975]
  - kvm-pc-bios-s390-ccw-Scan-through-all-devices-if-no-boot.patch [bz#1846975]
  - kvm-pc-bios-s390-ccw-Allow-booting-in-case-the-first-vir.patch [bz#1846975]
  - kvm-pc-bios-s390-ccw-main-Remove-superfluous-call-to-ena.patch [bz#1846975]
  - kvm-aio-posix-completely-stop-polling-when-disabled.patch [bz#1846975]
  - kvm-Remove-explicit-glusterfs-api-dependency.patch [bz#1872854]
  - Resolves: bz#1755075
    ([qemu-guest-agent] fsinfo doesn't return disk info on s390x)
  - Resolves: bz#1846975
    (Failed to boot up a s390x guest with virtio-blk-ccw if attaching a virtio-scsi-ccw bus in previous)
  - Resolves: bz#1872854
    (move the glusterfs dependency out of qemu-kvm-core to the glusterfs module)
  - Resolves: bz#1874780
    (-prom-env does not validate input)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-39.el8
changelog:
  - kvm-ppc-spapr-Add-hotremovable-flag-on-DIMM-LMBs-on-drme.patch [bz#1901837]
  - kvm-ppc-spapr-re-assert-IRQs-during-event-scan-if-there-.patch [bz#1901837]
  - kvm-slirp-check-pkt_len-before-reading-protocol-header.patch [bz#1902237]
  - kvm-s390x-s390-virtio-ccw-Reset-PCI-devices-during-subsy.patch [bz#1905386]
  - kvm-qapi-enable-use-of-g_autoptr-with-QAPI-types.patch [bz#1859494]
  - kvm-error-Fix-examples-in-error.h-s-big-comment.patch [bz#1859494]
  - kvm-error-Improve-error.h-s-big-comment.patch [bz#1859494]
  - kvm-error-Document-Error-API-usage-rules.patch [bz#1859494]
  - kvm-error-New-macro-ERRP_GUARD.patch [bz#1859494]
  - kvm-qga-add-command-guest-get-disks.patch [bz#1859494]
  - kvm-qga-add-implementation-of-guest-get-disks-for-Linux.patch [bz#1859494]
  - kvm-qga-add-implementation-of-guest-get-disks-for-Window.patch [bz#1859494]
  - kvm-qga-fix-missing-closedir-in-qmp_guest_get_disks.patch [bz#1859494]
  - kvm-qga-update-schema-for-guest-get-disks-dependents-fie.patch [bz#1859494]
  - Resolves: bz#1859494
    (Report logical_name for disks without mounted file-system)
  - Resolves: bz#1901837
    (Failed to hotunplug pc-dimm device)
  - Resolves: bz#1902237
    (CVE-2020-29129 CVE-2020-29130 virt:rhel/qemu-kvm: QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets [rhel-8])
  - Resolves: bz#1905386
    (RHEL8.3 - s390x/s390-virtio-ccw: Reset PCI devices during subsystem reset (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-40.el8
changelog:
  - kvm-redhat-link-etc-qemu-ga-fsfreeze-hook-to-etc-qemu-kv.patch [bz#1910267]
  - kvm-qga-rename-Error-parameter-to-more-common-errp.patch [bz#1910326]
  - kvm-util-Introduce-qemu_get_host_name.patch [bz#1910326]
  - kvm-qga-Use-qemu_get_host_name-instead-of-g_get_host_nam.patch [bz#1910326]
  - kvm-redhat-add-un-pre-install-systemd-hooks-for-qemu-ga.patch [bz#1910220]
  - Resolves: bz#1910267
    (There is no soft link '/etc/qemu-kvm/fsfreeze-hook')
  - Resolves: bz#1910326
    (Incorrect hostname returned by  qga command 'guest-get-host-name')
  - Resolves: bz#1910220
    (qemu-ga service still active and can work after qemu-guest-agent been removed)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-41.el8
changelog:
  - kvm-udev-kvm-check-remove-the-exceeded-subscription-limi.patch [bz#1909244]
  - kvm-hw-arm-smmu-common-Factorize-some-code-in-smmu_ptw_6.patch [bz#1843852]
  - kvm-hw-arm-smmu-common-Add-IOTLB-helpers.patch [bz#1843852]
  - kvm-hw-arm-smmu-Introduce-smmu_get_iotlb_key.patch [bz#1843852]
  - kvm-hw-arm-smmu-Introduce-SMMUTLBEntry-for-PTW-and-IOTLB.patch [bz#1843852]
  - kvm-hw-arm-smmu-common-Manage-IOTLB-block-entries.patch [bz#1843852]
  - kvm-hw-arm-smmuv3-Introduce-smmuv3_s1_range_inval-helper.patch [bz#1843852]
  - kvm-hw-arm-smmuv3-Get-prepared-for-range-invalidation.patch [bz#1843852]
  - kvm-hw-arm-smmuv3-Fix-potential-integer-overflow-CID-143.patch [bz#1843852]
  - kvm-memory-Rename-memory_region_notify_one-to-memory_reg.patch [bz#1843852]
  - kvm-memory-Add-IOMMUTLBEvent.patch [bz#1843852]
  - kvm-memory-Add-IOMMU_NOTIFIER_DEVIOTLB_UNMAP-IOMMUTLBNot.patch [bz#1843852]
  - kvm-intel_iommu-Skip-page-walking-on-device-iotlb-invali.patch [bz#1843852]
  - kvm-memory-Skip-bad-range-assertion-if-notifier-is-DEVIO.patch [bz#1843852]
  - kvm-memory-clamp-cached-translation-in-case-it-points-to.patch [bz#1904393]
  - kvm-hw-ehci-check-return-value-of-usb_packet_map.patch [bz#1898628]
  - kvm-hw-net-e1000e-advance-desc_offset-in-case-of-null-de.patch [bz#1903070]
  - Resolves: bz#1909244
    (Remove KVM guest count and limit info message)
  - Resolves: bz#1843852
    (qemu core dumped: qemu-kvm: /builddir/build/BUILD/qemu-4.2.0/memory.c:1928: memory_region_notify_one: Assertion `entry->iova >= notifier->start && entry_end <= notifier->end' failed.)
  - Resolves: bz#1904393
    (CVE-2020-27821 virt:rhel/qemu-kvm: QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c [rhel-8])
  - Resolves: bz#1898628
    (CVE-2020-25723 virt:rhel/qemu-kvm: QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c [rhel-8])
  - Resolves: bz#1903070
    (CVE-2020-25707 CVE-2020-28916 virt:rhel/qemu-kvm: various flaws [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-42.el8
changelog:
  - kvm-linux-headers-add-vfio-DMA-available-capability.patch [bz#1905391]
  - kvm-s390x-pci-Move-header-files-to-include-hw-s390x.patch [bz#1905391]
  - kvm-vfio-Create-shared-routine-for-scanning-info-capabil.patch [bz#1905391]
  - kvm-vfio-Find-DMA-available-capability.patch [bz#1905391]
  - kvm-s390x-pci-Add-routine-to-get-the-vfio-dma-available-.patch [bz#1905391]
  - kvm-s390x-pci-Honor-DMA-limits-set-by-vfio.patch [bz#1905391]
  - kvm-s390x-fix-build-for-without-default-devices.patch [bz#1905391]
  - Resolves: bz#1905391
    (RHEL8.4 - s390x/pci: Honor vfio DMA limiting (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-43.el8
changelog:
  - kvm-Drop-bogus-IPv6-messages.patch [bz#1918054]
  - Resolves: bz#1918054
    (CVE-2020-10756 virt:rhel/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-8.4.0])


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-44.el8
changelog:
  - kvm-spapr-Improve-handling-of-fdt-buffer-size.patch [bz#1901837]
  - kvm-spapr-Fold-h_cas_compose_response-into-h_client_arch.patch [bz#1901837]
  - kvm-spapr-Don-t-use-spapr_drc_needed-in-CAS-code.patch [bz#1901837]
  - kvm-spapr-Fix-handling-of-unplugged-devices-during-CAS-a.patch [bz#1901837]
  - kvm-spapr-Allow-memory-unplug-to-always-succeed.patch [bz#1901837]
  - kvm-spapr-Improve-handling-of-memory-unplug-with-old-gue.patch [bz#1901837]
  - kvm-block-Require-aligned-image-size-to-avoid-assertion-.patch [bz#1834281]
  - kvm-file-posix-Allow-byte-aligned-O_DIRECT-with-NFS.patch [bz#1834281]
  - kvm-block-iscsi-fix-heap-buffer-overflow-in-iscsi_aio_io.patch [bz#1912974]
  - Resolves: bz#1834281
    (qemu-img convert abort when converting image with unaligned size)
  - Resolves: bz#1901837
    (Failed to hotunplug pc-dimm device)
  - Resolves: bz#1912974
    (CVE-2020-11947 virt:rhel/qemu-kvm: QEMU: heap buffer overflow in iscsi_aio_ioctl_cb() in block/iscsi.c may lead to information disclosure [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-45.el8
changelog:
  - kvm-virtiofsd-extract-lo_do_open-from-lo_open.patch [bz#1919111]
  - kvm-virtiofsd-optionally-return-inode-pointer-from-lo_do.patch [bz#1919111]
  - kvm-virtiofsd-prevent-opening-of-special-files-CVE-2020-.patch [bz#1919111]
  - Resolves: bz#1919111
    (CVE-2020-35517 virt:rhel/qemu-kvm: QEMU: virtiofsd: potential privileged host device access from guest [rhel-8.4.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-46.el8
changelog:
  - kvm-redhat-makes-qemu-respect-system-s-crypto-profile.patch [bz#1902960]
  - kvm-spapr-Adjust-firmware-path-of-PCI-devices.patch [bz#1912891]
  - Resolves: bz#1902960
    (QEMU doesn't honour system crypto policies)
  - Resolves: bz#1912891
    ([ppc64le] --disk cdimage.iso,bus=usb fails to boot)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-47.el8
changelog:
  - kvm-x86-cpu-Enable-AVX512_VP2INTERSECT-cpu-feature.patch [bz#1790620]
  - kvm-target-i386-add-fast-short-REP-MOV-support.patch [bz#1790620]
  - kvm-x86-cpu-Populate-SVM-CPUID-feature-bits.patch [bz#1790620]
  - kvm-i386-Add-the-support-for-AMD-EPYC-3rd-generation-pro.patch [bz#1790620]
  - Resolves: bz#1790620
    ([RFE] AMD Milan - Add KVM/support for EPYC-Milan CPU Model - Slow Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-48.el8
changelog:
  - kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917451]
  - Resolves: bz#1917451
    (CVE-2020-29443 virt:rhel/qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-8.4.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-49.el8
changelog:
  - kvm-net-remove-an-assert-call-in-eth_get_gso_type.patch [bz#1892350]
  - kvm-e1000-fail-early-for-evil-descriptor.patch [bz#1930092]
  - kvm-net-forbid-the-reentrant-RX.patch [bz#1859175]
  - kvm-qemu-img-convert-Don-t-pre-zero-images.patch [bz#1855250]
  - kvm-audio-audio_generic_get_buffer_in-should-honor-size.patch [bz#1932823]
  - Resolves: bz#1892350
    (CVE-2020-27617 virt:rhel/qemu-kvm: QEMU: net: an assert failure via eth_get_gso_type [rhel-8.5.0])
  - Resolves: bz#1930092
    (CVE-2021-20257 virt:rhel/qemu-kvm: QEMU: net: e1000: infinite loop while processing transmit descriptors [rhel-8.5.0])
  - Resolves: bz#1859175
    (CVE-2020-15859 virt:rhel/qemu-kvm: QEMU: net: e1000e: use-after-free while sending packets [rhel-8])
  - Resolves: bz#1855250
    (qemu-img convert uses possibly slow pre-zeroing on block storage)
  - Resolves: bz#1932823
    (after upgrade from 4.3 to 4.4 audio stops working in guests after couple of seconds)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-50.el8
changelog:
  - kvm-hw-intc-arm_gic-Fix-interrupt-ID-in-GICD_SGIR-regist.patch [bz#1925430]
  - kvm-libqos-usb-hcd-ehci-use-32-bit-write-for-config-regi.patch [bz#1842478]
  - kvm-libqos-pci-pc-use-32-bit-write-for-EJ-register.patch [bz#1842478]
  - kvm-memory-Revert-memory-accept-mismatching-sizes-in-mem.patch [bz#1842478]
  - kvm-acpi-accept-byte-and-word-access-to-core-ACPI-regist.patch [bz#1842478]
  - kvm-xhci-fix-valid.max_access_size-to-access-address-reg.patch [bz#1842478]
  - kvm-softmmu-memory-Log-invalid-memory-accesses.patch [bz#1842478]
  - Resolves: bz#1925430
    (CVE-2021-20221 virt:rhel/qemu-kvm: qemu: out-of-bound heap buffer access via an interrupt ID field [rhel-8.5.0])
  - Resolves: bz#1842478
    (CVE-2020-13754 virt:rhel/qemu-kvm: QEMU: msix: OOB access during mmio operations may lead to DoS [rhel-8.5.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-51.el8
changelog:
  - kvm-linux-headers-Add-VFIO_CCW_REQ_IRQ_INDEX.patch [bz#1940450]
  - kvm-vfio-ccw-Connect-the-device-request-notifier.patch [bz#1940450]
  - kvm-pc-bios-s390-ccw-fix-off-by-one-error.patch [bz#1942880]
  - kvm-pc-bios-s390-ccw-break-loop-if-a-null-block-number-i.patch [bz#1942880]
  - kvm-pc-bios-s390-ccw-don-t-try-to-read-the-next-block-if.patch [bz#1942880]
  - Resolves: bz#1940450
    (RHEL8.5 - Mediated Device already in use by same domain we are booting (vfio-ccw/Multipath Testing) (kvm) - qemu-kvm part (also has kernel and libvirt parts))
  - Resolves: bz#1942880
    (RHEL8.4 Nightly[0322] - KVM guest fails to find zipl boot menu index (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-52.el8
changelog:
  - kvm-file-posix-Mitigate-file-fragmentation-with-extent-s.patch [bz#1877163]
  - kvm-block-file-posix-Fix-problem-with-fallocate-PUNCH_HO.patch [bz#1944861]
  - kvm-spapr-Remove-stale-comment-about-power-saving-LPCR-b.patch [bz#1969768]
  - kvm-spapr-Set-LPCR-to-current-AIL-mode-when-starting-a-n.patch [bz#1969768]
  - Resolves: bz#1877163
    ([FJ 8.3 Bug] The progress bar of the "virt-clone --nonsparse" command shows the progress rate exceeding 100%.)
  - Resolves: bz#1944861
    (Qemu-img convert fails when source image is on gpfs)
  - Resolves: bz#1969768
    ([ppc64le] Hotplug vcpu device hit call trace:[qemu output] KVM: unknown exit, hardware reason 7fff9ce87ed8)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-23.el8
changelog:
  - kvm-Add-mtod_check.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-bootp-limit-vendor-specific-area-to-input-packet-mem.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-bootp-check-bootp_input-buffer-size.patch [bz#1970823]
  - kvm-upd6-check-udp6_input-buffer-size.patch [bz#1970842]
  - kvm-tftp-check-tftp_input-buffer-size.patch [bz#1970850]
  - kvm-tftp-introduce-a-header-structure.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-udp-check-upd_input-buffer-size.patch [bz#1970858]
  - kvm-Fix-DHCP-broken-in-libslirp-v4.6.0.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-redhat-use-the-standard-vhost-user-JSON-path.patch [bz#1804196]
  - Resolves: bz#1970823
    (CVE-2021-3592 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) [rhel-av-8])
  - Resolves: bz#1970842
    (CVE-2021-3593 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) [rhel-av-8])
  - Resolves: bz#1970850
    (CVE-2021-3595 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) [rhel-av-8])
  - Resolves: bz#1970858
    (CVE-2021-3594 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) [rhel-av-8])
  - Resolves: bz#1804196
    (inconsistent paths for interop json files)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-24.el8
changelog:
  - kvm-s390x-css-Introduce-an-ESW-struct.patch [bz#1968326]
  - kvm-s390x-css-Split-out-the-IRB-sense-data.patch [bz#1968326]
  - kvm-s390x-css-Refactor-IRB-construction.patch [bz#1968326]
  - kvm-s390x-css-Add-passthrough-IRB.patch [bz#1968326]
  - kvm-vhost-user-blk-Fail-gracefully-on-too-large-queue-si.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Make-sure-to-set-Error-on-realize-fai.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Don-t-reconnect-during-initialisation.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Improve-error-reporting-in-realize.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Get-more-feature-flags-from-vhost-dev.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-virtio-Fail-if-iommu_platform-is-requested-but-unsup.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Check-that-num-queues-is-supported-by.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-Fix-backends-without-multiqueue-support.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - Resolves: bz#1968326
    ([vfio_ccw] I/O error when checking format - dasdfmt requires --force in quick mode when passed through)
  - Resolves: bz#1935014
    (qemu crash when attach vhost-user-blk-pci with option queue-size=4096)
  - Resolves: bz#1935019
    (qemu guest failed boot when attach vhost-user-blk-pci with option iommu_platform=on)
  - Resolves: bz#1935020
    (qemu guest failed boot when attach vhost-user-blk-pci with option packed=on)
  - Resolves: bz#1935031
    (qemu guest failed boot when attach vhost-user-blk-pci with unmatched num-queues with qsd)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-25.el8
changelog:
  - kvm-s390x-cpumodel-add-3931-and-3932.patch [bz#1976171]
  - kvm-file-posix-fix-max_iov-for-dev-sg-devices.patch [bz#1943653]
  - kvm-scsi-generic-pass-max_segments-via-max_iov-field-in-.patch [bz#1943653]
  - kvm-osdep-provide-ROUND_DOWN-macro.patch [bz#1943653]
  - kvm-block-backend-align-max_transfer-to-request-alignmen.patch [bz#1943653]
  - kvm-block-add-max_hw_transfer-to-BlockLimits.patch [bz#1943653]
  - kvm-file-posix-try-BLKSECTGET-on-block-devices-too-do-no.patch [bz#1943653]
  - Resolves: bz#1976171
    ([IBM 8.5 FEAT] CPU Model for new IBM Z Hardware - qemu part)
  - Resolves: bz#1943653
    (RHV VM pauses due to 'qemu-kvm' getting EINVAL on i/o to a direct lun with scsi passthrough enabled)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-26
changelog:
  - kvm-acpi-pc-revert-back-to-v5.2-PCI-slot-enumeration.patch [bz#1977798]
  - kvm-migration-failover-reset-partially_hotplugged.patch [bz#1787194]
  - kvm-hmp-Fix-loadvm-to-resume-the-VM-on-success-instead-o.patch [bz#1959676]
  - kvm-migration-Move-bitmap_mutex-out-of-migration_bitmap_.patch [bz#1959729]
  - kvm-i386-cpu-Expose-AVX_VNNI-instruction-to-guest.patch [bz#1924822]
  - kvm-ratelimit-protect-with-a-mutex.patch [bz#1838221]
  - kvm-Update-Linux-headers-to-5.13-rc4.patch [bz#1838221]
  - kvm-i386-Add-ratelimit-for-bus-locks-acquired-in-guest.patch [bz#1838221]
  - kvm-iothread-generalize-iothread_set_param-iothread_get_.patch [bz#1930286]
  - kvm-iothread-add-aio-max-batch-parameter.patch [bz#1930286]
  - kvm-linux-aio-limit-the-batch-size-using-aio-max-batch-p.patch [bz#1930286]
  - kvm-block-nvme-Fix-VFIO_MAP_DMA-failed-No-space-left-on-.patch [bz#1848881]
  - Resolves: bz#1977798
    (RHEL8.5 guest network interface name changed after upgrade to qemu-6.0)
  - Resolves: bz#1787194
    (After canceling the migration of a vm with VF which enables failover, using "migrate -d tcp:invalid uri" to re-migrating the vm will cause the VF in vm to be hot-unplug.)
  - Resolves: bz#1959676
    (guest status is paused after loadvm on rhel8.5.0)
  - Resolves: bz#1959729
    (SAP/3TB VM migration slowness [idle db])
  - Resolves: bz#1924822
    ([Intel 8.5 FEAT] qemu-kvm AVX2 VNNI - Fast Train)
  - Resolves: bz#1838221
    ([Intel 8.5 FEAT]  qemu-kvm Bus Lock VM Exit - Fast Train)
  - Resolves: bz#1930286
    (randread and randrw regression with virtio-blk multi-queue)
  - Resolves: bz#1848881
    (nvme:// block driver can exhaust IOMMU DMAs, hanging the VM, possible data loss)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-27
changelog:
  - kvm-migration-move-wait-unplug-loop-to-its-own-function.patch [bz#1976852]
  - kvm-migration-failover-continue-to-wait-card-unplug-on-e.patch [bz#1976852]
  - kvm-aarch64-Add-USB-storage-devices.patch [bz#1974579]
  - Resolves: bz#1976852
    ([failover vf migration]  The failover vf will be unregistered  if canceling the migration whose status is "wait-unplug")
  - Resolves: bz#1974579
    (It's not possible to start installation from a virtual USB device on aarch64)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-28.el8
changelog:
  - kvm-iotests-Improve-and-rename-test-291-to-qemu-img-bitm.patch [bz#1946084]
  - kvm-qemu-img-Fail-fast-on-convert-bitmaps-with-inconsist.patch [bz#1946084]
  - kvm-qemu-img-Add-skip-broken-bitmaps-for-convert-bitmaps.patch [bz#1946084]
  - kvm-audio-Never-send-migration-section.patch [bz#1991671]
  - Resolves: bz#1946084
    (qemu-img convert --bitmaps fail if a bitmap is inconsistent)
  - Resolves: bz#1991671
    (vmstate differs between -audiodev and QEMU_AUDIO_DRV when no sound frontends devs present.)


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-2
changelog:
  - kvm-qxl-fix-pre-save-logic.patch [bz#2002907]
  - kvm-redhat-Define-hw_compat_rhel_8_5.patch [bz#1998949]
  - kvm-redhat-Update-pseries-rhel8.5.0.patch [bz#1998949]
  - kvm-redhat-Add-s390x-machine-type-compatibility-update-f.patch [bz#1998950]
  - Resolves: bz#2002907
    (Unexpectedly failed when managedsave the guest which has qxl video device)
  - Resolves: bz#1998949
    (Add machine type compatibility update for 6.1 rebase [ppc64le])
  - Resolves: bz#1998950
    (Add machine type compatibility update for 6.1 rebase [s390x])


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-3
changelog:
  - kvm-virtio-net-fix-use-after-unmap-free-for-sg.patch [bz#1999221]
  - Resolves: bz#1999221
    (CVE-2021-3748 virt:rhel/qemu-kvm: QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-4
changelog:
  - kvm-spec-Remove-qemu-kiwi-build.patch [bz#2002694]
  - kvm-hw-arm-virt-Add-hw_compat_rhel_8_5-to-8.5-machine-ty.patch [bz#1998947]
  - Resolves: bz#2002694
    (remove qemu-kiwi rpm from qemu-kvm sources in rhel-8.6)
  - Resolves: bz#1998947
    (Add machine type compatibility update for 6.1 rebase [aarch64])


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-5
changelog:
  - kvm-e1000-fix-tx-re-entrancy-problem.patch [bz#1930092]
  - kvm-hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-allowed-in-MODE.patch [bz#2020720]
  - Resolves: bz#1930092
    (CVE-2021-20257 virt:rhel/qemu-kvm: QEMU: net: e1000: infinite loop while processing transmit descriptors [rhel-8.5.0])
  - Resolves: bz#2020720
    (CVE-2021-3930 virt:rhel/qemu-kvm: QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-2
changelog:
  - kvm-redhat-Add-rhel8.6.0-machine-type-for-s390x.patch [bz#2005325]
  - kvm-redhat-Define-pseries-rhel8.6.0-machine-type.patch [bz#2031041]
  - Resolves: bz#2005325
    (Fix CPU Model for new IBM Z Hardware - qemu part)
  - Resolves: bz#2031041
    (Add rhel-8.6.0 machine types for RHEL 8.6 [ppc64le])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-4
changelog:
  - kvm-hw-arm-virt-Register-iommu-as-a-class-property.patch [bz#2031039]
  - kvm-hw-arm-virt-Register-its-as-a-class-property.patch [bz#2031039]
  - kvm-hw-arm-virt-Rename-default_bus_bypass_iommu.patch [bz#2031039]
  - kvm-hw-arm-virt-Add-8.6-machine-type.patch [bz#2031039]
  - kvm-hw-arm-virt-Check-no_tcg_its-and-minor-style-changes.patch [bz#2031039]
  - kvm-rhel-machine-types-x86-set-prefer_sockets.patch [bz#2029582]
  - Resolves: bz#2031039
    (Add rhel-8.6.0 machine types for RHEL 8.6 [aarch64])
  - Resolves: bz#2029582
    ([8.6] machine types: 6.2: Fix prefer_sockets)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-5
changelog:
  - kvm-acpi-validate-hotplug-selector-on-access.patch [bz#2036580]
  - kvm-x86-Add-q35-RHEL-8.6.0-machine-type.patch [bz#2031035]
  - Resolves: bz#2036580
    (CVE-2021-4158 virt:rhel/qemu-kvm: QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c [rhel-8])
  - Resolves: bz#2031035
    (Add rhel-8.6.0 machine types for RHEL 8.6 [x86])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-6
changelog:
  - kvm-virtiofsd-Drop-membership-of-all-supplementary-group.patch [bz#2046198]
  - kvm-softmmu-fix-device-deletion-events-with-device-JSON-.patch [bz#2033279]
  - kvm-block-backend-prevent-dangling-BDS-pointers-across-a.patch [bz#2021778 bz#2036178]
  - kvm-iotests-stream-error-on-reset-New-test.patch [bz#2021778 bz#2036178]
  - kvm-block-rbd-fix-handling-of-holes-in-.bdrv_co_block_st.patch [bz#2037135]
  - kvm-block-rbd-workaround-for-ceph-issue-53784.patch [bz#2037135]
  - Resolves: bz#2046198
    (CVE-2022-0358 virt:av/qemu-kvm: QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 [rhel-8.6])
  - Resolves: bz#2033279
    ([wrb][qemu-kvm 6.2] The hot-unplugged device can not be hot-plugged back)
  - Resolves: bz#2021778
    (Qemu core dump when do full backup during system reset)
  - Resolves: bz#2036178
    (Qemu core dumped when do block-stream to a snapshot node on non-enough space storage)
  - Resolves: bz#2037135
    (Booting from Local Snapshot Core Dumped Whose Backing File Is Based on RBD)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-7
changelog:
  - kvm-numa-Enable-numa-for-SGX-EPC-sections.patch [bz#1518984]
  - kvm-numa-Support-SGX-numa-in-the-monitor-and-Libvirt-int.patch [bz#1518984]
  - kvm-doc-Add-the-SGX-numa-description.patch [bz#1518984]
  - kvm-Enable-SGX-RH-Only.patch [bz#1518984]
  - kvm-qapi-Cleanup-SGX-related-comments-and-restore-sectio.patch [bz#1518984]
  - kvm-block-io-Update-BSC-only-if-want_zero-is-true.patch [bz#2041480]
  - kvm-iotests-block-status-cache-New-test.patch [bz#2041480]
  - Resolves: bz#1518984
    ([Intel 8.6 Feat] qemu-kvm: SGX 1.5 (SGX1 + Flexible Launch Control) support)
  - Resolves: bz#2041480
    ([incremental_backup] Inconsistent block status reply in qemu-nbd)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-8
changelog:
  - kvm-block-nbd-Delete-reconnect-delay-timer-when-done.patch [bz#2035185]
  - kvm-block-nbd-Assert-there-are-no-timers-when-closed.patch [bz#2035185]
  - kvm-iotests.py-Add-QemuStorageDaemon-class.patch [bz#2035185]
  - kvm-iotests-281-Test-lingering-timers.patch [bz#2035185]
  - kvm-block-nbd-Move-s-ioc-on-AioContext-change.patch [bz#2035185]
  - kvm-iotests-281-Let-NBD-connection-yield-in-iothread.patch [bz#2035185]
  - Resolves: bz#2035185
    (Qemu core dump when start guest with nbd node or do block jobs to nbd node)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-9
changelog:
  - kvm-Revert-redhat-Add-hw_compat_4_2_extra-and-apply-to-u.patch [bz#2062613]
  - kvm-Revert-redhat-Enable-FDC-device-for-upstream-machine.patch [bz#2062613]
  - kvm-Revert-redhat-Expose-upstream-machines-pc-4.2-and-pc.patch [bz#2062613]
  - kvm-hw-virtio-vdpa-Fix-leak-of-host-notifier-memory-regi.patch [bz#2060843]
  - kvm-pci-expose-TYPE_XIO3130_DOWNSTREAM-name.patch [bz#2062610]
  - kvm-acpi-pcihp-pcie-set-power-on-cap-on-parent-slot.patch [bz#2062610]
  - kvm-vmxcap-Add-5-level-EPT-bit.patch [bz#2065207]
  - kvm-i386-Add-Icelake-Server-v6-CPU-model-with-5-level-EP.patch [bz#2065207]
  - kvm-acpi-fix-QEMU-crash-when-started-with-SLIC-table.patch [bz#2062611]
  - kvm-tests-acpi-whitelist-expected-blobs-before-changing-.patch [bz#2062611]
  - kvm-tests-acpi-add-SLIC-table-test.patch [bz#2062611]
  - kvm-tests-acpi-SLIC-update-expected-blobs.patch [bz#2062611]
  - kvm-tests-acpi-manually-pad-OEM_ID-OEM_TABLE_ID-for-test.patch [bz#2062611]
  - kvm-tests-acpi-whitelist-nvdimm-s-SSDT-and-FACP.slic-exp.patch [bz#2062611]
  - kvm-acpi-fix-OEM-ID-OEM-Table-ID-padding.patch [bz#2062611]
  - kvm-tests-acpi-update-expected-blobs.patch [bz#2062611]
  - kvm-tests-acpi-test-short-OEM_ID-OEM_TABLE_ID-values-in-.patch [bz#2062611]
  - kvm-rhel-workaround-for-lack-of-binary-patches-in-SRPM.patch [bz#2062611]
  - Resolves: bz#2062613
    (Revert IBM-specific Ubuntu-compatibility machine type for 8.6-AV GA [rhel-8.7.0])
  - Resolves: bz#2060843
    ([virtual network][vDPA] qemu crash after hot unplug vdpa device [rhel-8.7.0])
  - Resolves: bz#2062610
    (Do operation to disk will hang in the guest of target host after hotplugging and migrating [rhel-8.7.0])
  - Resolves: bz#2065207
    (Win11 (q35+edk2) guest broke after install wsl2 through 'wsl --install -d Ubuntu-20.04' [rhel-8.7.0])
  - Resolves: bz#2062611
    (Guest can not start with SLIC acpi table [rhel-8.7.0])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-10
changelog:
  - kvm-RHEL-disable-seqpacket-for-vhost-vsock-device-in-rhe.patch [bz#2068202]
  - kvm-block-Lock-AioContext-for-drain_end-in-blockdev-reop.patch [bz#2067118]
  - kvm-iotests-Test-blockdev-reopen-with-iothreads-and-thro.patch [bz#2067118]
  - kvm-s390x-css-fix-PMCW-invalid-mask.patch [bz#2071070]
  - kvm-Set-permission-on-installing-files.patch [bz#2072377]
  - Resolves: bz#2068202
    (RHEL 9.0 guest with vsock device migration failed from RHEL 9.0 > RHEL 8.6 [rhel-8.7.0])
  - Resolves: bz#2067118
    (qemu crash after execute blockdev-reopen with  iothread)
  - Resolves: bz#2071070
    (s390x/css: fix PMCW invalid mask)
  - Resolves: bz#2072377
    (Fix build warnings that occur when installing the keymap files)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-11
changelog:
  - kvm-hw-intc-arm_gicv3-Check-for-MEMTX_OK-instead-of-MEMT.patch [bz#1999236]
  - kvm-softmmu-physmem-Simplify-flatview_write-and-address_.patch [bz#1999236]
  - kvm-softmmu-physmem-Introduce-MemTxAttrs-memory-field-an.patch [bz#1999236]
  - Resolves: bz#1999236
    (CVE-2021-3750 virt:rhel/qemu-kvm: QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-12
changelog:
  - kvm-display-qxl-render-fix-race-condition-in-qxl_cursor-.patch [bz#2040738]
  - kvm-vhost-vsock-detach-the-virqueue-element-in-case-of-e.patch [bz#2063262]
  - Resolves: bz#2040738
    (CVE-2021-4207 virt:rhel/qemu-kvm: QEMU: QXL: double fetch in qxl_cursor() can lead to heap buffer overflow [rhel-8])
  - Resolves: bz#2063262
    (CVE-2022-26354 virt:rhel/qemu-kvm: QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-29.el8
changelog:
  - kvm-file-posix-Cap-max_iov-at-IOV_MAX.patch [bz#1994494]
  - kvm-migration-Move-yank-outside-qemu_start_incoming_migr.patch [bz#1974366]
  - Resolves: bz#1994494
    (VM remains in paused state when trying to write on a resized disk resides on iscsi)
  - Resolves: bz#1974366
    (Fail to set migrate incoming for 2nd time after the first time failed)


author: Zdenek Dohnal <zdohnal@redhat.com> - 7.1.1-5
changelog:
  - CVE-2018-9918 qpdf: stack exhaustion in QPDFObjectHandle and QPDF_Dictionary classes in libqpdf.a [fedora-all]


author: Jan Grulich <jgrulich@redhat.com> - 5.11.1-7
changelog:
  - Move libQt5EglFSDeviceIntegration lib out of the -devel subpkg
    Resolves: bz#1692970

  - Fix QImage allocaion failure
    Resolve: bz#1667860

  - Fix double free in QXmlStreamReader
    Resolve: bz#1667858

  - Fix segmentation fault on malformed BMP file
    Resolve: bz#1667859


author: Jan Grulich <jgrulich@redhat.com> - 5.12.5-5
changelog:
  - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
    Resolves: bz#1814739
    Resolves: bz#1814683

  - Fix: XML entity expansion vulnerability
    Resolves: bz#1822193


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-3
changelog:
  - support %bootstrap, %check: add autotests
  - build with -O1 to workaround serious autotest/code failures (f28+, #1551246)


author: Petr Pisar <ppisar@redhat.com> - 1:4.04-3
changelog:
  - rpcgen tool split from glibc-common package
  - Pass TIRPC header files location to all RPC compilation units
  - Do not iterate over negative UIDs in repquota
  - Fix mistakes in warnquota reported by GCC 8


author: Petr Pisar <ppisar@redhat.com> - 1:4.04-4
changelog:
  - Avoid questions in quotacheck non-interactive mode
  - Report an error when quotacheck fails to cache quota files
  - Report an error if quota file magic is invalid


author: Aristeu Rozanski <aris@redhat.com> 0.6.1-9
changelog:
  - Prevent ras-mc-ctl trying to access extlog and mce tables if rasdaemon was built without support for them [2011404]


author: Sumit Bose <sbose@redhat.com> - 0.16.3-13
changelog:
  - Add latests patches from RHEL7
  - Add polkit runtime dependency
    Resolves: rhbz#1577179
  - Drop python2 build dependency
    Resolves: rhbz#1595813
  - Fix documentation reference in systemd unit file
    Resolves: rhbz#1596325


author: Sumit Bose <sbose@redhat.com> - 0.16.3-14
changelog:
  - Fix python BuildRequires
    Resolves: rhbz#1615564
  - Add RHEL specific patch for IPA
    Resolves: rhbz#1615320
  - Fix issues found by Coverity
    Resolves: rhbz#1602677


author: Sumit Bose <sbose@redhat.com> - 0.16.3-17
changelog:
  - rebuild fails if DISTRO variable is exported
    Resolves: rhbz#1747454
  - realmd.conf user-principal RFE and clarification
    Resolves: rhbz#1747452
  - realmd.conf documentation incorrect
    Resolves: rhbz#1747457
  - Document realmd.conf and how realmd reads the configuration
    Resolves: rhbz#1747456


author: Sumit Bose <sbose@redhat.com> - 0.16.3-19
changelog:
  - Realm join fails with error 'Failed to join domain: failed to lookup
    DC info ...'
    Resolves: rhbz#1859503
  - realm command to use option like dnshostname=fqdn
    Resolves: rhbz#1867912


author: Sumit Bose <sbose@redhat.com> - 0.16.3-20
changelog:
  - realmd should handle default_realm in krb5.conf
    Resolves: rhbz#1791016
  - [RFE] Enable LDAPS functionality in realmd join
    Resolves: rhbz#1826964


author: Sumit Bose <sbose@redhat.com> - 0.16.3-24
changelog:
  - Avoid duplicated log messages and use Samba's new CLI options
    Resolves: rhbz#2024248
    Resolves: rhbz#2028528


author: Remi Collet <rcollet@redhat.com> - 4.0.10-2
changelog:
  - drop build dependency on pandoc
  - drop dependency on jemalloc #1591762
  - fix License (BSD and MIT)
  - add bundled libraries licences
  - cleanup conditions from spec file


author: Remi Collet <rcollet@redhat.com> - 5.0.3-2
changelog:
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192
  - fix Stack buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10193


author: Remi Collet <rcollet@redhat.com> - 5.0.3-4
changelog:
  - fix lua scripts can overflow the heap-based Lua stack
    CVE-2021-32626
  - fix integer overflow issue with Streams
    CVE-2021-32627
  - fix integer overflow bug in the ziplist data structure
    CVE-2021-32628
  - fix integer overflow issue with intsets
    CVE-2021-32687
  - fix integer overflow issue with strings
    CVE-2021-41099


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-76
changelog:
  - podman: recover from killed conmon process
  - podman: recover from podman's storage being out of sync
  - crypt: make key_file and crypt_type parameters not unique

    Resolves: rhbz#1886262
    Resolves: rhbz#1900015
    Resolves: rhbz#1898690


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-79
changelog:
  - LVM-activate: add drop-in during start-action to avoid getting
    fenced during reboot

    Resolves: rhbz#1902208


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-87
changelog:
  - gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
    make vpc_network parameter optional

    Resolves: rhbz#1913932


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-91
changelog:
  - ethmonitor: fix vlan regex
  - iface-vlan: make vlan parameter not unique
  - nfsserver: error-check unmount
  - VirtualDomain: fix pid status regex
  - podman: return NOT_RUNNING when monitor cmd fails
  - awsvip: dont partially match similar IPs during
  - aws agents: dont spam log files
  - aws-vpc-move-ip: add ENI lookup

    Resolves: rhbz#1891883, rhbz#1902045, rhbz#1924363, rhbz#1932863
    Resolves: rhbz#1920698, rhbz#1939992, rhbz#1940094, rhbz#1939281


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-92
changelog:
  - db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check
  - pgsqlms: new resource agent
  - python-pygments: fix CVE-2021-27291 and CVE-2021-20270

    Resolves: rhbz#1872754, rhbz#1934651, rhbz#1935422, rhbz#1943464


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-95
changelog:
  - lvmlockd: remove cmirrord support, as cmirrord is incompatible w/lvmlockd

    Resolves: rhbz#1969968


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-3
changelog:
  - Rebase to resource-agents 4.9.0 upstream release.
  - gcp-pd-move/gcp-vpc-move-route: dont fail with configuration rc
    when it might be a network hickup

    Resolves: rhbz#1995178, rhbz#2008333


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-4
changelog:
  - gcp-vpc-move-route/gcp-vpc-move-vip: add serviceaccount JSON file
    support

    Resolves: rhbz#1704348


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-5
changelog:
  - All agents: set correct agent and OCF version in metadata
  - nfsserver: add nfs_server_scope parameter

    Resolves: rhbz#2003117
    Resolves: rhbz#2014415


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-12
changelog:
  - Route: return OCF_NOT_RUNNING for probe action when interface
    or route doesnt exist
  - db2: use -l forever to fix crm_attribute issue

    Resolves: rhbz#2012057
    Resolves: rhbz#2029706


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-12
changelog:
  - Route: return OCF_NOT_RUNNING for probe action when interface
    or route doesnt exist

    Resolves: rhbz#2012057


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-16
changelog:
  - IPsrcaddr: add warning about possible issues when used with DHCP,
    and add error message when matching route not found

    Resolves: rhbz#1654862


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-16
changelog:
  - IPsrcaddr: add warning about possible issues when used with DHCP,
    and add error message when matching route not found

    Resolves: rhbz#2064342


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-17
changelog:
  - openstack-cinder-volume/openstack-floating-ip/openstack-info/
    openstack-virtual-ip: new resource agents

    Resolves: rhbz#1908146, rhbz#1908147, rhbz#1908148, rhbz#1949114


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-19
changelog:
  - Filesystem: fix UUID/label device support when there's whitespace
    between parameter and UUID/label

    Resolves: rhbz#2049414


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-22
changelog:
  - gcp-vpc-move-route/gcp-vpc-move-vip: upgrade bundled
    python-httplib2 to fix SSL issue

    Resolves: rhbz#2097462


author: Kalev Lember <kalevlember@gmail.com> - 0.7.93-1
changelog:
  - Update to 0.7.93
  - Tighten deps with the _isa macro
  - Don't manually require pkgconfig; rpmbuild generates this automatically
  - Use license macro for the COPYING file


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.33-1
changelog:
  - fix rhnsd triggered upgrade of rhnsd on systemd systems
  - 1494389 - Revert "[1260527] RHEL7 reboot loop"
  - 1494389 - Revert "1260527 RHEL7 rhnsd reload doesn't work"


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-5
changelog:
  + rhythmbox-3.4.2-5
  - Remove LIRC plugin
  - Fix 2 build warnings
  - Remove BRs for removed visualiser plugin


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-7
changelog:
  + rhythmbox-3.4.2-7
  - Fix warnings in art search when playing a radio
  - Fix initial import never finishing
  - Fix multimedia keys integration in GNOME


author: Neil Horman <nhorman@redhat.com> - 6.8-2
changelog:
  - Fix erroneous message due to bad errno check (bz 1776710)
  - Enable addition of 0 value for fill-watermark (bz 1776710)


author: Vladis Dronov <vdronov@redhat.com> - 6.8-4
changelog:
  - There is no need to hardcode _sbindir anymore, also the old value is
    incorrect
  - Update the rngd.service file
  - Fix a busyloop bug (bz 1956248)
  - Fix /dev/hwrng permission issue (bz 1955522)


author: Vladis Dronov <vdronov@redhat.com> - 6.8-6
changelog:
  - Adjust rngd-wake-threshold.service and post section so udevadm is not
    run in a container (bz 1975554)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-1.git.d207e0b6
changelog:
  - Update to the upstream v6.13 + tip of origin/master + onecpu
    branch + revert of 2ce93190
  - Rebuild rng-tools against the latest jitterentropy library
    3.0.2-2.git.409828cf with fixes for an important issue
  - Fix a number of issues (bz 1974103, bz 1980421, bz 1859154)


author: Vladis Dronov <vdronov@redhat.com> - 6.14-4.git.b2b7934e
changelog:
  - Update rng-tools to v6.14 @ b2b7934e (bz 2015570)
  - Update jitterentropy library to v3.3.1 @ 887c9871
  - Add a config file for storing rngd options
  - Fix a security issue found by a covscan in jitterentropy library


author: Vladis Dronov <vdronov@redhat.com> - 6.15-1
changelog:
  - Update rng-tools to v6.15 @ 172bf0e3 (bz 2075974)
  - Update jitterentropy library to v3.4.0 @ 887c9871
  - Allow rngd process to drop privileges with "-D user:group"
  - Fix an error building with jitterentropy-3.4.0
  - Add a requirement for selinux-policy of a certain version
  - Fix a build failure on ppc64
  - Small edits in test scripts


author: Vladis Dronov <vdronov@redhat.com> - 6.8-4
changelog:
  - There is no need to hardcode _sbindir anymore, also the old value is incorrect
  - Update the rngd.service file
  - Fix a busyloop bug (bz 1956248)
  - Fix /dev/hwrng permission issue (bz 1955522)


author: Steve Dickson <steved@redhat.com> - 1.2.5-1
changelog:
  - Fixed stack buffer overflow in rpcinfo (bz 1637565)
  - Make sure /var/lib/rpcbind exists (bz 1628901)


author: Jonathan Lebon <jonathan@jlebon.com> - 2020.4-1
changelog:
  - New upstream version
    https://github.com/coreos/rpm-ostree/releases/tag/v2020.4
    Resolves: #1861786


author: Colin Walters <walters@verbum.org> - 2020.7-4
changelog:
  - Backport https://github.com/coreos/rpm-ostree/pull/2386/commits/aa8e49aaeddfc5d38651fa08f46e059655818fd1
    Resolves: #1944760


author: Luca BRUNO <lucab@lucabruno.net> - 2021.5-1
changelog:
  - New upstream version
    https://github.com/coreos/rpm-ostree/releases/tag/v2021.5
    Resolves: rhbz#1959874


author: Luca BRUNO <lucab@redhat.com> - 2021.5-2
changelog:
  - Backport _dbpath fixes, see
    https://github.com/coreos/rpm-ostree/issues/2904
    Resolves: rhbz#1973579


author: Liming Sun <lsun@mellanox.com> - 2.0.1-1
changelog:
  - Rename bfrshim to rshim
  - Remove rshim.spec since it's auto-generated from rshim.spec.in
  - Fix warnings reported by coverity
  - Add rhel/rshim.spec.in for fedora
  - Move rshim to sbin and move man page to man8


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.4-4
changelog:
  - Expose gating.yaml file in order to enable manual CI gating for rshim
    in RHEL-8.4, by bumping release and doing a Brew build.
  - Partially resolves: rhbz#1912248


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5.
  - Modify rshim.spec accordingly.
  - Resolves: rhbz#1950425


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-2
changelog:
  - Add sysconfig/rshim file and update rshim.service to source it.
  - jbastian made the first cut of this patch, which needed to be
    modified due to the update to 2.0.5. And I chose to go with
    %autosetup to handle Patch0, instead of sticking with %setup.
  - Resolves: rhbz#1946349


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-10
changelog:
  RHEL 8.1.0 ERRATUM
  - added option for imfile endmsg.regex
    resolves: rhbz#1627941
  - added patch enhancing imfile rotation detection
    resolves: rhbz#1674471
  - added patch fixing msgOffset datatype preventing crash on
    message with too long other fields
    resolves: rhbz#1677037
  - added patch introducing "preservecase" option for imudp/imtcp
    resolves: rhbz#1614181


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-11
changelog:
  RHEL 8.1.0 ERRATUM
  - fixed memory leak in imjournal by proper cursor releasing
    resolves: rhbz#1716867


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-12
changelog:
  RHEL 8.1.0 ERRATUM
  - edited imjournal memleak patch to not cause double-free crash
    resolves: rhbz#1729995
  - added patch calling journald API only when there are no
    preceeding errors
    resolves: rhbz#1722165
  - added patch fixing imrelp module when invoked with old syntax
    resolves: rhbz#1724218


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-13
changelog:
  RHEL 8.1.0 ERRATUM
  - added patch enabling stricter TLS certs checking conforming to
    common criteria requirements
    resolves: rhbz#1733244


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-1
changelog:
  RHEL 8.2.0 ERRATUM
  - rebased to 8.1911.0 upstream version, removed, previously
    upstreamed patches
    resolves: rhbz#1740683
    resolves: rhbz#1659383
    resolves: rhbz#1746876
    resolves: rhbz#1676559
    resolves: rhbz#1692072
    resolves: rhbz#1692073
    resolves: rhbz#1692074
    resolves: rhbz#1699242
    resolves: rhbz#1738213
    resolves: rhbz#1744691
    resolves: rhbz#1755218
    resolves: rhbz#1768321
    resolves: rhbz#1768324
  - added patch fixing imfile stefiles naming
    resolves: rhbz#1763757


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-3
changelog:
  RHEL 8.2.0 ERRATUM
  - added patch reverting rejecting expired certs by default
    resolves: rhbz#1782353
  - added patch silencing false errors on config.enabled statement
    resolves: rhbz#1659383


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-5
changelog:
  RHEL 8.3.0 ERRATUM
  - added qpid-proton as another source and enabled omamqp1 module
    in a separate sub-package with it statically linked
    resolves: rhbz#1713427
  - extended config.enabled patch to cover rest of the cases
    resolves: rhbz#1659383
  - added patch making json serialization thread-safe
    resolves: rhbz#1789675
  - added another patch for imfile state-files id
    resolves: rhbz#1793569
  - fixed typo in commend-out part of default rsyslog.conf


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-6
changelog:
  RHEL 8.3.0 ERRATUM
  - added patch preventing imfile crash when selinux blocks symlink
    access
    resolves: rhbz#1843994
  - fixed config-enabled patch
    resolves: rhbz#1659383


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-2
changelog:
  RHEL 8.5.0 ERRATUM
  - rebase to 8.2102.0
    resolves: rhbz#1932795
  - Enable openssl
    resolves: rhbz#1891458
  - EKU check for client cert on server side
    resolves: rhbz#1783348
  - Use GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1880434
  - Use librelp with openssl enabled
    resolves: rhbz#1795607
  - Close dir when fsync=on
    resolves: rhbz#1960536


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-3
changelog:
  - Priority field must have valid length
    resolves: rhbz#1866877
  - Allocate more memory on too large groups
    resolves: rhbz#1944718


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-5
changelog:
  - Do not exit when user/group can not be found
    resolves: rhbz#1984489
  - Remove abortOnIDResolution fail


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-9
changelog:
  - Add deleteStateOnFileMove imfile module option
    resolves: rhbz#1909639
  - Add inotify_rm_watch() inotify API call when object needs to be destroyed
    resolves: rhbz#2052403


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-10
changelog:
  - openssl: Correct gnutlsPriorityString (custom ciphers) behaviour
  - Fix error handling in gtlsRecordRecv that can cause 100 percent CPU usage
    resolves: rhbz#2046158
  - Address CVE-2022-24903, Heap-based overflow in TCP syslog server
    resolves: rhbz#2081401


author: John Kacur <jkacur@redhat.com> - 1.9-1
changelog:
  - Update to upstream rt-tests-1.9
  - Add BuildRequires for gcc
  - use set_build_flags
  - use macros _bindir, _mandir and _prefix where possible
  - remove unnecessary clean section, simply build and install sections
  Resolves: rhbz#1894615


author: John Kacur <jkacur@redhat.com> - 1.9-2
changelog:
  - Don't compress manpages by default in the makefile
  - Add a menu to determine_maximum_mpps.sh
  - Add determine_maximum_mmps.8 manpage
  - Remove get_cpuinfo_mhz.sh and old Makefile in queuelat dir
  Resolves: rhbz#1906104


author: John Kacur <jkacur@redhat.com> - 1.10-2
changelog:
  - print the version number in oslat everytime.
  - use cpuset size as upper bound in loop in oslat
  - allocate memory for cpu_set in oslat
  Resolves: rhbz#1926578


author: John Kacur <jkacur@redhat.com> - 2.1-4
changelog:
  - Fix potential double mount of cgroups for deadline_test
  - Fix potential double mount of cgroups for cyclicdeadline
  Resolves: rhbz#2024957


author: Leah Leshchinsky <lleshchi@redhat.com> - 2.3-1
changelog:
  - Update to latest upstream 2.3
  - Correct the comment of numa_initialize()
  - oslat.8: Remove the argument of --bias
  Resolves: rhbz#2012292


author: John Kacur <jkacur@redhat.com> - 2.3-2
changelog:
  - Fix parsing of affinity
  - Ignore the runtime cpumask if a new cpumask is requested
  Resolves: rhbz#2050242


author: John Kacur <jkacur@redhat.com> - 1.14-13
changelog:
  - Rebuild rteval-build with a fixed binutils in brew
  - Bump the release number of stress-ng as well
  Resolves: rhbz#1954451


author: Stephen Gallagher <sgallagh@redhat.com> - 0.11-15
changelog:
  - Temporarily disable -Werror=format-security to unbreak the build
  - Build with verbose command-line visible in the logs
  - Resolves: rhbz#1424270


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-97
changelog:
  - Fix TLS 1.3 issues.
    * ruby-2.6.0-fix-test-failure-with-TLS-1.3.patch
    * ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with-TLS-1.3.patch
    Related: rhbz#1616213


author: Jun Aruga <jaruga@redhat.com> - 2.5.1-99
changelog:
  - Fix generated rdoc template issues.
    * ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch
    Resolves: rhbz#1612026


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-99
changelog:
  - Additional OpenSSL 1.1.1 fixes.
    * ruby-2.6.0-fix-test-failure-with-TLS-1.3-maint.patch
    * ruby-2.6.0-config-support-include-directive.patch
    * ruby-2.6.0-use-larger-keys-for-SSL-tests.patch
    Related: rhbz#1616213


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-100
changelog:
  - Properly harden package using -fstack-protector-strong.
    * ruby-2.6.0-configure-fstack-protector-strong.patch
    Resolves: rhbz#1624168


author: Vít Ondruch <vondruch@redhat.com> - 2.5.5-104
changelog:
  - Update to Ruby 2.5.5.
    * Remove Patch25: ruby-2.6.0-Update-for-tzdata-2018f.patch; subsumed
    * Remove Patch11: ruby-2.6.0-Try-to-update-cert.patch; subsumed
    * Remove Patch19: ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with
        -TLS-1.3.patch; subsumed
    Resolves: rhbz#1688758
  - Don't ship .stp files when SystemTap support is disabled.
    Related: rhbz#1657915
  - Fix CovScan issues.
    Resolves: rhbz#1628592


author: Jun Aruga <jaruga@redhat.com> - 2.5.5-105
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1688758
  - Fix rdoc gzipped javascript pages are not the same across multilib.
    Resolves: rhbz#1719647


author: Pavel Valena <pvalena@redhat.com> - 2.5.9-107
changelog:
  - Update to Ruby 2.5.9.
    * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
    Resolves: rhbz#1952626
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1955010


author: Pavel Valena <pvalena@redhat.com> - 2.5.9-107
changelog:
  - Update to Ruby 2.5.9.
    * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
    Resolves: rhbz#1757844
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1950308


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-108
changelog:
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-105
changelog:
  - Update to Ruby 2.6.3 by merging Fedora master branch (commit: 1cc2a49)
    * Properly generate "ruby(rubygems)" versioned dependencies.
    * Extract composition of dependecy strings into helper.
    * Loosen RDoc dependency.
    * Upstream fix adding -C flag instead of changing directory for gem build.
    * Remove obsolete Group tag
    * Fix ".include =" support in openssl.cnf.
    * Link IRB back to StdLib.
    * Link IRB files instead of directories.
    * Exclude irb.rb from ruby-libs.
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-106
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1672575


author: Jarek Prokop <jprokop@redhat.com> - 2.6.7-107
changelog:
  - Upgrade to Ruby 2.6.7.
    Resolves: rhbz#1757846
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address
    containing leading zero
    Resolves: rhbz#1950307
  - Fix: Rubygem-bundler: Don't use insecure tmp directory as home
    allows for execution of malicious code.
    Resolves: CVE-2019-3881


author: Jun Aruga <jaruga@redhat.com> - 2.6.9-108
changelog:
  - Upgrade to Ruby 2.6.9.
  - Skip JIT tests in RHEL 8.
  - Fix the issues required to start the "make test-bundler" itself.
  - Fix Bundler dependency confusion.
    Resolves: CVE-2020-36327


author: Vít Ondruch <vondruch@redhat.com> - 2.6.10-109
changelog:
  - Upgrade to Ruby 2.6.10.
    Resolves: rhbz#2088415
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739
  - Fix FTBFS due to an incompatible load directive.
  - Fix a fiddle import test on an optimized glibc on Power 9.


author: Jarek Prokop <jprokop@redhat.com> - 2.6.7-107
changelog:
  - Upgrade to Ruby 2.6.7.
    Resolves: rhbz#1952627
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address
    containing leading zero
    Resolves: rhbz#1954968
  - Fix: Rubygem-bundler: Don't use insecure tmp directory as home
    allows for execution of malicious code.
    Resolves: rhbz#1954969


author: Jun Aruga <jaruga@redhat.com> - 2.7.1-132
changelog:
  - Update to Ruby 2.7.1 by merging Fedora master branch (commit: 2981648)
    * Skip unstable tests on s390x.
    * Skip JIT tests in RHEL 8.
    Resolves: rhbz#1817135


author: Vít Ondruch <vondruch@redhat.com> - 2.7.1-133
changelog:
  - Fix `require` behavior allowing to load libraries multiple times.
    Resolves: rhbz#1842989
  - Add ruby-default-gems dependency on irb.


author: Pavel Valena <pvalena@redhat.com> - 2.7.3-136
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1951999
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1952000


author: Pavel Valena <pvalena@redhat.com> - 2.7.3-136
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1947938
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1944227


author: Jarek Prokop <jprokop@redhat.com> - 3.0.1-138
changelog:
  - Upgrade to Ruby 3.0.1 by merging Fedora rawhide branch (commit: 6b2ff68).
    * Add missing `rubygem-` prefix for bundled provide of 'connection_pool'.
    * Pass ldflags to gem install via CONFIGURE_ARGS
    * Remove IRB dependency from rubygem-rdoc.
    * Fix flaky excon test suite.
    * Properly support DWARF5 debug information.
        Related: rhbz#1920533
    * Bundle OpenSSL into StdLib.
    * Fix SEGFAULT in rubygem-shoulda-matchers test suite.
    * Provide `gem.build_complete` file for binary gems.
    * Re-enable test suite.
    * ruby-default-gems have to depend on rubygem(io-console) due to reline.
    * Fix SEGFAULT preventing rubygem-unicode to build on armv7hl.
    * Add support for reworked RubyGems plugins.
    * Use proper path for plugin wrappers.
    * Extract RSS and REXML into separate subpackages, because they were moved from
       default gems to bundled gems.
    * Drop Net::Telnet and XMLRPC packages, because they were dropped from Ruby.
    Resolves: rhbz#1938942
  - Fix FTBFS due to an incompatible load directive.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-139
changelog:
  - Upgrade to Ruby 3.0.2.
    Related: rhbz#1938942
  - Fix command injection vulnerability in RDoc. (CVE-2021-31799)
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    (CVE-2021-31810)
  - Fix StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)
  - Fix dependencies of gems with explicit source installed from a
    different source. (CVE-2020-36327)
  - Pass ldflags to gem install via CONFIGURE_ARGS.
    The same comment on the changelog 3.0.1-138 was wrong.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-140
changelog:
  - Fix rubygem-irb upgrade not working due to directory -> symlink conversion.
    Resolves: rhbz#2010403


author: Jun Aruga <jaruga@redhat.com> - 0.5.2-1
changelog:
  - New upstream release 0.5.2 by merging Fedora master branch (commit: cc15309)
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-1
changelog:
  - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
    Resolves: rhbz#1817135


author: Jun Aruga <jaruga@redhat.com> - 1.1.4-1
changelog:
  - Update to pg 1.1.4 by merging Fedora master branch (commit: 397796e)
    * BuildRequires: s/postgresql-devel/libpq-devel/
    * Add marking lines at the start and end of the setup.log
    Resolves: rhbz#1672575


author: Dan Walsh <dwalsh@redhat.name> - 2:1.0.0-46.dev.gitb4e2ecb
changelog:
  - Add patch https://github.com/opencontainers/runc/pull/1807 to allow
  - runc and podman to work with sd_notify


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-55.rc5.dev.git2abd837
changelog:
  - Resolves: #1665770 - rootfs: umount all procfs and sysfs with --no-pivot
  - Resolves: CVE-2019-5736


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-68.rc92
changelog:
  - update to https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-73.rc95
changelog:
  - fix podman run --pid=host command causes OCI permission error
  - rc95 fixes CVE-2021-30465
  - Related: #2001445


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.27-15
changelog:
  - 1554032 - saned doesn't have permissions to write on usb port
  - updated README.Fedora - mention epson official drivers


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.27-20
changelog:
  - 1852468, 1852467, 1852466, 1852465 - prevent buffer overflow in esci2_img
  - 1852668, 1852667, 1852666, 1852665 - disable autodiscovery for epsonds backend


author: Matej Habrnal <mhabrnal@redhat.com> 0.21-1
changelog:
  - New upstream version
    - Introduce 'serial' field in uReport
    - normalization: actualize list of functions


author: Jakub Filak <jakub@thefilaks.net> 0.22-1
changelog:
  - New upstream version
    - Added support fof JavaScript (V8) stack traces
    - Most parts of the in-hook core unwinder callable under unprivileged user
    - GDB core unwinder limits number of unwound frames
    - Fixed a pair of compile warnings - Chris Redmon <credmonster@gmail.com>


author: Matej Habrnal <mhabrnal@redhat.com> 0.23-1
changelog:
  - New upstream version
    - Allow rpm to be optional at build time
    - Do not use deprecated fedorahosted.org


author: Julius Milan <jmilan@redhat.com> 0.24-1
changelog:
  - New upstream version
    - Allow to report unpackaged problems
    - apidoc: generate html docs using doxygen
    - Fix parsing of subset of arm kernel oopses


author: Martin Kutlak <mkutlak@redhat.com> 0.25-1
changelog:
  - New upstream version
   - Normalization: actualize list of functions
   - Fix some compilation warnings
   - Allow to build python3 for rhel8
   - Makefile: add make release-* subcommands
   - Elfutils: Add missing stubs from earlier commit


author: Matej Habrnal <mhabrnal@redhat.com> 0.26-1
changelog:
  - spec: fix Allow python2 to be optional at build time
  - Allow python2 to be optional at build time
  - normalization: actualize list of functions
  - Append Python interpreter as related package
  - makefile: create .tar.xz with make release


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.1-2
changelog:
  - silence coverity regarding inconsistent parameter passing
  - adapt fence-agents-dependency from upstream to distribution

    Resolves: rhbz#1769305


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.1-6
changelog:
  - match qdevice-sync_timeout against wd-timeout
  - sync startup/shutdown via pacemakerd-api

    Resolves: rhbz#1703128
    Resolves: rhbz#1743726


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.1-7
changelog:
  - conflict with pacemaker-libs < 2.0.4-5 instead of requiring
    a minimum pacemaker version

    Resolves: rhbz#1861713


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-1
changelog:
  - rebase to upstream v1.4.2
  - make sbd default to do pacemakerd-api handshake
  - conflict with pacemaker-libs < 2.0.5-4 to assure pacemaker
    is defaulting to pacemakerd-api handshake

    Resolves: rhbz#1903730
    Resolves: rhbz#1873135


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-3
changelog:
  - change the default for SBD_WATCHDOG_TIMEOUT to 10s
    s390(x) stays at 15s as before

    Resolves: rhbz#1922143


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - reverted watchdog_timeout_default to 5s
    (slipped in via an unreleased change on 8.4.0 branch)

    Resolves: rhbz#1980797


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-10
changelog:
  - Fix docdir patch (patch Makefile.am, not Makefile.in)
  - Use correct short name for Eclipse Public License 1.0
  - Use %license
  - Add explicit dependencies for libraries in Makefile.am (fixes FTBFS)
    Resolves: #1606302


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions
    Resolves: #1776670


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.9-24
changelog:
  - Fix important coverity issues
    Resolves: #1989603
  - Fix incorrect use of temporary paths
    Resolves: #1989605


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.5.0-1
changelog:
  - Update to latest upstream version
  - Change license to Eclipse Public License 1.0
  - Use %license
  - Fix URL


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-10
changelog:
  - Fix null pointer (DoS) vulnerability via POST request to /cimom (CVE-2018-6644)
    (patch by Adam Majer)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-16
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Remove %defattr
    Resolves: #1638007


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-9
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Fix license tag
    Resolves: #1638015


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 1:2.0.2-9
changelog:
  - use %{?dist} instead of %{dist} (#1725774)
  - scl-utils-build own the pkgconfig directory by %scl_files (#1431962)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 1:2.0.2-10
changelog:
  - use %__python3 instead of macro %__python (#1733526)
  - corrected unescaped per-cent character in the changelog (#1734103)


author: Daniel Kopecek <dkopecek@redhat.com> - 2.5.2-14
changelog:
  Resolves: rhbz#1689897 - Missing '--extent-only' patch
  Resolves: rhbz#1630298 - Removal of component scrub or its crypto from RHEL


author: Petr Stodulka <pstodulk@redhat.com> - 4.2.2-14
changelog:
  - remove meaningless redefinition of _bindir - it's standard macro now;
    sed will be store in /usr/bin/sed
    Resovles: #1305835


author: Jakub Martisko <jamartis@redhat.com> - 4.4-4
changelog:
  - When editing file inplace, the SELinux context should
    be based on the link instead of the target file itself.
    --follow-symlinks option remains unchanged
  - Resolves: #1401442


author: Jakub Martisko <jamartis@redhat.com> - 4.5-2
changelog:
  - fix "in-place edits on FUSE filesystems create files with all-zero mode bits"
  - Resolves: #1835761


author: Jakub Martisko <jamartis@redhat.com> - 4.5-5
changelog:
  - Minor cleanup - remove unused patch from the spec file too (related to 4.5-3)
  - Resolves: rhbz#1869253


author: Robert Scheck <robert@fedoraproject.org> - 8.15.2-27
changelog:
  - Use SSL_CTX_use_certificate_chain_file() to handle intermediate
    certificates passed additionally in confSERVER_CERT (#1565341)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-30
changelog:
  - Dropped sysvinit support
    Resolves: rhbz#1610287
  - Dropped hesiod support
    Resolves: rhbz#1638491


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.19-2
changelog:
  - Update "missing" scripts to automake-1.15
  - Add active polling for acquiring policy file
  - Fix translation of hex values in AVCs (#1477236, #1709742)
  - require initscripts to ensure that "service" call works properly


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.21-1
changelog:
  - Use dbus.mainloop.glib.DBusGMainLoop() instead of dbus.glib
  - Fix AVC.__typeMatch to handle aliases properly
  - Handle sockets with abstract path properly (#1775135)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.22-2
changelog:
  - Log plugin exception traceback when log level is DEBUG
  - sepolicy.info() returns a generator, not a list (#1784564)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.23-1
changelog:
  - browser: Check return value of Gdk.Screen().get_default() (#1574434)
  - Improve and unify error messages (#1763982)
  - setroubleshoot.util: Catch exceptions from sepolicy import
  - Add dpkg support
  - Do not refer to hardcoded selinux-policy rpm in signature
  - Make date/time format locale specific (#1812674)
  - Improve speed of plugin evaluation (#1794807)
  - Do not try to report a bug on None package
  - sealert: Drop unused import slib.dbus.service
  - Drop updater.py - it's not used and doesn't work
  - root user doesn't need to use SetroubleshootPrivileged API
  - Use pydbus, a modern Python dbus API, for SetroubleshootPrivileged
  - Report bug on a package which owns the related SELinux domain (#1811644)
    https://pagure.io/setroubleshoot/issue/18
  - Add Local SELinux policy package version to analyses reports
  - setroubleshoot.utils.get_rpm_nvr_by_scontext add option to use DBUS method
  - Export setroubleshoot.utils.get_rpm_nvr_by_scontext via DBUS
  - setroubleshoot.util: get_rpm_nvr_by_type() and get_rpm_nvr_by_scontext()


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-1
changelog:
  - Add 'fur' into shipped locales
  - Update translations (#1820570)
  - Log full reports with correct syslog identifier
  - Cancel pending alarm during AVC analyses


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-2
changelog:
  - Optimize get_rpm_nvr_by_type by adding a cache (#1794807)
  - Stop building seappletlegacy (#1878792)
  - Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-1
changelog:
  - Revert "Replace pydbus with dasbus"
  - Fix typos in --help, man pages and developer's guide (#2028226)
  - Do not use Python slip package
  - Stop SetroubleshootFixit after 10 seconds of inactivity
  - Fix plugin exception reporting
  - export alert dbus signal
  - Make sure local_policy_package is not None
  - sealert: add "Last Seen" column to alert list


author: Tomas Bzatek <tbzatek@redhat.com> - 1.44-3
changelog:
  - Fix sg_turs help invocation in an old mode (#1683343)
  - Fix sg_raw printing error about device not specified on version request (#1627657)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-5
changelog:
  - use cap_setxid file capabilities for newxidmap instead of making them setuid
  - limit the SYS_U/GID_MIN value to 1 as the algorithm does not work with 0
    and the 0 is always used by root anyway
  - manual page improvements
  - flush sssd caches - patch by Jakub Hrozek


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-8
changelog:
  - properly audit group password change
  - do not add uid of a new (not yet added) user to the audit message
  - use lckpwdf() again to disable concurrent edits of databases by
    other applications
  - clarify chage manual page in regards to shadow and passwd
    inconsistency
  - fix minor issues in groupadd and login.defs manual pages
  - Ignore LOGIN_PLAIN_PROMPT variable in login.defs
  - force regeneration of getdate.c otherwise the date parsing fix
    is not applied


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-9
changelog:
  - do not mistake a regular user process for a namespaced one (#1788696)
  - add HOME_MODE support in login.defs (#1777718)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-12
changelog:
  - lib/sssd: redirect warning message to file (#1749001)
  - useradd: clarify valid usernames/groupnames (#1869432)
  - login.defs: link login specific information to its own package (#1804766)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-15
changelog:
  - Creation of subid and subid-devel subpackages (#2013009)
  - libsubid: creation and nsswitch support
  - libsubid: don't print error messages on stderr by default
  - libsubid: libsubid_init return false if out of memory
  - libsubid: don't return owner in list_owner_ranges API call
  - libsubid: libsubid_init don't print messages on error
  - libsubid: fix newusers when nss provides subids
  - libsubid: make shadow_logfd not extern
  - useradd: fix SUB_UID_COUNT=0
  - man: mention NSS in new[ug]idmap manpages
  - man: clarify subid delegation


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-16
changelog:
  - getsubids: provide system binary and man page. Resolves: #2013016
  - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #1986782


author: Petr Pisar <ppisar@redhat.com> - 4.15.2-10
changelog:
  - License corrected to "GPLv3+ and (GPLv3+ and BSD) and (LGPLv3+ or BSD) and
    LGPLv2+ and Public Domain and GFDL"


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.31-7.git0144aa8
changelog:
  - build with %gobuild
  - use scl-ized go-toolset as dep
  - disable i686 builds temporarily because of go-toolset issues


author: Eduardo Santiago <santiago@redhat.com> - 1:0.1.41-3
changelog:
  - patch broken gating tests: improper 'jq' usage, and use 'registry:2.6'
    (instead of :2) to work around broken image pushed by docker


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-10
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/a05ddb8)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-11
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/6c0e35a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-12
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/b4210c0)
  - Resolves: #1914884


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-13
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/3abb778)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/e72dd9c)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-2
changelog:
  - use rhel-shortnames only from trusted registries
  - sync with config files from current versions of vendored projects
  - Resolves: #1933775
  - Resolves: #1933776


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-3
changelog:
  - use infra_image = "registry.redhat.io/rhel8/pause" in contiainers.conf
  - add update-vendored.sh script which will always assure we ship
    documentation/configs for versions vendored in podman, buildah and
    skopeo
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-4
changelog:
  - use infra_image = "registry.redhat.io/ubi8/pause" in contiainers.conf
    (unlike previous one ubi8/pause doesn't require authentication)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-5
changelog:
  - use infra_image = registry.redhat.io/ubi8/pause in contiainers.conf
    (unlike previous one ubi8/pause doesn't require authentication)
  - Related: #1934947


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-6
changelog:
  - update documentation and configs according to the current
    versions of vendored projects
  - Related: #1938234


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/2e90a8a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-10
changelog:
  - update shortnames from Pyxis
  - sync with the vendored versions in 3.0-8.5.0
  - bump release to assure upgrade path from 3.0-8.4.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/9921983)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.0-3
changelog:
  - update to new versions of vendored components
  - fail is there is an issue in communication with Pyxis API
  - understand devel branch in update.sh script
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.1-3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.3
    (https://github.com/containers/skopeo/commit/038f70e)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.1-4
changelog:
  - add direct runc dependency to avoid situation when runc is listed
    as default runtime but only crun is present in RHEL8
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-1
changelog:
  - update vendored components
  - ship /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release only on non-RHEL and
    CentOS distros
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/ea32394)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/130f32f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.2-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/01e51ce)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/47b8082)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/177443f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.4
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/31b8981)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.5
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/db1e814)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.6
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/c5a5199)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/25d3e7b)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.8
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/4d3588e)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.9
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/86fa758)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.10
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/53cf287)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.11
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/a95b0cc)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.12
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/ff88d3f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/fc81803)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-0.2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/116e75f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-0.3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/9c9a9f3)
  - Related: #2001445


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-5
changelog:
  - Link with libnsl explicitly in Fedora 28 or later
  - Require libnsl2-devel for build
  - Resolves rhbz#1573636


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
  - Upstream release 0.56.5
  - Resolves: rhbz#1751295: (2) When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
  - Resolves: rhbz#1768156: ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-2
changelog:
  - CVE 2021-3480:  idm:DL1/slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
  - Resolves: rhbz#1944713


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-3
changelog:
  - Resolves: rhbz#1958909 - fix regression for scoped searches in compat tree
  - Resolves: rhbz#1978189 - better handle error response from libsss_nss_idmap


author: Jindrich Novy <jnovy@redhat.com> - 0.4.0-1
changelog:
  - update to v.0.4.0
  - sync with fedora spec
  - drop applied CVE-2019-14378 patch
  - Resolves: #1766774


author: Jindrich Novy <jnovy@redhat.com> - 1.1.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.1
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.2
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.3
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.4-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.4
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.6-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.6
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.7-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.8-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
  - Related: #1883490


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.1.8-1
changelog:
  - Rebase to latest github version Snappy-1.1.8
  - Also change the URL to reflect to the updated github location.


author: Paul Wouters <pwouters@redhat.com> - 1.7.3.2-1
changelog:
  - Resolves rhbz#1404290 socat build failure on rawhide
  - Resolves rhbz#1416597 socat-1.7.3.2 is available
  - Resolves rhbz#1417483 Failed DNS resolution causes SIGSEGV and endless loop
  - Removed obsoleted patch


author: Paul Wouters <pwouters@redhat.com> - 1.7.4.1-1
changelog:
  - Resolves: rhbz#1805132 socat does not recognize IP addresses of the SAN extensions in ssl mode
  - Resolves: rhbz#1870279 Transfer via socat fails with openssl enabled
  - Resolves: rhbz#1914989 Socat udp4-recvfrom cause endless loop error when target is not vaild


author: Andreas Schneider <asn@redhat.com> - 1.1.8-1
changelog:
  - Update to version 1.1.8
    * Added support for openat()
    * Added support for open64() and fopen64()
    * Always enabled logging support
    * Increased maximum for wrapped interfaces to 64
    * Improved fd duplication code
    * Fixed strict-aliasing issues
    * Fixed some use after free issues
    * Fixed issues on ppc64le


author: Andreas Schneider <asn@redhat.com> - 1.2.0-1
changelog:
  - Update to vesrion 1.2.0
    * Added threading support
    * Moved to modern cmake
    * Several smaller bugfixes


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.3.0-3
changelog:
  - Remove softhsm2-pk11install. Software modules are to be registered with
    p11-kit as in https://fedoraproject.org/wiki/PackagingDrafts/Pkcs11Support (#1541095).


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-1
changelog:
  - Fixes: rhbz#1818877 - rebase to softhsm 2.6.0+
  - Fixes: rhbz#1701233 - support setting supported signature methods on the token


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-3
changelog:
  - Fixes: rhbz#1834909 - softhsm use-after-free on process exit
  - Synchronize the final fix with Fedora


author: Sérgio Basto <sergio@serjux.com> - 1.9.2-1
changelog:
  - Update to 1.9.2 (#961876).
  - Modernize spec file.
  - Makefile.am handles mmx and sse flags well, so no need patch 01 and sed anymore.
  - Patch 02 disabled, I hope we already have asm fixed on X86_64.


author: Sérgio Basto <sergio@serjux.com> - 1.9.2-2
changelog:
  - Add license tag.
  - Add back sed on -O3 .
  - Not modify soundtouch_config.h because looks correct, just have one line !.


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-10
changelog:
  - Fixed CVE-2018-11805
  - Resolves: rhbz#1787514
  - Fixed CVE-2020-1930
  - Resolves: rhbz#1820649
  - Fixed CVE-2020-1931
  - Resolves: rhbz#1820650


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2.0-1
changelog:
  - update to 1.2.0
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - include soname in file list
  - use license macro


author: Victor Toso <victortoso@redhat.com> - 0.38-2
changelog:
  - Brings some post releases fixes and disables celt051 that is
    deprecated in spice-protocol 0.14.2
  - Possibly related to rhbz#1688737 rhbz#1746239
    Related: rhbz#1817471
  - Fix mouse pointer on relative mouse mode
    Resolves: rhbz#1674311
  - Handle detailed errors from guest agent
    Related:  rhbz#1520393


author: Uri Lublin <uril@redhat.com> - 0.38-4
changelog:
  - Fix some static analyzer issues
    Resolves: rhbz#1839104
  - Fix spice-usbredir-redirect-on-connect
    Resolves: rhbz#1874740


author: Julien Ropé <jrope@redhat.com> - 0.20.0-3
changelog:
  - Fix mouse problems in multi-monitor environments under Wayland
    Resolves: rhbz#1790904 rhbz#1824610


author: Abhi Das <adas@redhat.com> - 4.3-19
changelog:
  - rhbz#1602698 - Fix coverity issues
    rhbz#1624173 - Fix annocheck failures
    rhbz#1716278 - limit max cpus in mksquashfs
    Resolves: rhbz#1602698, rhbz#1624173, rhbz#1716278


author: Abhi Das <adas@redhat.com> - 4.3-20
changelog:
  - rhbz#1895017 - unsquashfs does not preserve file capabilities
    rhbz#1754815 - Kdump: Building kdump initramfs img may fail with 'dracut: Failed making squash image' occasionally
    Resolves: rhbz#1895017, rhbz#1754815


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-6
changelog:
  - Resolves: #1679526 - Missing detailed configuration file
  - Resolves: #1703117 - RHEL 7 to 8 fails with squid installed because dirs
    changed to symlinks
  - Resolves: #1691741 - Squid cache_peer DNS lookup failed when not all lower
    case
  - Resolves: #1683527 - "Reloading" message on a fresh reboot after enabling
    squid


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-8
changelog:
  - Resolves: # 1738485 - CVE-2019-12527 squid:4/squid: heap-based buffer overflow
    in HttpHeader::getAuth


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-9
changelog:
  - Resolves: #1738583 - CVE-2019-12525 squid:4/squid: parsing of header
    Proxy-Authentication leads to memory corruption
  - Resolves: #1828369 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution
  - Resolves: #1828370 - CVE-2019-12519 squid: improper check for new member in
    ESIExpression::Evaluate allows for stack buffer overflow


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-1
changelog:
  - new version 4.11
  - libsystemd integration
  - Resolves: #1829467 - squid:4 rebase
  - Resolves: #1828378 - CVE-2019-12521 squid:4/squid: off-by-one error in
    addStackElement allows for a heap buffer overflow and a crash
  - Resolves: #1828377 - CVE-2019-12520 squid:4/squid: improper input validation
    in request allows for proxy manipulation
  - Resolves: #1828375 - CVE-2019-12524 squid:4/squid: improper access restriction
    in url_regex may lead to security bypass
  - Resolves: #1820664 - CVE-2019-18860 squid: mishandles HTML in the host
    parameter to cachemgr.cgi which could result in squid behaving in unsecure way
  - Resolves: #1802514 - CVE-2020-8449 squid:4/squid: Improper input validation
    issues in HTTP Request processing
  - Resolves: #1802513 - CVE-2020-8450 squid:4/squid: Buffer overflow in a Squid
    acting as reverse-proxy
  - Resolves: #1802512 - CVE-2019-12528 squid:4/squid: Information Disclosure
    issue in FTP Gateway
  - Resolves: #1771288 - CVE-2019-18678 squid:4/squid: HTTP Request Splitting
    issue in HTTP message processing
  - Resolves: #1771283 - CVE-2019-18679 squid:4/squid: Information Disclosure
    issue in HTTP Digest Authentication
  - Resolves: #1771280 - CVE-2019-18677 squid:4/squid: Cross-Site Request Forgery
    issue in HTTP Request processing
  - Resolves: #1771275 - CVE-2019-12523 squid:4/squid: Improper input validation
    in URI processor
  - Resolves: #1771272 - CVE-2019-18676 squid:4/squid: Buffer overflow in URI
    processor
  - Resolves: #1771264 - CVE-2019-12526 squid:4/squid: Heap overflow issue in URN
    processing
  - Resolves: #1738581 - CVE-2019-12529 squid: OOB read in Proxy-Authorization
    header causes DoS


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-2
changelog:
  - Resolves: #1853130 - CVE-2020-15049 squid:4/squid: request smuggling and
    poisoning attack against the HTTP cache
  - Resolves: #1853136 - CVE-2020-14058 squid:4/squid: DoS in TLS handshake


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-3
changelog:
  - Resolves: #1871705 - CVE-2020-24606 squid: Improper Input Validation could
    result in a DoS
  - Resolves: #1871702 - CVE-2020-15811 squid: HTTP Request Splitting could result
    in cache poisoning
  - Resolves: #1871700 - CVE-2020-15810 squid: HTTP Request Smuggling could result
    in cache poisoning


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-4.2
changelog:
  - Resolves: #1944260 - CVE-2020-25097 squid:4/squid: improper input validation
    may allow a trusted client to perform HTTP Request Smuggling


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-5
changelog:
  - Resolves: #1944261 - CVE-2020-25097 squid:4/squid: improper input validation
    may allow a trusted client to perform HTTP Request Smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-2
changelog:
  - Resolves: #2006121 - SQUID shortens FTP Link wrong that contains a semi-colon
    and as a result is not able to download zip file.CODE 404 TO CLIENT)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-3
changelog:
  - Resolves: #1941506 - CVE-2021-28116 squid:4/squid: out-of-bounds read in WCCP
    protocol data may lead to information disclosure


author: Stephen Gallagher <sgallagh@redhat.com> - 2.3.3-5
changelog:
  - Autodetect the minimum key strength from the system security level.
  - Autodetect the hash algorithm to use from the system security level.
  - Disallow setting a key strength below the system minimum.
  - Resolves: rhbz#1653323


author: Clark Williams <williams@redhat.com> - 1.2-1
changelog:
  - utils.c: added info() functions
  - detect and correctly parse old-style /proc/sched_debug
  - src/stalld: Fix an retval check while reading sched_debug
  - src/throttling: Fix a compilation warning
  - ensure we only count task lines in old-format sched_debug info
  - Add comments, clean up trailing whitespace
  - src/utils: Fix runtime parameters check
  - stalld: Do not take actions if log_only is set
  - remove warning from parse_old_task_format


author: Clark Williams <williams@redhat.com> - 1.3-1
changelog:
  - Readme: Add information about repositories
  - Add version management and version option
  - create doc and scripts directory and add info on releases


author: Clark Williams <williams@redhat.com> - 1.4-1
changelog:
  - stalld: Set rt_runtime to -1 before trying the SCHED_DEADLINE
  - Fix incorrect recursion of specfile version field


author: Clark Williams <williams@redhat.com> - 1.7-1
changelog:
  - rework detect_task_format and buffer_size logic
  - make CFLAGS for local compile match rpmbuild CFLAGS


author: Clark Williams <williams@redhat.com> - 1.8-1
changelog:
  - Fix Readiness Protocol Mismatch with systemd
  - test01:  update to use buildin atomic operations
  - test01: add throttling check


author: Clark Williams <williams@redhat.com> - 1.9-1
changelog:
  - Set starvation threshold default to 30 seconds
  - rework read buffer allocation to properly find page size
  - Add the -g/--granularity option
  - Change the default granularity to five seconds
  - Implement idle detection
  - Implement the single-threaded mode
  - Add HRTICK_DL support


author: Clark Williams <williams@redhat.com> - 1.10-1
changelog:
  - utils: Fix bounds check on cpu and end_cpu variables
  - stalld: Support denylisting of tasks in stalld
  - src/utils: use right argument for warning printf


author: Clark Williams <williams@redhat.com> - 1.11-1
changelog:
  - redhat/stalld.spec: pick up gating test version for changelog
  - utils.c: set daemon umask to restrict global write/execute (1934586)
  - hardening fixes from coverity scan (1934590)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.12-1
changelog:
  - stalld.8: fix diff cruft left in manpage source
  - stalld.c: clean up handling of nr_running
  - stalld.c: remove duplicate parameter to fill_waiting_task() (1934582)
  - stalld.service: Run stalld as sched_fifo via systemd
  - stalld: Add error handling in get_cpu_idle_time() (1966259)
  - packaging: clean up Makefiles and rpm specfile (1972806)
  - stalld: Always print current function for info messages
  - stalld: Always print current function for warn messages
  - stalld: Always print current function for die messages
  - utils: change PATHMAX to 4096 (1934581)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.13-1
changelog:
  - stalld: Fix log message on boost_cpu_starving_vector()
  - stalld: Add the overload control to the single-threaded mode
  - stalld: Add the adaptive mode option
  - stalld: Use the last mode set in the cmdline
  - stalld: Fallback to the adaptive mode if force_fifo is selected
  - stalld: Make single-threaded mode the default one (1920041)
  - stalld.service: Always restart stalld on exit
  - utils.c: Fail if user is not root
  - utils.c: Make the path to sched_debug path dynamic (1977663)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.14.1-1
changelog:
  - stalld: Coding style cleanup
  - stalld: spaces in place of <TAB>
  - throttling: Use RT_RUNTIME_PATH in rt_throttling_is_off()
  - throttling: Check open() on turn_off_rt_throttling
  - throttling: Adjust variables in restore_rt_throttling()
  - stalld.c: utils.c: Remove complex assignments from variable declarations
  - stalld.h: Define MAX_PATH/DIR_PATH/FILE_NAME and use them
  - stalld: Adjust variables in parse_old_task_format()
  - utils.c: Use MAX_PATH for pidfile
  - stalld.c: Remove variable declaration from the middle of  the function
  - stalld: Respect -l option in single threaded mode (1983100)
  - utils: s/try_to_open_file/check_file_exists/
  - utils: use check_file_exists in setup_hr_tick()
  - utils: Check for the new sched_features path


author: Fernando Pacheco <fpacheco@redhat.com> - 1.15-1
changelog:
  - stalld: Fix incorrect open() return value checks
  - stalld: Pass errno to strerror() on sig*set() failures
  - throttling: Always null terminate sched_rt_runtime_us output
  - stalld: Remove unreachable statement in detect_task_format()
  - tests: Fix uninitialized value action.sa_mask
  - utils: Bail if malloc() returns null in parse_cpu_list()
  - stalld: Use correct format specifier for long types
    Resolves: rhbz#1990057, rhbz#1996799, rhbz#1996825


author: Fernando Pacheco <fpacheco@redhat.com> - 1.16-1
changelog:
  - stald/utils: Space, lines and voids clenaups
  - stalld: Add an option to easily set stalld as SCHED_DEADLINE
  - stalld: Comments cleanup
  - src/utils: Comments cleanup
  - src/throttling: Comments cleanup
  - src/stalld.h Comments cleanup
    Resolves: rhbz#2068549


author: Clark Williams <williams@redhat.com> - 1.1-1
changelog:
  - Fix an option in README.md; consistency in user facing docs.
  - Makefile: add 'static' target to link stalld statically
  - gitignore: ignore object files and the stalld executable
  - use FIFO for boosting (v3)
  - stalld.c: fix sched_debug parsing and modify waiting task parsing
  - redhat:  update release for features and bugfix
  - stalld: Do not die if sched_debug returns an invalid value
  - src/stalld: Do not die if the comm is too large
  - src/stalld: Do not die if cannot write a message to the log
  - src/stalld: Do not die if the main runs while a thread is monitoring the CPU
  - implement RT throttling management and refactor source files
  - more refactoring
  - src/stalld: Reuse already read nr_running nr_rt_running
  - src/stalld: Gracefully handle CPUs not found on sched_debug
  - src/stalld: Use dynamically allocated memory to read sched_debug
  - src/utils: Die with a divizion by zero if verbose
  - src/stalld: Add config_buffer_size variable
  - src/stalld: Increase the sched_debug read buffer if it gets too small
  - src/stalld: Fix an retval check while reading sched_debug
  - src/throttling: Fix a compilation warning


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-7
changelog:
  - Fix printing stack traces for early syscalls on process attach (#1790053):
    69b2c33a "unwind-libdw: fix initialization of libdwfl cache" and
    8e515c74 "tests: add strace-k-p test".
  - Properly decode struct sockaddr_hci without hci_channel field.
  - Update tests-m32/ioctl_evdev.c and tests-mx32/ioctl_evdev.c
    in 0002-evdev-fix-decoding-of-EVIOCGBIT-0.patch.
  - Update tests-m32/Makefile.in and tests-mx32/Makefile.in
    in 0032-tests-check-decoding-of-successful-evdev-ioctl.patch.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-8
changelog:
  - Fix expected alignment for IPC tests (#1795251):
    4377e3a1 "tests: fix expected output for some ipc tests", and
    a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".
  - Update tests-m32/looping_threads.test and tests-mx32/looping_threads.test
    in 0025-tests-check-tracing-of-looping-threads.patch.
  - Update the bpf syscall decoder:
    d6c71dd0 "Fix preprocessor indentation",
    cabd6955 "bpf: print struct bpf_prog_info.gpl_compatible",
    14a9b6ca "bpf: add support for btf_* fields in BPF_MAP_CREATE",
    27bd13d3 "bpf: add support for btf_* fields in struct bpf_map_info",
    d1f90bcd "bpf: add support for *jited_ksyms and *jited_func_lens fields
             in struct bpf_prog_info", and
    940fe50f "bpf: add support for new twelve fields in struct bpf_prog_info".
    c661605b "tests: robustify bpf-obj_get_info_by_fd test against future kernels"


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-9
changelog:
  - Fix the "extra tokens at end of #ifdef directive" warning:
    579f2702 "bpf: exclude bit fields from the check".


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-1
changelog:
  - Rebase to v5.13; drop upstream patches on top of 5.7 (#2015917).
  - Address some issues reported by covscan.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-4
changelog:
  - Sync up thread handling unfairness fix with the upstream version.
  - Fix "xlat_idx: Unexpected xlat value 0 at index ..." messages (#1660759).
  - Remove "ptrace(SYSCALL): No such process" messages (#1662936).
  - Wire up rseq and kexec_file_load on aarch64 (#1676045).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-6
changelog:
  - Pull upstream fix for ioctl evdev bitset decoding, fix the tests (#1747214).
  - Include commit v4.26~65 "s390x: beautify sthyi data tail prints" (#1747514).
  - Include upstream patches that fix issues reported by covscan (#1747526):
    91281fec "v4l2: avoid shifting left a signed number by 31 bit",
    522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing",
    9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register", and
    2b64854e "xlat: use unsgined type for mount_flags fallback values".


author: Dennis Keefe <dkeefe@redhat.com> - 2.0.0-4
changelog:
  - Update to 2.0.0
  - Resolves: rhbz#1760906
  - Fix a bug where last update time for variable length metadata was not set
    properly on startup:
  - Resolves: rhbz#1720399
  - Specify path of PID file as "/run/stratisd.pid" instead of 
    "/var/run/stratisd.pid".
  - Resolves: rhbz#1754649
  - For a particular log entry, reduce log level from INFO to DEBUG and make the
    log message more detailed:
  - Resolves: rhbz#1680052


author: Dennis Keefe <dkeefe@redhat.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Resolves: rhbz#1791473
  - Update Stratis RPM Spec File
  - Resolves: rhbz#1828487
  - Support per-pool encryption of the devices that form a pool's data tier
  - Resolves: rhbz#1768580
  - Improve systemd unit file description
  - Resolves: rhbz#1756525


author: Dennis Keefe <dkeefe@redhat.com> - 2.3.0-2
changelog:
  - Update to 2.3.0
  - Resolves: rhbz#1885328
  - Stratis devices inhabit an existing root directory path
  - Resolves: rhbz#1798244
  - Add Clevis Support
  - Resolves: rhbz#1868100
  - Improve stratisd log levels
  - Resolves: rhbz#1757976


author: Bryan Gurney <bgurney@redhat.com> - 2.4.0-3
changelog:
  - Update to 2.4.0
  - Resolves: rhbz#1931671
  - Improve stratis by adding Multi-threading
  - Resolves: rhbz#1927485
  - Dump stratis configuration on demand or in debug
  - Resolves: rhbz#1735475
  - Add noalign option to XFS creation on MDV
  - Resolves: rhbz#1908318
  - Cap thinpool metadata device size at devicemapper-set limit
  - Resolves: rhbz#1707461


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1931671
  - Ensure that binaries are installed with proper features enabled
  - Split dracut modules out to subpackage
  - Add additional dependencies in dracut module


author: Sahana Prasad <sahana@redhat.com> - 5.56-5
changelog:
  - Fix CVE-2021-20230 stunnel: client certificate not
    correctly verified when redirect and verifyChain options are used.


author: Radovan Sroka <rsroka@redhat.com> - 1.8.25-5
changelog:
  - RHEL 8.1 ERRATUM
  - Fixed problem with sudo-1.8.23 and 'who am i'
  Resolves: rhbz#1673886
  - Backporting sudo bug with expired passwords
  Resolves: rhbz#1676819


author: Radovan Sroka <rsroka@redhat.com> - 1.8.25-6
changelog:
  - RHEL 8.1 ERRATUM
  - Fixed The LDAP backend which is not properly parsing sudoOptions,
    resulting in selinux roles not being applied
  Resolves: rhbz#1738326


author: Radovan Sroka <rsroka@redhat.com> - 1.8.28p1-1
changelog:
  - RHEL 8.2 ERRATUM
  - rebase to 1.8.28p1
  Resolves: rhbz#1733961
  - fixed man page for always_set_home
  Resolves: rhbz#1576880
  - sudo does not work with notbefore/after
  Resolves: rhbz#1679508
  - NOTBEFORE showing value of sudoNotAfter Ldap attribute
  Resolves: rhbz#1715516
  - CVE-2019-14287 sudo
  - Privilege escalation via 'Runas' specification with 'ALL' keyword
  Resolves: rhbz#1760697


author: Radovan Sroka <rsroka@redhat.com> - 1.8.29-7
changelog:
  - RHEL 8.4 ERRATUM
  - CVE-2021-3156
  Resolves: rhbz#1917734
  - CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhzb#1916434
  - CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1917038
  - updated upstream url
  Resolves: rhbz#1923825


author: RAdovan Sroka <rsroka@redhat.com> - 1.8.29-7.1
changelog:
  RHEL 8.4.0 ZSTREAM ERRATUM
  - Make sure SIGCHLD is not ignored when sudo is executed
  Resolves: rhbz#2015136


author: Radovan Sroka <rsroka@redhat.com> - 1.8.29-8
changelog:
  RHEL 8.6.0 ERRATUM
  - sudoedit does not work with selinux args
  Resolves: rhbz#2029551
  - Make sure SIGCHLD is not ignored when sudo is executed
  Resolves: rhbz#1999751
  - [RFE] pass KRB5CCNAME to pam_authenticate environment if available
  Resolves: rhbz#1917379
  - utmp resource leak in sudo
  Resolves: rhbz#1986572


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Bastien Nocera <bnocera@redhat.com> - 1.1-1
changelog:
  + switcheroo-control-1.1-1
  - Update to 1.1
  - Don't throw errors when the machine doesn't have dual-GPU (#1391212)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.0-2.20200828git0c238a2
changelog:
  - Backport fixes from 0.4.0 stable branch. Resolves: rhbz#1868375
    (fixes usage of swtpm-localca with passwords when signing keys)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.2-1.20201201git2df14e3
changelog:
  - Update to 0.4.2, to address potential symlink vulnerabilities (CVE-2020-28407).
    Resolves: rhbz#1906043


author: Michal Sekletár <msekleta@redhat.com> - 11.7.3-2
changelog:
  - sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#1624177)


author: <msekleta@redhat.com> - 11.7.3-6
changelog:
  - Don't trigger autofs mounts when running sadc (#1954793)
  - sar: Add missing %gnice CPU value for tickless CPU (#1908996)


author: <msekleta@redhat.com> - 11.7.3-7
changelog:
  - Don't trigger autofs mounts when running sadc (#2000910)
  - sar: Add missing %gnice CPU value for tickless CPU (#2000916)
  - sadf: Fix seg fault on empty data files (#1910841)
  - sar: Fix typo in manual page (#1877836)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-36
changelog:
  - core: don't consider SERVICE_SKIP_CONDITION for abnormal or failure restarts (#1737283)
  - selinux: do preprocessor check only in selinux-access.c (#1830861)
  - basic/cgroup-util: introduce cg_get_keyed_attribute_full() (#1830861)
  - shared: add generic logic for waiting for a unit to enter some state (#1830861)
  - shared: fix assert call (#1830861)
  - shared: Don't try calling NULL callback in bus_wait_for_units_clear (#1830861)
  - shared: add NULL callback check in one more place (#1830861)
  - core: introduce support for cgroup freezer (#1830861)
  - core/cgroup: fix return value of unit_cgorup_freezer_action() (#1830861)
  - core: fix the return value in order to make sure we don't dipatch method return too early (#1830861)
  - test: add test for cgroup v2 freezer support (#1830861)
  - fix mis-merge (#1848421)
  - tests: sleep a bit and give kernel time to perform the action after manual freeze/thaw (#1848421)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-39
changelog:
  - device: make sure we emit PropertiesChanged signal once we set sysfs (#1793533)
  - device: don't emit PropetiesChanged needlessly (#1793533)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-40
changelog:
  - units: add generic boot-complete.target (#1872243)
  - man: document new "boot-complete.target" unit (#1872243)
  - core: make sure to restore the control command id, too (#1829867)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-42
changelog:
  - logind: don't print warning when user@.service template is masked (#1880270)
  - build: use simple project version in pkgconfig files (#1862714)
  - basic/virt: try the /proc/1/sched hack also for PID1 (#1868877)
  - seccomp: rework how the S[UG]ID filter is installed (#1860374)
  - vconsole-setup: downgrade log message when setting font fails on dummy console (#1889996)
  - units: fix systemd.special man page reference in system-update-cleanup.service (#1871827)
  - units: drop reference to sushell man page (#1871827)
  - sd-bus: break the loop in bus_ensure_running() if the bus is not connecting (#1885553)
  - core: add new API for enqueing a job with returning the transaction data (#846319)
  - systemctl: replace switch statement by table of structures (#846319)
  - systemctl: reindent table (#846319)
  - systemctl: Only wait when there's something to wait for. (#846319)
  - systemctl: clean up start_unit_one() error handling (#846319)
  - systemctl: split out extra args generation into helper function of its own (#846319)
  - systemctl: add new --show-transaction switch (#846319)
  - test: add some basic testing that "systemctl start -T" does something (#846319)
  - man: document the new systemctl --show-transaction option (#846319)
  - socket: New option 'FlushPending' (boolean) to flush socket before entering listening state (#1870638)
  - core: remove support for API bus "started outside our own logic" (#1764282)
  - mount-setup: fix segfault in mount_cgroup_controllers when using gcc9 compiler (#1868877)
  - dbus-execute: make transfer of CPUAffinity endian safe (#12711) (#1740657)
  - core: add support for setting CPUAffinity= to special "numa" value (#1740657)
  - basic/user-util: always use base 10 for user/group numbers (#1848373)
  - parse-util: sometimes it is useful to check if a string is a valid integer, but not actually parse it (#1848373)
  - basic/parse-util: add safe_atoux64() (#1848373)
  - parse-util: allow tweaking how to parse integers (#1848373)
  - parse-util: allow '-0' as alternative to '0' and '+0' (#1848373)
  - parse-util: make return parameter optional in safe_atou16_full() (#1848373)
  - parse-util: rewrite parse_mode() on top of safe_atou_full() (#1848373)
  - user-util: be stricter in parse_uid() (#1848373)
  - strv: add new macro STARTSWITH_SET() (#1848373)
  - parse-util: also parse integers prefixed with 0b and 0o (#1848373)
  - tests: beef up integer parsing tests (#1848373)
  - shared/user-util: add compat forms of user name checking functions (#1848373)
  - shared/user-util: emit a warning on names with dots (#1848373)
  - user-util: Allow names starting with a digit (#1848373)
  - shared/user-util: allow usernames with dots in specific fields (#1848373)
  - user-util: switch order of checks in valid_user_group_name_or_id_full() (#1848373)
  - user-util: rework how we validate user names (#1848373)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-43
changelog:
  - man: mention System Administrator's Guide in systemctl manpage (#1623116)
  - udev: introduce udev net_id "naming schemes" (#1827462)
  - meson: make net.naming-scheme= default configurable (#1827462)
  - man: describe naming schemes in a new man page (#1827462)
  - udev/net_id: parse _SUN ACPI index as a signed integer (#1827462)
  - udev/net_id: don't generate slot based names if multiple devices might claim the same slot (#1827462)
  - fix typo in ProtectSystem= option (#1871139)
  - remove references of non-existent man pages (#1876807)
  - log: Prefer logging to CLI unless JOURNAL_STREAM is set (#1865840)
  - locale-util: add new helper locale_is_installed() (#1755287)
  - test: add test case for locale_is_installed() (#1755287)
  - tree-wide: port various bits over to locale_is_installed() (#1755287)
  - install: allow instantiated units to be enabled via presets (#1812972)
  - install: small refactor to combine two function calls into one function (#1812972)
  - test: fix a memleak (#1812972)
  - docs: Add syntax for templated units to systemd.preset man page (#1812972)
  - shared/install: fix preset operations for non-service instantiated units (#1812972)
  - introduce setsockopt_int() helper (#1887181)
  - socket-util: add generic socket_pass_pktinfo() helper (#1887181)
  - core: add new PassPacketInfo= socket unit property (#1887181)
  - resolved: tweak cmsg calculation (#1887181)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-44
changelog:
  - ci: PowerTools repo was renamed to powertools in RHEL 8.3 (#1871827)
  - ci: use quay.io instead of Docker Hub to avoid rate limits (#1871827)
  - ci: move jobs from Travis CI to GH Actions (#1871827)
  - unit: make UNIT() cast function deal with NULL pointers (#1871827)
  - use link to RHEL-8 docs (#1623116)
  - cgroup: Also set blkio.bfq.weight (#1657810)
  - units: make sure initrd-cleanup.service terminates before switching to rootfs (#1657810)
  - core: reload SELinux label cache on daemon-reload (#1888912)
  - selinux: introduce mac_selinux_create_file_prepare_at() (#1888912)
  - selinux: add trigger for policy reload to refresh internal selabel cache (#1888912)
  - udev/net_id: give RHEL-8.4 naming scheme a name (#1827462)
  - basic/stat-util: make mtime check stricter and use entire timestamp (#1642728)
  - udev: make algorithm that selects highest priority devlink less susceptible to race conditions (#1642728)
  - test: create /dev/null in test-udev.pl (#1642728)
  - test: missing "die" (#1642728)
  - udev-test: remove a check for whether the test is run in a container (#1642728)
  - udev-test: skip the test only if it can't setup its environment (#1642728)
  - udev-test: fix test skip condition (#1642728)
  - udev-test: fix missing directory test/run (#1642728)
  - udev-test: check if permitted to create block device nodes (#1642728)
  - test-udev: add a testcase of too long line (#1642728)
  - test-udev: use proper semantics for too long line with continuation (#1642728)
  - test-udev: add more tests for line continuations and comments (#1642728)
  - test-udev: add more tests for line continuation (#1642728)
  - test-udev: fix alignment and drop unnecessary white spaces (#1642728)
  - test/udev-test.pl: cleanup if skipping test (#1642728)
  - test: add test cases for empty string match (#1642728)
  - test: add test case for multi matches when use "||" (#1642728)
  - udev-test: do not rely on "mail" group being defined (#1642728)
  - test/udev-test.pl: allow multiple devices per test (#1642728)
  - test/udev-test.pl: create rules only once (#1642728)
  - test/udev-test.pl: allow concurrent additions and removals (#1642728)
  - test/udev-test.pl: use computed devnode name (#1642728)
  - test/udev-test.pl: test correctness of symlink targets (#1642728)
  - test/udev-test.pl: allow checking multiple symlinks (#1642728)
  - test/udev-test.pl: fix wrong test descriptions (#1642728)
  - test/udev-test.pl: last_rule is unsupported (#1642728)
  - test/udev-test.pl: Make some tests a little harder (#1642728)
  - test/udev-test.pl: remove bogus rules from magic subsys test (#1642728)
  - test/udev-test.pl: merge "space and var with space" tests (#1642728)
  - test/udev-test.pl: merge import parent tests into one (#1642728)
  - test/udev-test.pl: count "good" results (#1642728)
  - tests/udev-test.pl: add multiple device test (#1642728)
  - test/udev-test.pl: add repeat count (#1642728)
  - test/udev-test.pl: generator for large list of block devices (#1642728)
  - test/udev-test.pl: suppress umount error message at startup (#1642728)
  - test/udev_test.pl: add "expected good" count (#1642728)
  - test/udev-test: gracefully exit when imports fail (#1642728)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-45
changelog:
  - Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1931947)
  - test/sys-script.py: add missing DEVNAME entries to uevents (#1931947)
  - sd-event: split out helper functions for reshuffling prioqs (#1819868)
  - sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1819868)
  - sd-event: mention that two debug logged events are ignored (#1819868)
  - sd-event: split clock data allocation out of sd_event_add_time() (#1819868)
  - sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1819868)
  - sd-event: fix delays assert brain-o (#17790) (#1819868)
  - sd-event: let's suffix last_run/last_log with "_usec" (#1819868)
  - sd-event: refuse running default event loops in any other thread than the one they are default for (#1819868)
  - sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1819868)
  - sd-event: follow coding style with naming return parameter (#1819868)
  - sd-event: remove earliest_index/latest_index into common part of event source objects (#1819868)
  - sd-event: update state at the end in event_source_enable (#1819868)
  - sd-event: increase n_enabled_child_sources just once (#1819868)
  - sd-event: add ability to ratelimit event sources (#1819868)
  - test: add ratelimiting test (#1819868)
  - core: prevent excessive /proc/self/mountinfo parsing (#1819868)
  - udev: run link_update() with increased retry count in second invocation (#1931947)
  - pam-systemd: use secure_getenv() rather than getenv() (#1687514)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-45.1
changelog:
  - Revert "udev: run link_update() with increased retry count in second invocation" (#1963980)
  - Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1963980)
  - test/udev-test.pl: drop test cases that add mutliple devices (#1963980)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-45
changelog:
  - Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
  - test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
  - sd-event: split out helper functions for reshuffling prioqs (#1937315)
  - sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
  - sd-event: mention that two debug logged events are ignored (#1937315)
  - sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
  - sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
  - sd-event: fix delays assert brain-o (#17790) (#1937315)
  - sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
  - sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
  - sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
  - sd-event: follow coding style with naming return parameter (#1937315)
  - sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
  - sd-event: update state at the end in event_source_enable (#1937315)
  - sd-event: increase n_enabled_child_sources just once (#1937315)
  - sd-event: add ability to ratelimit event sources (#1937315)
  - test: add ratelimiting test (#1937315)
  - core: prevent excessive /proc/self/mountinfo parsing (#1937315)
  - udev: run link_update() with increased retry count in second invocation (#1935124)
  - pam-systemd: use secure_getenv() rather than getenv() (#1936866)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-46
changelog:
  - Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
  - Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
  - test/udev-test.pl: drop test cases that add mutliple devices (#1942299)


author: Jan Macku <jamacku@redhat.com> - 239-47
changelog:
  - systemd-binfmt: Add safeguard in triggers (#1787144)
  - spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
  - spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
  - spec: Disable libiptc support (#1817265)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-48
changelog:
  - cgroup: Also set io.bfq.weight (#1927290)
  - seccomp: allow turning off of seccomp filtering via env var (#1916835)
  - meson: remove strange dep that causes meson to enter infinite loop (#1970860)
  - copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
  - core: Hide "Deactivated successfully" message (#1954802)
  - util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
  - initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
  - initrd: do a debug log if failed to detect rootfs type (#1959339)
  - initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
  - units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
  - units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
  - units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
  - user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
  - shared/install: Preserve escape characters for escaped unit names (#1952686)
  - basic/virt: Detect PowerVM hypervisor (#1937989)
  - man: document differences in clean exit status for Type=oneshot (#1940078)
  - busctl: add a timestamp to the output of the busctl monitor command (#1909214)
  - basic/cap-list: parse/print numerical capabilities (#1946943)
  - shared/mount-util: convert to libmount (#1885143)
  - mount-util: bind_remount: avoid calling statvfs (#1885143)
  - mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
  - test-install-root: create referenced targets (#1835351)
  - install: warn if WantedBy targets don't exist (#1835351)
  - test-install-root: add test for unknown WantedBy= target (#1835351)
  - ceph is a network filesystem (#1952013)
  - sysctl: set kernel.core_pipe_limit=16 (#1949729)
  - core: don't drop timer expired but not yet processed when system date is changed (#1899402)
  - core: Detect initial timer state from serialized data (#1899402)
  - rc-local: order after network-online.target (#1934028)
  - set core ulimit to 0 like on RHEL-7 (#1905582)
  - test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-49
changelog:
  - remove a left-over break (#1970860)
  - basic/unit-name: do not use strdupa() on a path (#1974700)
  - sd-event: change ordering of pending/ratelimited events (#1968528)
  - sd-event: drop unnecessary "else" (#1968528)
  - sd-event: use CMP() macro (#1968528)
  - sd-event: use usec_add() (#1968528)
  - sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
  - sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
  - ci: run unit tests on z-stream branches as well (#1970860)
  - ci: drop forgotten Travis references (#1934504)
  - ci: run unit tests on CentOS 8 Stream as well (#1934504)
  - ci: add missing test dependencies (#1934504)
  - meson: bump timeout for test-udev to 180s (#1934504)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-50
changelog:
  - Added option --check-inhibitors for non-tty usage (#1269726)
  - logind: Introduce RebootWithFlags and others (#1269726)
  - logind: add …WithFlags methods to policy (#1269726)
  - logind: simplify flags handling a bit (#1269726)
  - Update link to RHEL documentation (#1982584)
  - Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
  - shared/seccomp-util: address family filtering is broken on ppc (#1982650)
  - logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
  - logind: fix serialization/deserialization of user's "display session" (#1642460)
  - logind: turn of stdio locking when writing session files too (#1642460)
  - units: set StopWhenUnneeded= for the user slice units too (#1642460)
  - units: improve Description= string a bit (#1642460)
  - logind: improve logging in manager_connect_console() (#1642460)
  - logind: save/restore User object's "stopping" field during restarts (#1642460)
  - logind: correct bad clean-up path (#1642460)
  - logind: fix bad error propagation (#1642460)
  - logind: never elect a session that is stopping as display (#1642460)
  - logind: introduce little helper that checks whether a session is ready (#1642460)
  - logind: propagate session stop errors (#1642460)
  - logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
  - logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
  - logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
  - logind: improve error propagation of user_check_linger_file() (#1642460)
  - logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
  - pam_systemd: simplify code which with we set environment variables (#1642460)
  - logind: validate /run/user/1000 before we set it (#1642460)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-51
changelog:
  - define newly needed constants (#1850986)
  - sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
  - sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
  - sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
  - test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
  - util: introduce ifname_valid_full() (#1850986)
  - rename function (#1850986)
  - udev: support AlternativeName= setting in .link file (#1850986)
  - network: make Name= in [Match] support alternative names of interfaces (#1850986)
  - udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
  - udev: do not fail if kernel does not support alternative names (#1850986)
  - udev: introduce AlternativeNamesPolicy= setting (#1850986)
  - network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
  - random-util: call initialize_srand() after fork() (#1850986)
  - sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
  - udev: sort alternative names (#1850986)
  - netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
  - netlink: do not fail when new interface name is already used as an alternative name (#1850986)
  - udev: do not try to reassign alternative names (#1850986)
  - Fix LGTM build (#1850986)
  - sd-hwdb: allow empty properties (#1930568)
  - Update hwdb (#1930568)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-51.1
changelog:
  - sd-event: take ref on event loop object before dispatching event sources (#2024903)
  - pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
  - Disable iptables for CI (#2024903)
  - test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
  - Disable libpitc to fix CentOS Stream CI (#2024903)
  - test: accept that char device 0/0 can now be created witout privileges (#2024903)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-53
changelog:
  - sd-hwdb: allow empty properties (#2005009)
  - Update hwdb (#2005009)
  - Disable libpitc to fix CentOS Stream CI (#2017033)
  - rpm: Fix typo in %_environmentdir (#2018024)
  - rpm: Add misspelled %_environmentdir macro for temporary compatibility (#2018024)
  - rpm: emit warning when macro with typo is used (#2018024)
  - Remove unintended additions to systemd-analyze man page (#2004765)
  - core: fix SIGABRT on empty exec command argv (#2020239)
  - core/service: also check path in exec commands (#2020239)
  - mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (#2015057)
  - basic: add vmware hypervisor detection from device-tree (#1959150)
  - pam: do not require a non-expired password for user@.service (#1961746)
  - udev rules: add rule to create /dev/ptp_hyperv (#1991834)
  - process-util: explicitly handle processes lacking parents in get_process_ppid() (#1977569)
  - errno-util: add ERRNO_IS_PRIVILEGE() helper (#1977569)
  - procfs-util: fix confusion wrt. quantity limit and maximum value (#1977569)
  - test-process-util: also add EROFS to the list of "good" errors (#1977569)
  - journal: refresh cached credentials of stdout streams (#1931806)
  - util-lib: introduce HAS_FEATURE_ADDRESS_SANITIZER (#2017033)
  - ci: skip test-execute on GH Actions under ASan (#2017033)
  - test-seccomp: accept ENOSYS from sysctl(2) too (#2017033)
  - test: accept that char device 0/0 can now be created witout privileges (#2017033)
  - meson: do not fail if rsync is not installed with meson 0.57.2 (#2017033)
  - pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#1970945)
  - sd-event: take ref on event loop object before dispatching event sources (#1970945)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-54
changelog:
  - core: consider service with no start command immediately started (#1860899)
  - man: move description of *Action= modes to FailureAction=/SuccessAction= (#1860899)
  - core: define "exit" and "exit-force" actions for user units and only accept that (#1860899)
  - core: accept system mode emergency action specifiers with a warning (#1860899)
  - core: allow services with no commands but SuccessAction set (#1860899)
  - core: limit service-watchdogs=no to actual "watchdog" commands (#1860899)
  - units: use SuccessAction=exit-force in systemd-exit.service (#1860899)
  - units: use SuccessAction=reboot-force in systemd-reboot.service (#1860899)
  - units: use SuccessAction=poweroff-force in systemd-poweroff.service (#1860899)
  - units: allow and use SuccessAction=exit-force in system systemd-exit.service (#1860899)
  - core: do not "warn" about mundane emergency actions (#1860899)
  - core: return true from cg_is_empty* on ENOENT (#1860899)
  - macro: define HAS_FEATURE_ADDRESS_SANITIZER also on gcc (#2017033)
  - tests: add helper function to autodetect CI environments (#2017033)
  - strv: rework FOREACH_STRING() macro (#2017033)
  - test,systemctl: use "const char*" instead of "char*" (#2017033)
  - ci: pass the $GITHUB_ACTIONS variable to the CentOS container (#2017033)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-55
changelog:
  - lgtm: detect uninitialized variables using the __cleanup__ attribute (#2017033)
  - lgtm: replace the query used for looking for fgets with a more general query (#2017033)
  - lgtm: beef up list of dangerous/questionnable API calls not to make (#2017033)
  - lgtm: warn about strerror() use (#2017033)
  - lgtm: complain about accept() [people should use accept4() instead, due to O_CLOEXEC] (#2017033)
  - lgtm: don't treat the custom note as a list of tags (#2017033)
  - lgtm: ignore certain cleanup functions (#2017033)
  - lgtm: detect more possible problematic scenarios (#2017033)
  - lgtm: enable more (and potentially useful) queries (#2017033)
  - test: make TEST-47 less racy (#2017033)
  - core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2036608)
  - core: Check unit start rate limiting earlier (#2036608)
  - sd-event: introduce callback invoked when event source ratelimit expires (#2036608)
  - core: rename/generalize UNIT(u)->test_start_limit() hook (#2036608)
  - mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2036608)
  - mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2036608)
  - pid1: add a manager_trigger_run_queue() helper (#2036608)
  - unit: add jobs that were skipped because of ratelimit back to run_queue (#2036608)
  - Revert "Revert "sysctl: Enable ping(8) inside rootless Podman containers"" (#2037807)
  - sysctl: prefix ping port range setting with a dash (#2037807)
  - mount: don't propagate errors from mount_setup_unit() further up (#2036853)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-53
changelog:
  - sd-hwdb: allow empty properties (#2005009)
  - Update hwdb (#2005009)
  - Disable libpitc to fix CentOS Stream CI (#2017033)
  - rpm: Fix typo in /usr/lib/environment.d (#2018024)
  - rpm: Add misspelled /usr/lib/environment.d macro for temporary compatibility (#2018024)
  - rpm: emit warning when macro with typo is used (#2018024)
  - Remove unintended additions to systemd-analyze man page (#2004765)
  - core: fix SIGABRT on empty exec command argv (#2020239)
  - core/service: also check path in exec commands (#2020239)
  - mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (#2015057)
  - basic: add vmware hypervisor detection from device-tree (#1959150)
  - pam: do not require a non-expired password for user@.service (#1961746)
  - udev rules: add rule to create /dev/ptp_hyperv (#1991834)
  - process-util: explicitly handle processes lacking parents in get_process_ppid() (#1977569)
  - errno-util: add ERRNO_IS_PRIVILEGE() helper (#1977569)
  - procfs-util: fix confusion wrt. quantity limit and maximum value (#1977569)
  - test-process-util: also add EROFS to the list of "good" errors (#1977569)
  - journal: refresh cached credentials of stdout streams (#1931806)
  - util-lib: introduce HAS_FEATURE_ADDRESS_SANITIZER (#2017033)
  - ci: skip test-execute on GH Actions under ASan (#2017033)
  - test-seccomp: accept ENOSYS from sysctl(2) too (#2017033)
  - test: accept that char device 0/0 can now be created witout privileges (#2017033)
  - meson: do not fail if rsync is not installed with meson 0.57.2 (#2017033)
  - pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#1970945)
  - sd-event: take ref on event loop object before dispatching event sources (#1970945)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-57
changelog:
  - udev/net_id: introduce naming scheme for RHEL-8.5 (#2039797)
  - udev/net_id: remove extraneous bracket (#2039797)
  - udev/net_id: introduce naming scheme for RHEL-8.6 (#2039797)
  - define newly needed constants (#2005008)
  - sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#2005008)
  - sd-netlink: introduce sd_netlink_message_read_strv() (#2005008)
  - sd-netlink: introduce sd_netlink_message_append_strv() (#2005008)
  - test: add a test for sd_netlink_message_{append,read}_strv() (#2005008)
  - util: introduce ifname_valid_full() (#2005008)
  - rename function (#2005008)
  - udev: support AlternativeName= setting in .link file (#2005008)
  - network: make Name= in [Match] support alternative names of interfaces (#2005008)
  - udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#2005008)
  - udev: do not fail if kernel does not support alternative names (#2005008)
  - udev: introduce AlternativeNamesPolicy= setting (#2005008)
  - network: set AlternativeNamesPolicy= in 99-default.link (#2005008)
  - random-util: call initialize_srand() after fork() (#2005008)
  - sd-netlink: introduce rtnl_resolve_link_alternative_names() (#2005008)
  - udev: sort alternative names (#2005008)
  - netlink: introduce rtnl_get/delete_link_alternative_names() (#2005008)
  - netlink: do not fail when new interface name is already used as an alternative name (#2005008)
  - udev: do not try to reassign alternative names (#2005008)
  - Do not fail if the same alt. name is set again (#2005008)
  - mount: do not update exec deps on mountinfo changes (#2008825)
  - core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2008825)
  - core: fix unfortunate typo in unit_is_unneeded() (#2040147)
  - core: make destructive transaction error a bit more useful (#2040147)
  - tmpfiles: use a entry in hashmap as ItemArray in read_config_file() (#1944468)
  - tmpfiles: rework condition check (#1944468)
  - TEST-22-TMPFILES: add reproducer for bug with X (#1944468)
  - core: make sure we don't get confused when setting TERM for a tty fd (#2045307)
  - hash-funcs: introduce macro to create typesafe hash_ops (#2037807)
  - hash-func: add destructors for key and value (#2037807)
  - util: define free_func_t (#2037807)
  - hash-funcs: make basic hash_ops typesafe (#2037807)
  - test: add tests for destructors of hashmap or set (#2037807)
  - man: document the new sysctl.d/ - prefix (#2037807)
  - sysctl: if options are prefixed with "-" ignore write errors (#2037807)
  - sysctl: fix segfault (#2037807)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-58
changelog:
  - ci: drop CentOS 8 CI (#2017033)
  - test: adapt to the new capsh format (#2017033)
  - test: ignore IAB capabilities in `test-execute` (#2017033)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-59
changelog:
  - core: disallow using '-.service' as a service name (#2051520)
  - shared/dropin: support -.service.d/ top level drop-in for service units (#2051520)
  - core: change top-level drop-in from -.service.d to service.d (#2051520)
  - shared/dropin: fix assert for invalid drop-in (#2051520)
  - udev: fix slot based network names on s390 (#1939914)
  - udev: it is not necessary that the path is readable (#1939914)
  - udev: allow onboard index up to 65535 (#1939914)
  - Revert "basic: use comma as separator in cpuset cgroup cpu ranges" (#1858220)
  - acpi-fpdt: mark structures as packed (#2047373)
  - core/slice: make slice_freezer_action() return 0 if freezing state is unchanged (#2047373)
  - core/unit: fix use-after-free (#2047373)
  - sd-bus: fix reference counter to be incremented (#2047373)
  - sd-bus: do not read unused value (#2047373)
  - sd-bus: do not return negative errno when unknown name is specified (#2047373)
  - sd-bus: switch to a manual overflow check in sd_bus_track_add_name() (#2047373)
  - spec: Add dependency on timedatex (#2066946)


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-2
changelog:
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys


author: Stan Cox <scox@redhat.com> - 4.7-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Pavel Raiskup <praiskup@redhat.com> - 1.30-1
changelog:
  - rebase to latest upstream release, per release notes
    http://lists.gnu.org/archive/html/info-gnu/2017-12/msg00011.html


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.6-3
changelog:
  - Incorporate latest upstream patches, including a newer version
    of the OpenSSL patch in 1.9.6-2
    Resolves: rhbz#1492771
    Resolves: rhbz#1499435


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.7-1
changelog:
  - Rebase to the latest upstream version.
    Resolves: rhbz#1511799
  - Do not override OPTFLAGS in the make
    Resolves: rhbz#1620070


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.12-1
changelog:
  - Add patch to revert "Disable GCC9 address-of-packed-member warning"
    While it was able to build locally with 'rhpkg local', the brew
    build failed, because the compiler on the brew systems did not
    recognized the new GCC9 command line flag:
    -Wno-address-of-packed-member


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.12-2
changelog:
  - Fix build issues with one upstream patch.
    This patch also reverts the previous patch concerning the
    -Wno-address-of-packed-member cflag.
    Resolves: rhbz#1847938


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.0-0
changelog:
  Upgrade to latest upstream version
    Added upstream patch to remove deprecated man pages
    Resolves: rhbz#1857068


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.0-1
changelog:
  Build problem creating directory for grub modules. We can't
    know if the modules are there, so it's up to the end user to
    find the modules and copy them to the correct location.
    Specifically, for systems booting from EFI, the
    /boot/efi/EFI/redhat/x86_64-efi/multiboot2.mod file, if it
    exists, must be copied to the /boot/efi/EFI/redhat/x86_64-efi/
    directory. If that file does not exist, then the system has
    the wrong version of grub for using tboot in an EFI system.
    Resolves: rhbz#1857068


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.0-1
changelog:
  Need to add BuildRequires: perl, since it has beem moved
    from BuildRoot.
    See: https://fedoraproject.org/wiki/Packaging:Perl#Build_Dependencies
    Resolves: rhbz#1857068


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.1-1
changelog:
  Upgrade to tboot-1.10.2-1 provides some bug fixes and updates.
    Remove 0001-Do-not-install-man-pages-for-deprecated-tools.patch
    from the git repo, since it is no longer needed.
    Resolves: rhbz#1857068
    Resolves: rhbz#1873296
    Resolves: rhbz#1920386


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.5-1
changelog:
  Upgrade to tboot-1.10.5-1 for fixes and updates.
    Added a scriptlet to the tboot.spec file to automatically install
    grub2-efi-x64-modules and move them to the correct directory.
    Resolves: rhbz#2040082
    Resolves: rhbz#2041759


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.6-2
changelog:
  - Splitted documentation to the doc subpackage
    Resolves: rhbz#1380291
  - Fixed whitespace
  - Dropped obsoleted defattr


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.8-2
changelog:
  - Reverted _module_build macro check which fixes systemtap probes on RHEL-8
    Resolves: rhbz#1579386


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-4
changelog:
  - Removing build-time dependency on sharutils(rhbz#1587877)
  - Changing git dependency to smaller git-core


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-6
changelog:
  - Resolves: #1715423 - tcpdump pre creates user and groups unconditionally
  - Resolves: #1655622 - CVE-2018-19519 Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.3-2
changelog:
  - Resolves: #1860216 - tcpdump can not parse mptcp options
  - Resolves: #1901635 - ppp decapsulator can be convinced to allocate a large amount of memory
  - Adding tedude test to gating


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.20.00-5
changelog:
  - Added multiple upstream patches:
      tcsh-6.20.00-004-do-not-use-old-pointer-tricks.patch
      tcsh-6.20.00-005-reset-fixes-numbering.patch
      tcsh-6.20.00-006-cleanup-in-readme-files.patch
      tcsh-6.20.00-007-look-for-tgetent-in-libtinfo.patch
      tcsh-6.20.00-008-guard-ascii-only-reversion.patch
      tcsh-6.20.00-009-fix-regexp-for-backlash-quoting-tests.patch (bug #1424082)


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-69
changelog:
  - Resolves: #1445259 - telnet won't build with latest gcc
  - added note about address resolution in manpage


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-73
changelog:
  - Resolves: #1602711 - Please review important issues found by covscan
  - Resolves: #1637085 - Option -i is missing in telnet in el8 but is available in el7


author: Than Ngo <than@redhat.com> - 7:20180414-12
changelog:
  - texconfig is needed in texconfig-sys, added Requirement texlive-texconfig
  - multilib issue detected by rpmdiff
  - drop obsoleted patch for poppler-0.58
  - XML validity issue
    Related: #1602712


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-25
changelog:
  - Fix inconsistent --map-file option spelling in manual (rhbz#2066853)
  - Fix memory corruption in tftpd when filename remapping with macro \x
    is used (rhbz#2066862)


author: Jan Grulich <jgrulich@redhat.com> - 1.10.1-5
changelog:
  - Install the HOWTO file to correct location
  - Add /usr/bin/vncserver file informing users to read the HOWTO.md file
    Resolves: bz#1790443


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-1
changelog:
  - Update to 1.11.0
    Resolves: bz#1880985
  - Backport fix to allow Tigervnc use boolean values in config files
    Resolves: bz#1883415


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-2
changelog:
  - Revert removal of vncserver
    Resolves: bz#1897504
  - Correctly start vncsession as a daemon
    Resolves: bz#1897498


author: Jan Grulich <jgrulich@redhat.com> - 1.12.0-4
changelog:
  - Added vncsession-restore script for SELinux policy migration
    Fix SELinux context for root user
    Resolves: bz#2021892


author: Petr Pisar <ppisar@redhat.com> - 1.8-1
changelog:
  - 1.8 bump
  - License changed from GPLv2+ to (GPLv3+ and GFDL)
  - Disable printing command failure in POSIX mode


author: Kirill Glebov <kgliebov@redhat.com> - 5-1
changelog:
  - Release v5. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Implement support for --configuration option for all programs.
    The option makes the program output its configuration in JSON and then
    exit.
  - Add BuildDependencies to allow yum-builddep.
  - Open JSON writer file with euid/egid. To allow creating protected log files
    with tlog-rec-session, open the JSON writer's file with the EUID and
    GUID the program was started with.
  - Installing Packages with the APT Addon instead of apt-get.
  - Switch to using TLOG_ERRS_RAISE macros.
  - Fix tlog-play cleanup-path segfault.
  - Modify command-line option parsing.
  - Remove "fields" field from ES query URL to fix compatibility with
    Elasticsearch 5.
  - Remove unused _source parameter from ES query URL.
  - Fix tlog-rec-session file permissions bug.
  - Use CLOCK_MONOTONIC for rate-limiting writing.
  - Filter out some more input control sequences.


author: Justin Stephenson <jstephen@redhat.com> - 6-1
changelog:
  - Release v6. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Add integration tests for end-to-end test coverage.
  - Fix compiler type comparison error with json-c json_object_array_length
    return value.
  - Fix a distribution issue causing incorrect M4_CONF_PATH expansion.
  - Log more detailed error when systemd journal is not present.


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Release v7
  - Allow tlog-play redirection of stdout
  - Add -i/--interactive option to tlog-rec-session. Allows login
    programs to call tlog-rec-session more transparently.
  - Make in_txt/out_txt fields optional. This handles missing fields
    when reading from Elasticsearch or other backends.


author: Justin Stephenson <jstephen@redhat.com> - 8-1
changelog:
  - Release v8
  - Spec file fixes for EL6
  - Spec file improvements for Debian/Ubuntu pkg-config
  - Tlog-play improve authentication options
  - Handle piped in I/O from stdin and improve the main recording transfer exit
    condition.
  - Use empty string on hostname resolution failure


author: Justin Stephenson <jstephen@redhat.com> - 9-1
changelog:
  - Release v9
  - Add libutempter support
  - Require journal match filter
  - Add file reader match functionality
  - Restore cursor visibility and color attributes on tlog-play exit
  - Add "time" real clock timestamp message field
  - Various upstream CI improvements


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Fire SIGCHLD after utempter_add_record since it probably eats it.
  - Correct suse rpmbuild
  - Update debbuild for travis CI


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Release v12
  - Prevent infinite transfer loop on GDM login.
  - tlog-play: add journal namespace support.
  - tlitest: extend delay for limit-action delay test.


author: Justin Stephenson <jstephen@redhat.com> - 12.1
changelog:
  - Exit transfer loop when output fd is closed
  - Revert "Prevent infinite transfer loop on GDM login"


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.5-1
changelog:
  - New upstream release 2.5 - fixes rhbz #1449666
  - https://raw.githubusercontent.com/tmux/tmux/2.5/CHANGES


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.5-4
changelog:
  - Fixes rhbz #1476851 tmux bell-action other not working
  - Fixes rhbz #1476892 tmux update in F26 broke tmuxinator


author: Jindrich Novy <jnovy@redhat.com> - 0.0.99.2-1
changelog:
  - Update to 0.0.99.2
  - Make 'toolbox' create or fall back to a container if possible
  Resolves: #1914687
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 0.0.99.2-2
changelog:
  - Actually apply the patch to make 'toolbox' create or fall back to a
    container if possible
  - Support logging into a registry if necessary
  - Related: #1934415


author: Honggang Li <honli@redhat.com> - 4.2.10-25
changelog:
  - Rebase to latest Fedora release
  - Fix file conflicts in torque-devel multilib packages
  - Resolve: bz1853167


author: Michal Schmidt <mschmidt@redhat.com> - 1.3.9-1
changelog:
  - Upstream release 1.3.9.
  - Add fixes for build errors with OpenSSL 1.1.
  - Add fixes for NULL cipher context use in seal/unseal.
  - spec file modernization.


author: Javier Martinez Canillas <javierm@redhat.com> - 2.0.0-1
changelog:
  - Download the distributed tarball instead of the source code tarball
  - Update URLs to point to the new project location
  - Update to 2.0.0 release


author: Jerry Snitselaar <jsnitsel@redhat.com> - 3.1.1-4
changelog:
  - lib/tpm2_options: restore TCTI configuration environment variables
  - tpm2_getcap: restore tool output to print properties with TPM_PT prefix
  resolves: rhbz#1648001


author: Jerry Snitselaar <jsnitsel@redhat.com> - 4.1.1-2
changelog:
  - Fix ESYS_TR hierarchy transition.
  - Refactor fix_esys_hierarchies to return actual TSS2_RC return code.
  - tpm2_alg_util.c: fix a bug where the string rsa3072 wasn't being parsed.
  - tpm2_create.c: Fix an issue where userwithauth attr cleared if policy specified.
  - tpm2_hierarchycontrol: Fix bug where hierarchycontrol operation failed silently.
  - tpm2_nvdefine.c: Fix error reporting message.
  - tpm2_policyor: Fix silent failure for invalid/unspecified policy digest alg.
  resolves: rhbz#1854774


author: Jerry Snitselaar <jsnitsel@redhat.com> - 4.1.1-3
changelog:
  - Fix resource leak.
  - Fix to restrict policy digest size.
  - Fix incompatible pointer cast.
  - Fix error message in files_load_##name
  - Fix issue where execution couldn't reach function return.
  resolves: rhbz#1920821


author: Javier Martinez Canillas <javierm@redhat.com> - 1.4.0-1
changelog:
  - Update URLs to point to the new project location
  - Add README.md CHANGELOG.md to %files directive
  - Update to 1.4.0 release (RHBZ#1508870)


author: Yunying Sun <yunying.sun@intel.com> - 2.0.0-1
changelog:
  - Update to 2.0.0 release (RHBZ#1508870)
  - Remove patch file 60-tpm-udev.rules, use upstream tpm-udev.rules instead
  - Disable ESAPI to fix build errors caused by dependency to libgcrypt 1.6.0
  - Add scriptlet to fix Rpath errors
  - Update file installation paths and names accordingly


author: Yunying Sun <yunying.sun@intel.com> - 2.0.0-2
changelog:
  - Re-enable ESAPI since gcrypt dependency is not an issue for Fedora
  - Bump release version to 2.0.0-2


author: Jerry Snitselaar <jsnitsel@redhat.com> - 2.3.2-3
changelog:
  - Add tss user if doesn't exist.
  - Update exported symbols map for libtss2-mu
  - esys: Check object handle node before calling compute_session_value
  - esys: fix resource name calculation
  - esys: fix Esys_StartAuthSession called with optional params
  - esys: fix keysize of ECC curve TPM2_ECC_NISTP224
  - esys: fixup compute_encrypted_salt error handling
  - esys: use memcmp in byte array comparison
  - esys: zero out ctx->salt after startAuthSession_finish
  - mu: Remove use of VLAs for Marshalling TPML types
  - return proper error code on memory allocation failure
  - sys: match counter variable type for cmdAuthsArray->count
  - tcti-device: getPollHandles should allow num_handles query
  - tctildr: fix segmentation fault if name_conf is too big
  resolves: rhbz#1879071 rhbz#1855180


author: Jerry Snitselaar <jsnitsel@redhat.com> - 2.3.2-4
changelog:
  - Fix hmac calculation for tpm2_clear command.
  - Remove private implementation of strndup.
  resolves: rhbz#1920825 rhbz#1940861


author: Kamil Dudka <kdudka@redhat.com> - 1.7.0-11
changelog:
  - do not escape UTF-8 chars in file names by default in UTF-8 locale (#1480778)
  - modernize spec file (Group, BuildRoot, autosetup, clean, defattr)


author: Jerry Snitselaar <jsnitsel@redhat.com> - 0.3.15-1
changelog:
  - Rebase to 0.3.15
  - Fix CVE-2020-24330 CVE-2020-24331 CVE-2020-24332
  resolves: rhbz#1725782 rhbz#1877517 rhbz#1882402 rhbz#1882414


author: Merlin Mathesius <mmathesi@redhat.com> - 1027-1
changelog:
  - Version bump. Now supported for all architectures.
  - Generate man pages since they are no longer included in source archive.


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1234-5
changelog:
  - Move header files to ibmtss directory.
  - Check return value of TSS_Hash_Generate.
  resolves: rhbz#1636245


author: Wim Taymans <wtaymans@redhat.com> - 0.3.13-12
changelog:
  - Add explicit Requires for the -libs package.
  - Do NVR bump to move twolame-devel from buildroot to CRB
  - Resolves: rhbz#1843275


author: Jiri Kucera <jkucera@redhat.com> - 2.3-2
changelog:
  - wrudf: Fix parsing Volume Descriptor Sequence
  - wrudf: Exit on allocation failure
    Related: #1882531


author: Nils Philippsen <nils@redhat.com> - 1.2.1-3
changelog:
  - drop requirements on cmake, pkgconfig and rather own the directories for the
    files augmenting these packages


author: Andreas Schneider <asn@redhat.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2:
    * Added support for fork'ed and then exec'ed processes
    * Added support for Alpha


author: Andreas Schneider <asn@redhat.com> - 1.2.4-1
changelog:
  - Update to version 1.2.4
    * Added deadlock workaround for glibc < 2.24
    * Fixed a possible deadlock bug if uid_wrapper is turned off
    * Logging is always turned on now
    * Fixed a memory leak
    * Limited number of groups during fork+exec


author: Kamil Dudka <kdudka@redhat.com> - 2.17-5
changelog:
  - do not update currency.units from network during build
  - units_cur: validate rate data from server (#1598913)


author: Jakub Martisko <jamartis@redhat.com> - 6.0-38
changelog:
  - Fix CVE-2018-1000035 - heap based buffer overflow when opening
    password protected files.
    Resolves: 1537043


author: Jakub Martisko <jamartis@redhat.com> - 6.0-40
changelog:
  - fix several possibly unterminated strings
    When copying to OEM_CP and ISO_CP strings, the string could end unterminated
    (stncpy does not append '\0').
  - Related: #1602721


author: Richard Hughes <rhughes@redhat.com> - 0.99.5-1
changelog:
  - New upstream release
  - Add BatteryLevel property for devices with a finite number of power levels
  - Add support for pausing and resuming of the daemon poll
  - Do not spin in a loop when /proc/timer_stats cannot be written
  - Fix reading and writing the keyboard brightness level
  - Get a serial number for device batteries
  - Refresh devices after waking up from sleep
  - Lower initial power usage when iDevice isn't accessible


author: Richard Hughes <rhughes@redhat.com> - 0.99.6-1
changelog:
  - New upstream release
  - Detect joysticks as gaming input devices
  - Fix crash when '@' is present in the device name
  - Grab the model name from device if unavailable from battery


author: Bastien Nocera <bnocera@redhat.com> - 0.99.7-1
changelog:
  + upower-0.99.7-1
  - Update to 0.99.7
  - Add Bluetooth LE battery support
  - Fix critical action after resume from hibernate


author: Lubomir Rintel <lkundrak@v3.sk> - 2.4.0-2
changelog:
  - Add the previously omitted systemd service file (rh #1352055)
  - Fix crash with invalid arguments (rh #1358472)


author: Attila Lakatos <alakatos@redhat.com> - 0.7.8-4
changelog:
  - RHEL 8.3.0 ERRATUM
  - Spec file clean up
  - Rebase to 0.7.8
  Resolves: rhbz#1738590
  - Added selinux subpackage
  Resolves: rhbz#1683567
  - Added notifier subpackage
  - Installing /etc/usbguard/rules.d/
  Resolves: rhbz#1667395
  - Fixed sigwaitinfo handling
  Resolves: rhbz#1835210


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-5
changelog:
  - RHEL 8.3.0 ERRATUM
  - Use old-fasioned forking style in unit file
  Resolves: rhbz#1846885
  - Allow usbguard to read /proc/cpuinfo
  Resolves: rhbz#1847870
  - Removed notifier's Requires for usbguard-devel
  Resolves: rhbz#1667395
  - Allow usbguard to read /dev/urandom
  Resolves: rhbz#1848618


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-6
changelog:
  - RHEL 8.3.0 ERRATUM
  - Removed execstack from .spec
  - Removed AuthorizedDefault=wired from the usbguard
  Resolves: rhbz#1852539
  - Missing error message on bad configuration
  Resolves: rhbz#1857299
  - /etc/usbguard/usbguard-daemon.conf file does not contain all default options
  Resolves: rhbz#1862907


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-1
changelog:
  - Rebase to 1.0.0
  Resolves: rhbz#1887448
  - Filtering rules by attribute
  Resolves: rhbz#1873953
  - Change device policy of multiple devices using rule instead of ID
  Resolves: rhbz#1852568


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-4
changelog:
  - add execstack to spec
  - remove IPAddressDeny from usbguard service
  Resolves: rhbz#1929364
  - fix file conflict when installing usbguard on rhel
  Resolves: rhbz#1963271
  - fix IPC access control files override
  Resolves: rhbz#2004511
  - validate ACL permission existence
  Resolves: rhbz#2005020
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2000000


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-5
changelog:
  - fix DSP module definition in spec file
  Resolves: rhbz#2014441
  - add execstack to spec
  - remove IPAddressDeny from usbguard service
  Resolves: rhbz#1929364
  - fix file conflict when installing usbguard on rhel
  Resolves: rhbz#1963271
  - fix IPC access control files override
  Resolves: rhbz#2004511
  - validate ACL permission existence
  Resolves: rhbz#2005020
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2000000


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-7
changelog:
  - change usbguard icon injection
  - fix DSP module definition in spec file
  Resolves: rhbz#2014441
  - add execstack to spec
  - remove IPAddressDeny from usbguard service
  Resolves: rhbz#1929364
  - fix file conflict when installing usbguard on rhel
  Resolves: rhbz#1963271
  - fix IPC access control files override
  Resolves: rhbz#2004511
  - validate ACL permission existence
  Resolves: rhbz#2005020
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2000000


author: Bastien Nocera <bnocera@redhat.com> - 1.1.0-13
changelog:
  + usbmuxd-1.1.0-13
  - Fix usbmuxd not starting up a second time, and properties being lost
    with kernel >= 4.12


author: Miloslav Trmač <mitr@redhat.com> - 1.111-10
changelog:
  - Fix a FBFS with  -Werror=format-security
    Resolves #1444750
  - Fix inconsistent dates in %changelog


author: Jiri Kucera <jkucera@redhat.com> - 1.112-2
changelog:
  - Dropped need to run autotools
  - <sys/sysmacros.h> must be now included manually
    Resolves #1611752
  - Fixed bad FSF address


author: Jiri Kucera <jkucera@redhat.com> - 1.113-2
changelog:
  - Fix typo in pam-panel-icon manpage
    Do not use deprecated selinux API
    Do not use fexecve
    Resolves: #1775931


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.10.1-3
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz #1853168)
  - Added CI gating tests (bz #1682555)
  - Resolves: bz #1682555, #1853168


author: James Antill <james@fedoraproject.org> - 1.0.4-20
changelog:
  - Move doc/ustr-devel-<version> to doc/ustr-devel. BZ 993940.
  - Use -fgnu89-inline workaround for gcc5.


author: Matias Kreder <mkreder@gmail.com> - 1.6.2-34
changelog:
  - Removed uuid-php subpackage since php(api) is no longer provided on
  - PHP 7 and there is a replacement (pecl/uuid extension)


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-5
changelog:
  - Add valgrind-3.17.0-s390-prep.patch
  - Add valgrind-3.17.0-s390-z15.patch
  - Add valgrind-3.17.0-s390-z13-vec-fix.patch


author: Mark Wielaard <mjw@redhat.com> - 3.18.1-5
changelog:
  - Add valgrind-3.18.1-dhat-tests-copy.patch
  - Add valgrind-3.18.1-s390x-EXRL.patch
  - Add valgrind-3.18.1-ppc64-lxsibzx-lxsihzx.patch
  - Add valgrind-3.18.1-ppc-pstq.patch
  - Add valgrind-3.18.1-ppc-pstq-tests.patch
  - Add valgrind-3.18.1-gdbserver_tests-hwcap.patch
  - Add valgrind-3.18.1-rust-v0-demangle.patch
  - Add valgrind-3.18.1-arm64-doubleword-cas.patch
  - Add valgrind-3.18.1-arm64-ldaxp-stlxp.patch
  - Add valgrind-3.18.1-arm64-atomic-align.patch
  - Add valgrind-3.18.1-amd64-more-spec-rules.patch
  - Add valgrind-3.18.1-condvar.patch
  - Add valgrind-3.18.1-demangle-namespace.patch


author: Lubos Uhliarik <luhliari@redhat.com> - 0.15.0-1
changelog:
  - updated to newer version (0.15.0)
  - Drop EPEL and older Fedora releases support
  - Drop broken manual ABI dependency to Varnish
  - Drop commented out references to past patches
  - Verbose test suite
  - Simplified configure step
  - Dependencies cleanup


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.102-11
changelog:
  - Added bash command completion for the vdo command.
    - Resolves: rhbz#1540287
  - Modified the vdo script's list command to not display VDO devices which
    were not created with the vdo command (i.e. via LVM or using raw dm
    commands).
    - Resolves: rhbz#1686091
  - Modified vdostats to continue to work on VDO devices which were not
    created with the vdo script.
    - Resolves: rhbz#1686091
  - Modified vdo script to always close the UDS index when disabling
    deduplication on a running VDO device.
    - Resolves: rhbz#1643291


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.134-11
changelog:
  - Added UUID filtering of underlying devices when running vdo create with
    the --force flag as this failed when run on certain PVs.
  - Resolves: rhbz#1710017


author: - Andy Walsh <awalsh@redhat.com> - 6.2.2.18-11
changelog:
  - Added the ability to modify the UUID of a VDO device.
  - Resolves: rhbz#1713749
  - Added an import command to the vdo script to allow management of an
    existing VDO device which is not already in the vdo config file.
  - Resolves: rhbz#1737619
  - Modified the vdo script to warn the user when starting or stopping a VDO
    device if the device is already in the desired state.
  - Resolves: rhbz#1738651


author: - Andy Walsh <awalsh@redhat.com> - 6.2.2.24-11
changelog:
  - Began preparations for releasing more VDO analysis and debugging tools.
  - Relates: rhbz#1687996
  - Really added the ability to modify the UUID of a VDO device (the previous
    version omitted some of the files necessary for this feature).
  - Resolves: rhbz#1713749


author: - Andy Walsh <awalsh@redhat.com> - 6.2.2.33-12
changelog:
  - Fixed bug in the import command of the vdo script which would fail if
    there were no active dm devices.
  - Resolves: rhbz#1767491
  - Added a version command to the vdo script to report the script version.
  - Resolves: rhbz#1730429
  - Added version options to vdo utilities which did not have one.
  - Resolves: rhbz#1730429
  - Removed deprecated vdoprepareupgrade utility.
  - Resolves: rhbz#1774700


author: - Andy Walsh <awalsh@redhat.com> - 6.2.2.117-13
changelog:
  - Improved man pages and help text for vdo script and vdo utilities.
  - Resolves: rhbz#1505748
  - Resolves: rhbz#1636043
  - Resolves: rhbz#1746539
  - Modified vdoformat to display the maximum VDO size based on the
    configured slab size when formatting a volume. Modified vdo script to
    also display this output when creating a new VDO.
  - Resolves: rhbz#1659173


author: - Andy Walsh <awalsh@redhat.com> - 6.2.3.91-14
changelog:
  - Removed unused UDS bio statistics
  - Resolves: rhbz#1827762
  - Added a summary mode to vdoaudit and made this mode the default. Also
    added histograms.
  - Resolves: rhbz#1687996
  - Modified vdostats to accept short (one character) options.
  - Resolves: rhbz#1787472
  - Modified vdo script to use lsblk to identify LVM created VDO volumes.
  - Resolves: rhbz#1825344
  - Modified vdo script to avoid unnecessary config file updates when
    removing VDO volumes.
  - Resolves: rhbz#1804440
  - Fixed a cast which caused a Coverity complaint.
  - Resolves: rhbz#1827763
  - Fixed a cut&paste error in the vdosetuuid man page.
  - Resolves: rhbz#1643297
  - Fixed documentation of logical threads.
  - Resolves: rhbz#1827764
  - Began creation of a package of binaries for investigating VDO issues.
  - Resolves: rhbz#1643297
  - Updated VDO to use udev/systemd rules for startup.
  - Resolves: rhbz#1837759
  - Modified VDO volume creation to use libblkid instead of pvcreate to
    determine whether the underlying storage is already in use. Moved
    these checks from the vdo script into the vdoformat utility.
  - Resolves: rhbz#1771698
  - Modified the vdo status command to treat a running vdo volume is
    authoratative over the config file.
  - Resolves: rhbz#1790983
  - Added a new utility, vdoregenerategeometry, which can be used to
    recover a VDO whose initial blocks have been overwritten
    accidentaly.
  - Resolves: rhbz#1773421


author: - Andy Walsh <awalsh@redhat.com> - 6.2.3.100-14
changelog:
  - Modified vdoformat to display the minimum required physical size for the
    specified parameters if the format fails due to insufficient space.
  - Resolves: rhbz#1683945
  - Modified the vdo status command to report values from running devices
    rather than the config file when the devices are running.
  - Resolves: rhbz#1790983
  - Actually made the new summary mode of vdoaudit the default.
  - Resolves: rhbz#1687996
  - Fixed a bug in vdodumpmetadata and vdodumpblockmap which could result in
    the wrong block(s) being dumped.
  - Resolves: rhbz#1643297


author: - Andy Walsh <awalsh@redhat.com> - 6.2.4.14-14
changelog:
  - Added --pending option to the vdo status command to indicate
    configuration options which have been modified but will not take
    effect until the next device start.
  - Resolves: rhbz#1838314


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.11-14
changelog:
  - Introduced new memory size parameter values for UDS indexes which have
    been converted from vdo script management to LVM.
  - Related: rhbz1928284
  - Modified vdo script to fail if the same option is supplied multiple
    times.
  - Resolves: rhbz#1944087
  - Fixed permissions on the vdo script's lock directory.
  - Resolves: rhbz#1952105


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.21-14
changelog:
  - Added a tool for converting a VDO volume from the vdo management script
    to LVM. The tool can be invoked from the new vdo convert command.
  - Related: rhbz#1928284
  - Fixed a (relatively harmless) buffer overflow in vdo userspace tools.
  - Resolves: rhbz#1927938


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.41-14
changelog:
  - Integrated the vdo to lvm conversion tool into the vdo management script
    and modified the tool itself to correctly convert the UDS index so that
    dedupe information is not lost by conversion.
  - Resolves: rhbz#1928284


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.62-14
changelog:
  - Removed extraneous fields from the super block of a converted index.
  - Resolves: rhbz#1965546
  - Added a parameter to the lvm conversion tool to specify the amount of
    space to free up.
  - Resolves: rhbz#1966827
  - Fixed calculation of the number of expiring chapters in a converted
    index.
  - Resolves: rhbz#1975546


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.74-14
changelog:
  - Renamed vdo2LVM to vdopreparelvm and moved its installation location to
    /usr/libexec so that it is not in common default paths as this utility is
    intended to be called from LVM, not directly by users.
  - Related: rhbz#1986930


author: - Andy Walsh <awalsh@redhat.com> - 6.2.6.3-14
changelog:
  - Added a check to vdopreparelvm to determine whether it has already been
    converted.
  - Resolves: rhbz#2017843


author: - Andy Walsh <awalsh@redhat.com> - 6.2.6.7-14
changelog:
  - Fixed bugs in the vdopreparelvm check to determine whether a device has
    already been converted.
  - Resolves: rhbz#2017843
  - Fixed an issue in the vdo-by-dev tool which could result in a failure to
    start vdo devices when some devices in the vdo config file do not exist.
  - Resolves: rhbz#2022154


author: - Andy Walsh <awalsh@redhat.com> - 6.2.6.14-14
changelog:
  - Added a tool to make LVMVDO pools read/write so that support and
    debugging tools may access them.
  - Resolves: rhbz#1999640


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-17
changelog:
  - Remove ldconfig
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/SU3LJVDZ7LUSJGZR5MS72BMRAFP3PQQL/


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-8
changelog:
  - 1640919 - augroup fedora, test case failure: /CoreOS/vim/Regression/bz241308-use-augroup-for-rh-autocmds


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16
changelog:
  - 2004974 - CVE-2021-3796 vim: use-after-free in nv_replace() in normal.c [rhel-8.5.0]
  - 2004891 - CVE-2021-3778 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c [rhel-8.5.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16.3
changelog:
  - 2028341 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-8.6.0]
  - 2028430 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-8.6.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16.4
changelog:
  - CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
  - CVE-2021-4192 vim: vulnerable to Use After Free


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16.5
changelog:
  - CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
  - CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c


author: Tomas Korbar <tkorbar@redhat.com> - 2:8.0.1763-16.8
changelog:
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
  - Resolves: rhbz#2049403


author: Tomas Korbar <tkorbar@redhat.com> - 2:8.0.1763-16.9
changelog:
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
  - Improve fix
  - Resolves: rhbz#2049403


author: Tomas Korbar <tkorbar@redhat.com> - 2:8.0.1763-16.11
changelog:
  - CVE-2022-0413 vim: use after free in src/ex_cmds.c
  - Fix specfile problems
  - Resolves: rhbz#2048525


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-18
changelog:
  - fix test suite after fix for CVE-2022-0318
  - CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-18
changelog:
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
  - CVE-2022-0413 vim: use after free in src/ex_cmds.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-19.3
changelog:
  - CVE-2022-1785 vim: Out-of-bounds Write
  - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
  - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-22
changelog:
  - Rebuild due to new version of FreeRDP
  - Fix an issue when RDP connection shows just black screen
  - Resolves: #1839744


author: Pino Toscano <ptoscano@redhat.com> - 1:1.42.0-6
changelog:
  - Improve the documentation of --keys-from-stdin
    resolves: rhbz#1858765
  - Check that --mac :ip: parameters are sensible
    resolves: rhbz#1858775
  - -i libvirt: read password file outside libvirt auth callback
    resolves: rhbz#1869454


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-7
changelog:
  - Tell virt-v2v where overlay files must be placed
  - Allow conversion to UEFI openstack
    resolves: rhbz#1820282 rhbz#1872094


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-11
changelog:
  - v2v: windows: Allow qxldod.inf as synonym for qxl.inf
    resolves: rhbz#1926102
  - v2v: Increase required free space in Windows to 100 MB
    resolves: rhbz#1949147
  - docs: Document how to remove "Out of HTTP sessions" limit
  - v2v: Disable readahead for VMware curl sources too
    resolves: rhbz#1848862
  - v2v: Allow output to block devices
    resolves: rhbz#1868690
  - docs: -o openstack: Clarify name of file containing OpenStack auth
    resolves: rhbz#1871754
  - docs: UEFI guest conversion to -o openstack is supported
    resolves: rhbz#1872100
  - v2v: Turn pnp_wait.exe warning into a debug message
    resolves: rhbz#1903960
  - v2v: windows: Fix schtasks /SD parameter
    resolves: rhbz#1895323


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-13
changelog:
  - docs: Fix version of virt-v2v which added UEFI for OpenStack
    related: rhbz#1872100
  - v2v: Increase Linux minimum root filesystem to 100 MB
    resolves: rhbz#1764569


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-17
changelog:
  - Correct regexps used to fix schtasks command
  - Fix backing file specified without backing format
    resolves: rhbz#2023279, rhbz#2025769


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-19
changelog:
  - Fix assertion failure when parsing OVA dir with trailing slash
    resolves: rhbz#2028823
  - For -o rhv-upload wait for VM creation task
    resolves: rhbz#1985827


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 9.0-1
changelog:
  - Rebase to latest upstream
    Resolves: rhbz#1837489
  - Do not filter out DATA storage domains
    Resolves: rhbz#1835640


author: Uri Lublin <uril@redhat.com> - 9.0-5
changelog:
  - More specific key accelerator description for cursor release
    Resolves: rhbz#1548371
  - Report detailed error when file transfer fails
    Resolves: rhbz#1753563
  - Update copyright year in "about ui"
    Resolves: rhbz#1848267
  - Show an error dialog upon vnc-error
    Resolves: rhbz#1448151
  - Fix warning by Coverity
    Resolves: rhbz#1876719


author: Richard W.M. Jones <rjones@redhat.com> - 1.18-1
changelog:
  - New upstream version 1.18.
  - Update RPM description section with complete list of supported guests.
  - If ‘make check’ fails, dump ‘test-suite.log’.


author: Richard W.M. Jones <rjones@redhat.com> - 1.18-8
changelog:
  - Add support for Nutanix AHV
    resolves: rhbz#1756381
  - Add all patches since 1.18 was released, up to 1.20 and beyond.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.9-16
changelog:
  - Python 2 binary package renamed to python2-volume_key
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Jiri Kucera <jkucera@redhat.com> - 0.3.11-4
changelog:
  - fixed License
  - Requires: /usr/bin/gpg2 in libs subpackage
  - Added support for opening all types of LUKS devices
    Resolves: #1626974


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-25
changelog:
  - Add config option log_die allowing to pass error messages to syslog
  - Add config option bind_retries allowing to change the max number
  - of attempts to find a listening port for the PASV/EPSV command
  - Resolves: rhbz#1318198


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-32
changelog:
  - Removed a hint about the ftp_home_dir SELinux boolean from the config file
  - Resolves: rhbz#1623424


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-33
changelog:
  - Enable support for wide-character strings in logs
  - Replace unprintables with HEX code, not question marks
  - Resolves: rhbz#1947900


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.30.2-2
changelog:
  - Try to fix coverity build by disabling docs (thanks to Kamil Dudka <kdudka@redhat.com>!)
  - Related: #1883304


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.36.1-1
changelog:
  - Update to 2.36.1
    Related: #2061994
  - Resolves: #2075492
  - Resolves: #2075494
  - Resolves: #2075496


author: Brian C. Lane <bcl@redhat.com> - 35.3-1
changelog:
  - New release: 35.3 (bcl)
  - spec: Adjust build methods for RHEL 8 (bcl)
  - github: Run build-in-podman to test building package (bcl)
  - spec: Use v2 module (bcl)
  - Makefile: Use v2 module (bcl)
  - Makefile: Add a build-in-podman target (bcl)
  - tests: Add JSON and error result testing to status (bcl)
  - tests: Add JSON and error result testing to sources (bcl)
  - tests: Add JSON and error result testing to projects (bcl)
  - tests: Add JSON and error result testing to modules (bcl)
  - tests: Add JSON and error result testing to distros (bcl)
  - tests: Add JSON and error result testing to compose (bcl)
  - tests: Add JSON and error result testing to blueprints (bcl)
  - test: Fix test client setup and output capture code (bcl)
  - test: Close output capture in printwrap_test (bcl)
  - test: reset the root flags on every ExecuteTest call (bcl)
  - status: Use ExecutionErrors for API errors (bcl)
  - sources: Use ExecutionErrors for API errors (bcl)
  - projects: Use ExecutionErrors for API errors (bcl)
  - modules: Use ExecutionErrors for API errors (bcl)
  - distros: Use ExecutionErrors for API errors (bcl)
  - compose: Use ExecutionErrors for API errors (bcl)
  - blueprints: Use ExecutionErrors for API errors (bcl)
  - composer-cli: Turn off normal command Stdout when --json is used (bcl)
  - weldr: Fix Stringer interface on API messages (bcl)
  - weldr: Clean up error message return code (bcl)
  - weldr: Move Unmarshal error to error position (bcl)
  - root: Add a helper function to print a list of errors (bcl)
  - Use GetFilePath for ComposeImage (bcl)
  - Use GetFilePath for ComposeResults (bcl)
  - Use GetFilePath for ComposerMetadata (bcl)
  - Use GetFilePath for ComposeLogs (bcl)
  - weldr: Add GetFilePath to download a file to a path (bcl)
  - Creating v2 module for breaking API changes (bcl)
  - Makefile: Add update-mods target (bcl)
  - vendor: Update the modules and vendor directory (bcl)
  - Bump go version to 1.15 (bcl)
  - Limit dependabot to 1 PR (bcl)
  - Enable Dependabot service (atodorov)
  - tests: Fix integration tests (bcl)


author: Brian C. Lane <bcl@redhat.com> - 35.5-1
changelog:
  - New release: 35.5 (bcl)
    Resolves: rhbz#2052604
  - docs: Explain how to undo blueprints delete (bcl)
  - test: server status no longer returns devel (bcl)
  - Use GetFrozenBlueprintsTOML for blueprints freeze save (bcl)
  - Add a test for float uid/gid in frozen blueprint (bcl)
  - Use GetBlueprintsTOML for blueprints save (bcl)
  - test: Add a test for float uid/gid in saved blueprint (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 (49699333+dependabot[bot])
  - tests: trigger on push to main (jrusz)
  - build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - ci: add keystore for sonarqube (jrusz)
  - spec: Switch to using %gobuild macro on Fedora (bcl)
  - ci: change workflow name (jrusz)
  - ci: add gitlab-ci and sonarqube (jrusz)
  - doc: fix example links from the README (tdecacqu)
  - build(deps): bump actions/checkout from 2.3.4 to 2.4.0 (49699333+dependabot[bot])
  - ci: Enable Coverity Scan tool (atodorov)


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 2.21-8
changelog:
  - Fix invalid [ ... ] syntax which results in complaints by zsh.
    https://bugzilla.redhat.com/show_bug.cgi?id=1546221
  - Remove pointless Group tag, buildroot cleaning and %defattr.


author: Than Ngo <than@redhat.com> - 2.21-17
changelog:
  - Resolves: #2025709, check shell correctly 
  - Resolves: #2009547, which treats function contents as aliases when parsing ksh


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-7
changelog:
  - Resolves: #1642919 - CVE-2018-12086, CVE-2018-18225, CVE-2018-18226, CVE-2018-18227
  - Resolves: #1656342 - CVE-2018-19623
  - Resolves: #1657634 - CVE-2018-19625
  - Resolves: #1657211 - CVE-2018-19626
  - Resolves: #1657184 - CVE-2018-19627
  - Resolves: #1657190 - CVE-2018-19628
  - fixes CVE-2018-19622, CVE-2018-19624


author: Davide Caratti <dcaratti@redhat.com> - 1:2.9-2
changelog:
  - Fix AP mode PMF disconnection protection bypass (CVE-2019-16275)
  - Fix NULL dereference in d-bus handler when P2P control interface is removed (rh #1752780)
  - enable WIFI_DISPLAY (rh #1755941)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.9-3
changelog:
  - fix p2p_listen unexpectedly stopped after 5 seconds (rh #1693684)
  - allow changing 'bridge' via D-Bus (rh #1888050)
  - expose OWE configurability via D-Bus (rh #1888718)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.9-5
changelog:
  - P2P: Fix a corner case in peer addition based on PD Request (CVE-2021-27803)
  - Fix buffer overflow when processing P2P group information (CVE-2021-0326)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-15
changelog:
  - Disable build of wpa_gui (rh #1542234)
  - Fix build issue with latest kernel headers (rh #1582604)
  - Disable WEXT (rh #1537143)
  - Fix memory leak when macsec MKA/PSK is used (rh #1582511)
  - Fix authentication failure when the MAC is updated externally (rh #1582508)
  - Let the kernel discard EAPOL if packet type is PACKET_OTHERHOST (rh #1582501)


author: Tomas Popela <tpopela@redhat.com> - 1.6.0-5
changelog:
  - Drop PipeWire 0.2 requirement as Chrom[e|ium] 90 now depends on PipeWire 0.3
  - Resolves: rhbz#1949809


author: Jonas Ådahl <jadahl@redhat.com> - 1.6.0-1
changelog:
  - Rebase to 1.6.0 (#1837413)
  - Bump supported Mutter screen cast API version (#1837413)
  - Backport bugfix (#1837413)


author: Debarshi Ray <rishi@fedoraproject.org> - 1.8.0-1
changelog:
  - Rebase to 1.8.0
  - Remove unnecessary non-arch-specific explicit library Requires
  Resolves: #2062432


author: Eric Sandeen <sandeen@redhat.com> 5.0.0-1
changelog:
  - New upstream version (#1712147)
  - mkfs.xfs: validate extent size hint parameters (#1683007)
  - mkfs.xfs: null-terminate symlinks created via protofile (#1640503)
  - xfs_repair: allow '/' in attribute names (#1667354)
  - xfs_info: allow device name as parameter (#1679840)
  - xfs_quota: fix project inheritance flag handling (#1664105)
  - xfs_metadump: handle symlinks correctly (#1693074)
  - xfs_db: fix finobt record decoding with sparse inodes (#1690245)


author: Eric Sandeen <sandeen@redhat.com> 5.0.0-2
changelog:
  - mkfs.xfs: validate log stripe unit alignment (#1632596)
  - xfs_growfs: allow mounted device node as argument (#1765217)


author: Bill O'Donnell <billodo@redhat.com> 5.0.0-6
changelog:
  - xfs_repair: improve AG btree ptr validation (libxfs_verify_agbno) (#1887288)
  - mkfs.xfs: fix ASSERT on too-small device with stripe geometry (#1887401)
  - xfs_repair: fix rebuilding btree block less than minrecs (#1759452)


author: Bill O'Donnell <billodo@redhat.com> 5.0.0-7
changelog:
  - xfs_quota: document how the default quota is stored (#1850188)
  - xfs_db: skip type change if type_f unchanged (#1867474)


author: Eric Sandeen <sandeen@redhat.com> 4.19.0-1
changelog:
  - New upstream release (#1652248)
  - Note reflink default in mkfs.xfs manpage (#1641698)
  - Fix xfs_db sign extension in agi freecount (#1640090)
  - Fix xfs_repair hang on large filesystem (#1630674)


author: Rob Crittenden <rcritten@redhat.com> - 1.51.0-7
changelog:
  - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827)
    (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602)
  - Prevent integer overflow on m_groupSize in doProlog
    (CVE-2021-46143) (#2058560)


author: Ondrej Vasik <ovasik@redhat.com> 0.0.27-1
changelog:
  - New version 0.0.27
  - remove several bashisms in scripts
  - add new option --profile for preprocessing documents
    with profiling stylesheet
  - fix several potential crashes in xmlif (found by static analysis)


author: Adam Jackson <ajax@redhat.com> - 7.7-21
changelog:
  - oclock 1.0.4
  - xeyes 1.1.2
  - xfontsel 1.0.6
  - xload 1.1.3
  - xmessage 1.0.5
  - xpr 1.0.5
  - xwd 1.0.7
  - xwud 1.0.5


author: Michel Dänzer <mdaenzer@redhat.com> - 19.1.0-1
changelog:
  - ati 19.1.0 (#1728818)
  - Drop patch 0001-Don-t-set-up-black-scanout-buffer-if-LeaveVT-is-call.patch,
    merged upstream
  - Add patches 0001-Handle-NULL-fb_ptr-in-pixmap_get_fb.patch &
    0002-Don-t-crash-X-server-if-GPU-acceleration-is-not-avai.patch from
    upstream Git master, fixing crashes with ShadowFB


author: Hans de Goede <hdegoede@redhat.com> - 1.0.12-4
changelog:
  - Fix the crtc not being turned off, causing the dgpu to not suspend,
    after using a dgpu attached output


author: Christophe Fergeau <cfergeau@redhat.com> - 0.1.5-7
changelog:
  - Add upstream patches for Python 3 support
  - Validate RANDR output property atoms
  - Add patch fixing crash with multiple QXL devices
  - This syncs the RHEL branch with both current rawhide and RHEL 7.6


author: Adam Jackson <ajax@redhat.com> - 2.4.0-3
changelog:
  - Restore no-virt-shadowfb patch
  - Refuse to run if there's a UEFI framebuffer; use fbdev or a native driver


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-3
changelog:
  - Downgrade modesetting "glamor initialization failed" X_ERROR → X_INFO
    Resolves: #1724573
  - Xwayland / Present leak fixes for #1728684


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-5
changelog:
  - xwayland: Hold a pixmap reference in struct xwl_present_event
    Related: #1728684
  - glamor: Fix glamor_poly_fill_rect_gl xRectangle::width/height handling
    Resolves: #1740250


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-8
changelog:
  - CVE fixes for: CVE-2020-14345 (#1872391), CVE-2020-14346 (#1872395),
    CVE-2020-14361 (#1872402), CVE-2020-14362 (#1872409)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-4
changelog:
  - CVE fix for: CVE-2021-4008 (#2030162), CVE-2021-4009 (#2030172),
    CVE-2021-4010 (#2030175), CVE-2021-4011 (#2030181)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.0.99.902-1
changelog:
  - xwayland 21.0.99.902
  - Remove xdmcp, udev, udev_kms build options
  - Stop overriding the vendor name, same as xorg-x11-server


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-2
changelog:
  - CVE fix for: CVE-2021-4008 (#2038066), CVE-2021-4009 (#2038068),
    CVE-2021-4010 (#2038071), CVE-2021-4011 (#2038073)


author: Adam Jackson <ajax@redhat.com> - 7.7-25
changelog:
  - iceauth 1.0.8
  - xkill 1.0.5
  - xrdb 1.1.1
  - xrefresh 1.0.6
  - xset 1.2.4
  - xsetroot 1.1.2
  - HTTPS URLs


author: Adam Jackson <ajax@redhat.com> - 1.0.9-12
changelog:
  - Nerf the python-related BuildRequires. They're only needed for 'make check',
    and cmdtest is not yet a python3 package.


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-12
changelog:
  - Drop 0001-startx-Pass-nolisten-tcp-by-default.patch this is the
    server default now
  - Check for SSH_AUTH_SOCK not SSH_AGENT in xinitrc-common (rhbz#1352339)


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-13
changelog:
  - Check for all 3 of SSH_AGENT, SSH_AGENT_PID and SSH_AUTH_SOCK to fix
    a regression introduced by the previous fix (rhbz#1352339)


author: Adam Jackson <ajax@redhat.com> - 7.7-24
changelog:
  - Make -devel Require the base package, so the pc file will point to an
    xkbcomp that actually exists.


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.999-28
changelog:
  - remove dependency on ImageMagick and netpbm-progs, because they were needed for
    tests during %build phase, which were removed in commit SHA 0595c15da29


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.3-1
changelog:
  - rebase to stable 5.2.3 per release notes:
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00285.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.4-1
changelog:
  - rebase to 5.2.4 (rhbz#1574039), per release notes:
    https://www.mail-archive.com/xz-devel@tukaani.org/msg00295.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.4-2
changelog:
  - drop ppc64p7 hack, per fedora devel list discussion:
    https://lists.fedoraproject.org/archives/list/
    devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
  - don't explicitly set _FILE_OFFSET_BITS, package uses AC_SYS_LARGEFILE


author: Tomas Popela <tpopela@redhat.com> - 2:3.28.1-3
changelog:
  - Add the Quit entry to the app menu
  - Handle Ctrl+Q shortcut for quitting the application
  - Resolves: rhbz#1638876


author: Matej Mužila <mmuzila@redhat.com> - 3:2.4-5
changelog:
  - Add "Wants" dependency on network-online.target
  - Remove "After" dependency on NetworkManager-wait-online.service


author: Jakub Martisko <jamartis@redhat.com> - 3.0-22
changelog:
  - Add missing linker flags
  - Port the configure patch from unzip that allows linker flags configuration
    from the spec file
  - Related: #1624188


author: Jakub Martisko <jamartis@redhat.com> - 3.0-23
changelog:
  - Set the ziperr function as noreturn
  - Fix email in the previous chnagelog entry
  - Related: #1602741


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-11
changelog:
  - IBM Z hardware-accelerated deflate for s390x architectures
  - IBM CRC32 optimalization for POWER 8+ architectures
  - fixed firefox crash due to zlib (#1741266)
  - added test for crc32


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-13
changelog:
  - Added -DDFLTCC parameter to configure to enable 
  - Z hardware-accelerated deflate for s390x architectures (#1659433)


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-16
changelog:
  - Permit a deflateParams() parameter change
  - Another fix for Z hardware-accelerated deflate for s390x architectures
  - according to previous change by upstream


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-17
changelog:
  - Fixed DFLTCC compression level switching issues (#1875492)
  - Enabled HW compression for compression levels 1 through 6 (#1847438)
  - Fixed inflateSyncPoint() bad return value on z15 (#1888930)


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-19
changelog:
  - Apply IBM patch for compressBound() function
  - Source from https://github.com/madler/zlib/issues/410#issuecomment-947212824
  - Resolves: #2056900


author: Kamil Dudka <kdudka@redhat.com> - 5.4.2-7
changelog:
  - avoid crash when copying empty hash table (CVE-2018-7549)
  - avoid NULL dereference when using ${(PA)...} on an empty array (CVE-2018-7548)


author: Kamil Dudka <kdudka@redhat.com> - 5.5-1
changelog:
  - update to latest upstream release, which fixes the following vulnerabilities:
      CVE-2018-1100 - stack-based buffer overflow in utils.c:checkmailpath()
      CVE-2018-1083 - stack-based buffer overflow in compctl.c:gen_matches_files()
      CVE-2018-1071 - stack-based buffer overflow in exec.c:hashcmd()


author: Jakub Martisko <jamartis@redhat.com> - 0.13.68-3
changelog:
  - Fix CVEs 2018-7725, 2018-7726, 2018-7727, 2018-6484, 2018-6869 
  - Resolves: 1555082
  - Resolves: 1545818


author: Jakub Martisko <jamartis@redhat.com> - 0.13.68-6
changelog:
  - Fix multilib regression by adding a 32bit version of the multilib patch
  - Properly bump the release number in the previous changelog message
  - Resolves: #1638337


