# changelog

author: Martin Kutlak <mkutlak@redhat.com> - 2.10.9-9
changelog:
  - spec: turn on --enable-native-unwinder aarch64
  - spec: enable addon-vmcore on aarch64
  - daemon: Fix double closed fd race condition
  - dbus: Add configuration for Python3
  - Add autogen.sh
  - Resolves: #1646569, #1651676, #1650619, #1650622, #1652676


author: Martin Kutlak <mkutlak@redhat.com> - 2.10.9-10
changelog:
  - spec: Add-explicit-package-version-requirement-of-abrt-libs
  - cli: get list of possible workflows for problem_data_t
  - cli: mark the suggestion text for translation
  - cli list: show a hint about creating a case in RHTS
  Resolves: #1649753


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.8-1
changelog:
  - Respect changesok password policy for root password (mkolman)
    Resolves: rhbz#1584145
  - Fix default value for pwpolicy emptyok (mkolman)
    Resolves: rhbz#1664704


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.9-1
changelog:
  - Adjust the exclude arguments for livepayloads (bcl)
    Related: rhbz#1684542
  - Recreate the BLS entries when using liveimg (bcl)
    Resolves: rhbz#1684542
  - Cache the liveimg tar kernel list (bcl)
    Related: rhbz#1684542
  - Add common function for creating rescue images (bcl)
    Related: rhbz#1684542
  - Re-generate BLS loader file snippets on live installs (awilliam)
    Related: rhbz#1684542


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.10-1
changelog:
  - Do not try to mount cdrom source also if it has been mounted in dracut.
    (rvykydal)
    Resolves: rhbz#1733507


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.11-1
changelog:
  - Fix noverifyssl when downloading .treeinfo file (jkonecny)
    Resolves: rhbz#1726156
    Resolves: rhbz#1723811


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.12-1
changelog:
  - Add the install class for Red Hat Virtualization (vponcova)
    Resolves: rhbz#1753316
  - Extend support for custom storage checking (vponcova)
    Related: rhbz#1753316
  - Enable to define the autopart type in an install class (vponcova)
    Related: rhbz#1753316


author: Pavel Březina <pbrezina@redhat.com> - 1.0-7
changelog:
  - pam_systemd shouldn't be optional in system-auth (RHBZ #1643928)
  - compat tool: support --enablerequiresmartcard (RHBZ #1649277)
  - compat tool: support --smartcardaction=0 (RHBZ #1649279)
  - remove ecryptfs from authselect since it is not present in rhel8 (RHBZ #1649282)
  - authselect enable-features should error on unknown features (RHBZ #1651637)


author: Pavel Březina <pbrezina@redhat.com> - 1.0-9
changelog:
  - fix sources for official rhel translations (RHBZ #1608286)
  - fix coverity warnings for authselect enable-features should error on unknown features (RHBZ #1651637)


author: Pavel Březina <pbrezina@redhat.com> - 1.0-12
changelog:
  - make authselect work with selinux disabled (RHBZ #1668025)
  - require smartcard authentication only for specific services (RHBZ #1665058)
  - update translations (RHBZ #1608286)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.0-13
changelog:
  - Revert pam_systemd.so to be optional
  - Resolves: #rhbz1643928 - pam_systemd shouldn't be optional in system-auth


author: Pavel Březina <pbrezina@redhat.com> - 1.1-1
changelog:
  - Rebase to authselect-1.1 (RHBZ #1685516)
  - Notify that oddjob-mkhomedir needs to be enabled manually (RHBZ #1694103)
  - Ask for smartcard insertion when smartcard authentication is required (RHBZ #1674397)
  - Update translations (RHBZ #1689973)


author: Zhang Tao <zhangtao@cpu-os.ac.cn> - 1.1-3
changelog:
  - Add "enforce_for_root" to pam system-auth,password-auth
  - Patch: 1001-pam-add-enforce-for-root.patch


author: He Chunni <chunni@nfschina.com> - 3.28.0-4
changelog:
  - Modify localedir in meson-build and Chinese localization.
  - Add baobab-modify-localedir-Chinese-localization.patch


author: He Chunni <chunni@nfschina.com> - 3.28.0-5
changelog:
  - Remove MimeType from desktop file for nemo.
    Patch: 0001-Remove-MimeType-from-desktop-file.patch.


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-142.el8]
changelog:
  - [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
  - [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
  - [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
  - [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
  - [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
  - [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
  - [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
  - [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
  - [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-143.el8]
changelog:
  - [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
  - [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
  - [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
  - [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
  - [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-144.el8]
changelog:
  - [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
  - [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
  - [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
  - [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
  - [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
  - [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
  - [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-145.el8]
changelog:
  - [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
  - [vhost] vhost: make sure log_num < in_num (Eugenio Perez) [1750882] {CVE-2019-14835}


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-146.el8]
changelog:
  - [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
  - [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
  - [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-147.el8]
changelog:
  - [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
  - [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
  - [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
  - [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}


author: John Mcwalters <john.mcwalters@oracle.com> [4.18.0-147.el8.OL8]
changelog:
  - Oracle Linux certificates (Alexey Petrenko)
  - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  - Update x509.genkey [Orabug: 24817676]


author: Neal Gompa <ngompa13@gmail.com> - 4.20.2-1
changelog:
  - New upstream release
  - Properly split out libraries into libs subpackages
  - Slightly modernize the spec


author: Jia <lina@cpu-os.ac.cn> - 1.0.6-27
changelog:
  - add patch bzip2-fixbug_0357269.patch
  - patch from https://gitlab.com/federicomenaquintero/bzip2/commit/74de1e2e6ffc9d51ef9824db71a8ffee5962cdbc


author: Zhang Dongjun <dongjun@cpu-os.ac.cn> - 4.6.0-4
changelog:
  - nemo trash restore directory with same name translation
    Patch: 0003-nemo-trash-restore-directory-with-same-name-translat.patch


author: Andreas Schneider <asn@redhat.com> - 4.10.4-0
changelog:
  - related: #1638001 - Rebase to Samba version 4.10.4
  - resolves: #1597298 - Build Samba with python3
  - resolves: #1658558 - Add 'net ads leave --keep-account' option
  - resolves: #1669004 - Fix systemd status notifications
  - resolves: #1672167 - Fix printing cache timeout in debug output
  - resolves: #1696525 - Fix CVE-2019-3880


author: Andreas Schneider <asn@redhat.com> - 4.10.4-1
changelog:
  - resolves: #1712378 - Fix smbspool CUPS backend
  - resolves: #1696612 - Fix 'net ads join -U admin@parentdomain'


author: Andreas Schneider <asn@redhat.com> - 4.10.4-100
changelog:
  - resolves: #1760824 - Avoid overlinking with librt and libpthread
  - resolves: #1759236 - Fix forest trusts enumeration
  - resolves: #1761719 - Fix CUPS username/password authentication with smbspool


author: Xunian Tang <xunian@nfschina.com> - 1.0.2.nfs.6
changelog:
  - Add patch device-manager-1.0-nvme-disk-info.patch
  - Add patch nvme-cli-1.8.1.patch
  - Add patch device-manager-1.0-fix-systemversion.patch


author: Zhang Tao <zhangtao@cpu-os.ac.cn> - 1.0.2.nfs.13
changelog:
  - bug0356062 bug0355946 :修复在python3.6环境下，启动线程时会卡死。
  - Patch: device-manager-1.0-For4.0-optimize-stability.patch


author: Xunian Tang <xunian@nfschina.com> - 1.0.4.nfs.14
changelog:
  - Fix 0356063:修复在同方海光平台设备管理器不显示主板信息
  - add  device-manager-1.0-For4.0-Fix-tongfang-motherboard-info.patch


author: Marek Kasik <mkasik@redhat.com> - 3.5.27-8
changelog:
  - Remove XML file defining DjVu MIME type because it does not differentiate
  - between DjVu Image and DjVu Document (the default one in shared-mime-info does)
  - Resolves: #1513188


author: gongwen<gongwen@nfschina.com> - 68.5.0-2.nfs.1
changelog:
  - modify startup.homepage_override_url & startup.homepage_welcome_url in firefox-centos-default-prefs.js to "http://www.nfschina.com" 
  - modify spec for compiling with use_bundled_python_3
  - modify spec to remove copying of default_bookmarks_file


author: Robert Scheck <robert@fedoraproject.org> 4.1.6-2
changelog:
  - Solved multilib problems with documentation (#465208, #474538)
  - Removed static library from giflib-devel package (#225796 #c1)


author: Jia <lina@cpu-os.ac.cn> - 4.1.6-10
changelog:
  - 增加补丁Patch0,用于支持在server 4.0上的编译
  - 修改包名为giflib4, 避免和server 4.0上的默认主线包gitlib-5.1.4 冲突
  - 移除utils和devel相关文件，避免和giflib主线包冲突
  - 该包修改自NFS3.1,用于为java-1.7.0-openjdk添加依赖


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.1-12
changelog:
  - Add translations for desktop-icons extension.
    Patch: 0001-Add-the-translations-of-desktop-icons-extension.patch.


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.1-18
changelog:
  - Disable disable system partitions:
    '/', '/boot', '/boot/efi', '/home', '/recovery', '/var/log'.
  - Modify the default app for opening files to Nemo.
    0006-Disable-display-system-partitions-in-driver-menu.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.1-19
changelog:
  - bug0356809: 在测试版本中的待测评水印太小且字体不清晰，需尽快修改.
    Patch: 0007-Modify-the-panel-icon-size-of-top-icons.patch


author: He Chunni<chunni@nfschina.com> - 3.28.2-7
changelog:
  - Fix the problem of verifing the old password in password dialog.
    Patch: 0005-Fix-the-problem-of-checking-old-password-in-password.patch


author: Zhang Dongjun <dongjun@cpu-os.ac.cn> - 3.28.2-13
changelog:
  - bug#0357295: RTM1.3:已注册用户点击更换头像,下方拍照或选择照片按键为英文展示
    Patch: 0008-user-avatar-button-translation.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.0-5
changelog:
  - Set the default gsettings value of power-button-action to nothing.
    Patch: 0001-Modify-the-default-gsettings-value-of-power-button-a.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.0-6
changelog:
  - Add tranlations for account: gsd-account-manager.c.
    Patch: 0002-Add-tranlations-for-gsd-account-manager.patch


author: Ni Yongliang <yongliang@cpu-os.ac.cn> - 3.32.0-7
changelog:
  - Fix delay empty trash settings changed not work
    Add patch: 0005-delay-empty-trash-settings-changed.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.2-14
changelog:
  - Remove the other user button in unlock page.
    Patch: 0004-Remove-other-user-button.patch.
  - Remove the session menu button in login page.
    Patch: 0005-Remove-session-menu-button.patch.


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.2-15
changelog:
  - Add enabledExtensions for user session mode.
    Patch: 0006-Add-enabledExtensions-for-user-session-mode.patch.


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.2-16
changelog:
  - Disable showing lock screen when user is not logged in.
    Patch: 0007-Disable-lock-screen-when-user-is-not-logged-in.patch.


author: Ni Yongliang <yongliang@cpu-os.ac.cn> - 3.32.2-17
changelog:
  - Fix close notification banners not work
    Patch: 0008-fix-close-notification-banners-not-work.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.2-18
changelog:
  - Disable the screen-magnifier function (#0356185).
    Patch: 0009-Disable-the-screen-magnifier-function.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.2-21
changelog:
  - Remove keyboard in unlock-dialog.
    Patch: 0012-Remove-keyboard-in-unlock-dialog.patch
  - Modify to suit Nemo.
    Patch: 0013-Modify-to-suit-Nemo.patch


author: Ni Yongliang <yongliang@cpu-os.ac.cn> - 3.32.2-22
changelog:
  - Forbid suspend function in system actions
    Patch: 0014-Forbid-suspend-function-in-system-actions.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.2-23
changelog:
  - Add top-icons extension into default enabled-extensions list.
    The package gnome-shell-extension-top-icons must be installed.
    Patch: 0015-Add-top-icons-extension-in-default-enabled-extension.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32-0-4
changelog:
  - Add Add ibus-libpinyin and ibus-table-chinese-wubi-jidian into the default input sources.
    Patch: 0001-Add-default-input-sources-for-svs2.4.patch.


author: Jia Lina <saidan@cpu-os.ac.cn> - 3.32-0-6
changelog:
  - add post script to solve issue:
    GLib-GIO-ERROR **: 17:02:39.433: No GSettings schemas are installed on the system


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32-0-7
changelog:
  - Modify the default wubi input source to wubi-haifeng86.
    Patch: 0002-Modify-default-wubi-input-source-to-wubi-haifeng86.patch.


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-6
changelog:
  - Prevent spawning new daemons if outgoing operation exists (#1739117)
  - Force NT1 protocol version for workgroup support (#1739116)


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 1.36.2-8
changelog:
  - Modify the file-operations policy to disable non-root user to get permission.
    Patch: 0001-daemon-Modify-the-file-operations-policy.patch


author: Zhang Dongjun <dongjun@cpu-os.ac.cn> - 1.36.2-10
changelog:
  - Add removabel disk unmount notification translation
    Patch: 0003-removable-disk-unmount-notification-translation.patch


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.4
changelog:
  - Require a version of java-1.7.0-openjdk-devel with a working jar uf
  - Use readlink rather than a wildcard to resolve the system JDK directory
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.5
changelog:
  - Change to disable RC4 did not add MD5 checksum of previous java.security file from 2016/01
  - Resolves: rhbz#1350042


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.111-2.6.7.6
changelog:
  - declared check_sum_presented_in_spec and used in prep and check
  - it is checking that latest packed java.security is mentioned in listing
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.7
changelog:
  - Rebuild java-1.7.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372747)
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.0
changelog:
  - Bump to 2.6.8 and u121b00.
  - Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
  - Update md5sum list with checksum for the new java.security file.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.0
changelog:
  - Bump to 2.6.9 and u131b00.
  - Remove patch application debris in fsg.sh.
  - Re-generate PR2809 and RH1022017 against 2.6.9.
  - Update md5sum list with checksum for the new java.security file.
  - Resolves: rhbz#1410612


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3
changelog:
  - Remove CVE-2018-3639 mitigation due to performance regression and
      OpenJDK position on speculative execution vulnerabilities.
      https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4
changelog:
  - Revert SSBD removal for now, until appropriate messaging has been decided.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b05.
  - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
  - Revise b05 snapshot to include JDK-8236178.
  - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b07.
  - Switch to GA mode for final release.
  - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b08.
  - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
  - Resolves: rhbz#1785753


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-4
changelog:
  - kexec-kdump-howto.txt: Add document about encrypted targets
  - kexec-kdump-howto.txt: Add document about initramfs rebiuld
  - kexec-kdump-howto: Add note on setting correct value of kptr_restrict
  - doc: fix dead links in the file kexec-kdump-howto.txt
  - earlykdump: provide a prompt message after the rebuilding of kdump initramfs.
  - Get rid of duplicated strip_comments when reading config
  - mkdumprd: Improve the config reading logic
  - kdumpctl: don't always rebuild when extra_modules is set
  - kdumpctl: follow symlink when checking for modified files
  - fadump: leverage kernel support to re-regisgter FADump


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-5
changelog:
  - kdumpctl: check for ssh path availability when rebuild
  - kdumpctl: Check kdump.conf for error when rebuild is called
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
  - aarch64/kdump.sysconfig: Make config options similar to x86_64


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-9
changelog:
  - kexec/arm64: Add support for handling zlib compressed (Image.gz) image
  - kexec/kexec-zlib.h: Add 'is_zlib_file()' helper function
  - kexec-uImage-arm64.c: Fix return value of uImage_arm64_probe()
  - kexec/kexec.c: Add the missing close() for fd used for kexec_file_load()


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.134-56
changelog:
  - Finished converting the VDO device to conform to the DM convention of not
    issuing I/O while suspended.
  - Resolves: rhbz#1659303
  - Fixed a bug where crash recovery could use the wrong threads for certain
    operations potentially resulting in memory corruption.
  - Resolves: rhbz#1703621
  - Fixed a bug which could cause segfaults when running the vdostatus
    command.
  - Resolves: rhbz#1669960
  - Eliminated a backtrace from the error logged when creating a VDO device
    with an erroneous physical size in the table line.
  - Resolves: rhbz#1717435
  - Fixed a possible use-after-free of the UDSConfiguration.
  - Resolves: rhbz#1653802
  - Made VDO a singleton device because multi-segment devices containing a
    VDO have a number of issues.
  - Resolves: rhbz#1725077
  - Converted the VDO device to conform to the DM convention of not issuing
    writes from the constructor.
  - Resolves: rhbz#1669086


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.138-56
changelog:
  - Fixed a crash on allocation failure and a use-after-free race introduced by
    the changes to avoid issuing I/O while suspended.
  - Resolves: rhbz#1659303


author: Petr Kubat <pkubat@redhat.com> - 3.26.0-1
changelog:
  - Updated to version 3.26.0 (https://sqlite.org/releaselog/3_26_0.html)
    Fixes fts3/4 corrupt database exploit (#1659684)


author: Karel Zak <kzak@redhat.com> 2.32.1-13
changelog:
  - fix #1734553 - blkid_get_dev() leak file descriptor to underlying block device
  - fix #1719069 - findmnt warning "recommended root FS passno is 1" for XFS


author: Kalev Lember <klember@redhat.com> - 3.12.0-14
changelog:
  - Add gnome-keyring-devel provides (#1557241)
  - Minor spec cleanup
  - Use license macro for COPYING
  - Rely on pkgconfig dep extractor instead of manual glib2-devel requires
  - Tighten -devel requires with the _isa macro


author: Andreas Schneider <asn@redhat.com> - 1.1.3-1
changelog:
  - Update to version 1.1.3
    * https://gitlab.com/cwrap/pam_wrapper/-/blob/master/CHANGELOG
    * resolves: #1816943


author: Artem Polishchuk <ego.cordatus@gmail.com> - 19.10.2-7
changelog:
  - Initial package
  - Thanks to Vitaly Zaitsev <vitaly@easycoding.org> for help with packaging and review


author: Petr Pisar <ppisar@redhat.com> - 47-19
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: jiwu <jiwu@cpu-os.ac.cn> - 47-25.nfs.1
changelog:
  * Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 47-25
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 4.6.2-30
changelog:
  - bug0356703: 删除U盘文件通过回收站无法恢复及清空.
    Patch: 0031-Bug-of-moving-files-in-mounted-partition-to-trash.patch


author: Stephen Gallagher <sgallagh@redhat.com> - 80.1-2
changelog:
  - Separate desktop backgrounds into their own subpackage
  - Correct the description to match the license terms
  - Drop vestiges of fedora-logos


author: Ray Strode <rstrode@redhat.com> - 80.3-1
changelog:
  - Make night time pattern lighter
    Resolves: #1628092
  - Remove Alpha from logos
    Resolves: #1637446
  - Remove Alpha from wallpapers
    Resolves: #1636822


author: Alain Reguera Delgado <areguera@centosproject.org> - 80.5-2
changelog:
  - Add CentOS brands
  - Add CentOS backgrounds based on artistic motif sketch 4
  - Support rolling notes localization in CentOS installer


author: wqx<qixu@cpu-os.ac.cn>
changelog:
  - bug514 安装Flash插件时，root用户安装Flash成功，切换到普通用户需要再次安装且提示Flash安装失败
  - bug516 在线播放视频和音频没有声音，但是在系统设置-声音试听中能够听到声音


author: Support <support@nfschina.com> - 1.0.2-1nfs
changelog:
  - Add /usr/lib/systemd/systemd-logind to process list & Add echo -1000 > gnome-terminal-server/oom_score_adj


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.1.1-35
changelog:
  - Python 2 binary package renamed to python2-notify
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.1.1-38
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Iryna Shcherbina <ishcherb@redhat.com> - 1:1.13.3-5
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Jakub Jelen <jjelen@redhat.com> - 7.7p1-6 + 0.10.3-4
changelog:
  - Fix listing of kex algoritms in FIPS mode
  - Allow aes-gcm cipher modes in FIPS mode
  - Coverity fixes


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-2 + 0.10.3-5
changelog:
  - New upstream release fixing CVE 2018-15473
  - Remove unused patches
  - Remove reference to unused enviornment variable SSH_USE_STRONG_RNG
  - Address coverity issues
  - Unbreak scp between two IPv6 hosts (#1620333)
  - Unbreak GSSAPI key exchange (#1624323)
  - Unbreak rekeying with GSSAPI key exchange (#1624344)


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-3 + 0.10.3-5
changelog:
  - Disable OpenSSH hardening flags and use the ones provided by system (#1630615)
  - Ignore unknown parts of PKCS#11 URI (#1631478)
  - Do not fail with GSSAPI enabled in match blocks (#1580017)
  - Fix the segfaulting cavs test (#1629692)


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-4 + 0.10.3-5
changelog:
  - Unbreak PKCS#11 URI tests (#1648262)
  - Allow to disable RSA signatures with SHA1 (#1648898)
  - Dump missing GSS options from client configuration (#1649505)
  - Minor fixes from Fedora related to GSSAPI and keberos
  - Follow the system-wide PATH settings


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-1 + 0.10.3-7
changelog:
  - New upstream release (#1691045)
  - Remove support for unused VendorPatchLevel configuration option
  - Fix kerberos cleanup procedures (#1683295)
  - Do not negotiate arbitrary primes with DH GEX in FIPS (#1685096)
  - Several GSSAPI key exchange improvements and sync with Debian
  - Allow to use labels in PKCS#11 URIs even if they do not match on private key (#1671262)
  - Do not fall back to sshd_net_t SELinux context (#1678695)
  - Use FIPS compliant high-level signature OpenSSL API and KDF
  - Mention crypto-policies in manual pages
  - Do not fail if non-FIPS approved algorithm is enabled in FIPS
  - Generate the PEM files in new PKCS#8 format without the need of MD5 (#1712436)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-2 + 0.10.3-7
changelog:
  - Allow specifying a pin-value in PKCS #11 URI in ssh-add (#1639698)
  - Whitelist another syscall variant for s390x cryptographic module (ibmca engine) (#1714915)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-3 + 0.10.3-7
changelog:
  - Fix typos in manual pages (#1668325)
  - Use the upstream support for PKCS#8 PEM files alongside with the legacy PEM files (#1712436)
  - Unbreak ssh-keygen -A in FIPS mode (#1732424)
  - Add missing RSA certificate types to offered hostkey types in FIPS mode (#1732449)


author: Sérgio Basto <sergio@serjux.com> - 16.02-9
changelog:
  - Security fix for CVE-2017-17969 (from Debian)
  - Add 05-hardening-flags.patch, 09-man-update.patch, 10-drop-fm-doc.patch
    and 14-Fix-g++-warning.patch patches from Debian, very small changes
    better documentation, compile flags and compile warning.


author: Fedora Release Engineering <releng@fedoraproject.org> - 16.02-13
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  - https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot


author: Remi Collet <remi@remirepo.net> - 4.9.1-1
changelog:
  - update to 4.9.1 (2019-09-21, bug fix release)
  - add tarball signature check
  - allow twig version 2


author: Remi Collet <remi@remirepo.net> 5.0.0-1
changelog:
  - update to 5.0.0 (2019-12-26, new features release)
  - raise dependency on PHP 7.1.3
  - raise dependency on phpmyadmin/sql-parser 5.0
  - raise dependency on twig 2.1
  - add dependency on pragmarx/google2fa-qrcode
  - drop dependency on pragmarx/google2fa and bacon/bacon-qr-code
  - drop dependency on psr/container
  - sync spec file with remirepo one


author: Remi Collet <remi@remirepo.net> 5.0.2-1
changelog:
  - update to 5.0.2 (2020-03-21, security release)
  - use phpmyadmin/twig-i18n-extension instead of twig/extensions


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.8-9
changelog:
  - Reduced default build flags used to build extension modules
    https://fedoraproject.org/wiki/Changes/Python_Extension_Flags
  Resolves: rhbz#1634784


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.8-12
changelog:
  - Use RPM built wheels of pip and setuptools in ensurepip instead of our rewheel patch
  - Require platform-python-setuptools from platform-python-devel to prevent packaging errors
  Resolves: rhbz#1701286


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-13
changelog:
  - Do not set PHA verify flag on client side (rhbz#1725721)
  - Enable TLS 1.3 post-handshake authentication in http.client (rhbz#1671353)


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-14
changelog:
  - Adding a new patch 329 that adds support for OpenSSL FIPS mode
  - Explicitly listing man pages in files section to fix an RPM warning
  Resolves: rhbz#1731424


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-15
changelog:
  - Patch 329 that adds support for OpenSSL FIPS mode has been improved and
    bugfixed
  Resolves: rhbz#1744670 rhbz#1745499 rhbz#1745685


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-15.1
changelog:
  - Patch 329 (FIPS) modified: Added workaround for mod_ssl:
    Skip error checking in _Py_hashlib_fips_error
  Resolves: rhbz#1760106


author: Tomas Orsava <torsava@redhat.com> - 4.5.1-7
changelog:
  - New subpackage platform-python-coverage without files from /usr/bin/*
  - python3-coverage contains only files from /usr/bin/* and depends
    on platform-python-coverage
  - Resolves: rhbz#1658674


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0-15
changelog:
  - enable vsftpd-based tests
  - run the test-suite for Python 3 only
  - do not disable TLS-SRP test because it is now supported by OpenSSL in Fedora


author: Eric Smith <brouhaha@fedoraproject.org> 1.1.6-1
changelog:
  - New upstream version 1.1.6 (#1441428)
  - Update upstream tarball dir
  - Convert to newer build marcos
  - Update tests to pass in new build
  - These RPM spec changes were all provided by Greg Hellings.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.1.6-3
changelog:
  - Python 2 binary package renamed to python2-enum34
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Petr Viktorin <pviktori@redhat.com> - 2.0.0-10
changelog:
  - Drop dependency on python3-funcsigs
    (funcsigs functionality is in the Python 3 standard library -- inspect)
  - Drop dependency on python2-unittest2
    (Not available in the distro)

  - Fix python2 requires names


author: Petr Viktorin <pviktori@redhat.com> - 2.0.0-11
changelog:
  - Remove the Python 2 subpackage
    https://bugzilla.redhat.com/show_bug.cgi?id=1590793
  - Re-enable tests


author: Petr Viktorin <pviktori@redhat.com> - 3.4.2-6
changelog:
  - Don't use timeout in tests
    https://bugzilla.redhat.com/show_bug.cgi?id=1592940
  - Add missing BuildRequires


author: Petr Viktorin <pviktori@redhat.com> - 3.4.2-7
changelog:
  - Remove BuildRequires on python2-hypothesis, a circular dependency
  - Explicitly BuildRequire python-attrs


author: Lumír Balhar <lbalhar@redhat.com> - 1.15.6-3
changelog:
  - Add subpackage for platform-python
  - Disable tests so platform-python stack can be bootstrapped
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Tomas Orsava <torsava@redhat.com> - 1.15.6-4
changelog:
  - Re-enable tests to finish bootstrapping the platform-python stack
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Tomas Orsava <torsava@redhat.com> - 1.24.2-1
changelog:
  - Rebased to 1.24.2 to fix CVE-2019-11324
  - Added patches for CVE-2019-11236 (AKA CVE-2019-9740)
  - Resolves: rhbz#1703361 rhbz#1706026


author: Miro Hrončok <mhroncok@redhat.com> - 1.4-3
changelog:
  - Subpackage python2-jdcal has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.4-4
changelog:
  - Subpackage python2-openpyxl has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Björn Esser <besser82@fedoraproject.org> - 0.66-1
changelog:
  - Update to 0.66 release (rhbz 1693765)
  - Modernize spec file
  - Add some additional BuildRequires
  - Add Requires: p7zip


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-10
changelog:
  RHEL 8.1.0 ERRATUM
  - added option for imfile endmsg.regex
    resolves: rhbz#1627941
  - added patch enhancing imfile rotation detection
    resolves: rhbz#1674471
  - added patch fixing msgOffset datatype preventing crash on
    message with too long other fields
    resolves: rhbz#1677037
  - added patch introducing "preservecase" option for imudp/imtcp
    resolves: rhbz#1614181


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-11
changelog:
  RHEL 8.1.0 ERRATUM
  - fixed memory leak in imjournal by proper cursor releasing
    resolves: rhbz#1716867


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-12
changelog:
  RHEL 8.1.0 ERRATUM
  - edited imjournal memleak patch to not cause double-free crash
    resolves: rhbz#1729995
  - added patch calling journald API only when there are no
    preceeding errors
    resolves: rhbz#1722165
  - added patch fixing imrelp module when invoked with old syntax
    resolves: rhbz#1724218


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-13
changelog:
  RHEL 8.1.0 ERRATUM
  - added patch enabling stricter TLS certs checking conforming to 
    common criteria requirements
    resolves: rhbz#1733244


author: Lukas Nykryn <lnykryn@redhat.com> - 239-16
changelog:
  - sd-bus: deal with cookie overruns (#1694999)
  - journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
  - journal: do not remove multiple spaces after identifier in syslog message (#1691817)
  - cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
  - cryptsetup: call crypt_load() for LUKS only once (#1719153)
  - cryptsetup: Add LUKS2 token support. (#1719153)
  - udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
  - Change job mode of manager triggered restarts to JOB_REPLACE (#11456
  - bash-completion: analyze: support 'security' (#1733395)
  - man: note that journal does not validate syslog fields (#1707175)
  - rules: skip memory hotplug on ppc64 (#1713159)


author: Lukas Nykryn <lnykryn@redhat.com> - 239-17
changelog:
  - mount: simplify /proc/self/mountinfo handler (#1696178)
  - mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
  - swap: scan /proc/swaps before processing waitid() results (#1696178)
  - analyze-security: fix potential division by zero (#1734400)


author: Lukas Nykryn <lnykryn@redhat.com> - 239-18
changelog:
  - shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
  - sd-bus: adjust indentation of comments (#1746857)
  - resolved: do not run loop twice (#1746857)
  - resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
  - resolved: query polkit only after parsing the data (#1746857)


author: Lukas Nykryn <lnykryn@redhat.com> - 239-18.1
changelog:
  - journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-18.3
changelog:
  - core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
  - syslog: fix segfault in syslog_parse_priority() (#1781712)
  - journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
  - test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
  - test: mask several unnecessary services (#1781712)
  - test: bump the second partition's size to 50M (#1781712)
  - sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
  - sd-bus: reorder bus ref and bus message ref handling (#20201712)
  - sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
  - sd-bus: drop two inappropriate empty lines (#20201712)
  - sd-bus: initialize mutex after we allocated the wqueue (#20201712)
  - sd-bus: always go through sd_bus_unref() to free messages (#20201712)
  - bus-message: introduce two kinds of references to bus messages (#20201712)
  - sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
  - sd-event: add sd_event_source_disable_unref() helper (#20201712)
  - polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-18.4
changelog:
  - sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)


author: He Chunni <chunni@neschina.com> - 239-18.nfs.5
changelog:
  - fix 0355845 fix reboot time out User Manager
    0240-fix-0355845-reboot-time-out-User-Manager.patch


author: Larence R. Rogers <lrr@cert,org> - 5.3.0-1
changelog:
  * Release 5.3.0-1
    1. Directory wildcards are allowed in RAR command line in file names to
        archive. For example:

        rar a backup c:\backup\2015*\*

        Recursion is enabled automatically for such directory wildcards
        even if -r switch is not specified.

     2. New 'R' object for -sc switch defines encoding of console
        RAR messages sent to redirected files and pipes. For example:

        rar lb -scur data > list.txt

        will produce Unicode list.txt with archived file names.

     3. Console RAR "l" and "v" commands display file time in YYYY-MM-DD
        format.

     4. "Test" command also verifies contents of NTFS alternate data streams
        in RAR 3.x - 5.x archives. Previously their contents was checked
        only during extraction command.

     5. Bugs fixed:

        a) console RAR crashed instead of displaying an overwrite prompt
           when attempting to add files to already existing volumes;

        b) console RAR "lt" command did not display seconds in file timestamp.


author: Pavel Hrdina <phrdina@redhat.com> - 2.0.0-2
changelog:
  - virt-install: Fix description for --os-variant (rhbz#1649406)
  - virt-install: Add "Guest OS" options group (rhbz#1649406)
  - virt-xml: Accept --os-variant option (rhbz#1649406)
  - tests: Add some tests for virt-xml with KVM (rhbz#1649406)
  - virt-xml: Start using --os-variant (rhbz#1649406)
  - cli: s390x+graphics specified, use video=virtio (bz #1654994) (rhbz#1654994)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.0-1
changelog:
  - Rebased to virt-manager-2.2.0 (rhbz#1721001)
  - The rebase also fixes the following bugs:
      rhbz#1718065, rhbz#1714304, rhbz#1709857, rhbz#1707379, rhbz#1700354
      rhbz#1692489, rhbz#1690687, rhbz#1690685, rhbz#1683609, rhbz#1679018
      rhbz#1677019, rhbz#1671599, rhbz#1667025, rhbz#1666597, rhbz#1663430
      rhbz#1661867, rhbz#1660467, rhbz#1660123, rhbz#1659354, rhbz#1658511
      rhbz#1648939, rhbz#1599139, rhbz#1508147, rhbz#1501608
  - spec: add build dependencies that are now required for build (rhbz#1721001)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.0-2
changelog:
  - xmleditor: Handle gtksourceview3 as well as gtksourceview4 (rhbz#1722820)
  - xmleditor: Fix the gtksource version checking (rhbz#1722820)
  - spec: add gtksourceview3 dependency introduced by upstream (rhbz#1722820)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.1-1
changelog:
  - Rebased to virt-manager-2.2.1 (rhbz#1726535)
  - The rebase also fixes the following bugs:
      rhbz#1727881, rhbz#1724287, rhbz#1727811
  - spec: add gtksourceview3 dependency introduced by upstream (rhbz#1722820)
  - guest: fix warning message when machine type is changed for secure boot (rhbz#1727811)


author: Nian Yanchuan <yanchuan@nfschina.com> - 29.19.1.13-4.nfs.2.4
changelog:
  - anaconda-29.19.1.13-disable-ima-and-selinux.patch
  - 不要备份/boot/efi，因为某些服务器上备份该分区后，导致无法进入备份还原小系统。
  - 默认不要开启ima和selinux(圣亮的提议).


author: jiwu <jiwu@cpu-os.ac.cn> - 29.19.1.13-4.nfs.2.5
changelog:
  - Fix: #0357278 系统安装过程, 点击帮助按钮无弹窗, 缺少系列帮助文档文件, 不显示帮助按钮
  - anaconda-29.19.1.13-no-show-help-button.patch


author: Nian Yanchuan <yanchuan@nfschina.com> - 29.19.1.13-4.nfs.2.6
changelog:
  - anaconda-29.19.1.13-automatic-partition.patch
  - bug 357304 357237，自动分区时，重新设计各分区大小，/:60%  /recovery:25%  /home:10%


author: Nian Yanchuan <yanchuan@nfschina.com> - 29.19.1.13-4.nfs.2.7
changelog:
  - anaconda-29.19.1.13-recovery-disk-first.patch
  - 创建分区时，/recovery分区的磁盘符尽量靠前，且限制/recovery分区的最大容量为800GB，
  - 否则，安装完系统后可能无法引导进入备份还原系统.


author: Nian Yanchuan <yanchuan@nfschina.com> - 29.19.1.13-4.nfs.2.8
changelog:
  - anaconda-29.19.1.13-automatic-partition-v2.patch
  - 重新设置自动分区规则. /boot/占1GB，/recovery占25%，且最大不超过800GB;磁盘总容量大于100GB时，
  - swap分区最小为16GB; /home占剩余容量的15%，最终剩余的空间给/分区.


author: Nian Yanchuan <yanchuan@nfschina.com> - 29.19.1.13-4.nfs.2.11
changelog:
  - anaconda-29.19.1.13-remove-installation_source.patch 移除 "安装源"
  - anaconda-29.19.1.13-recovery-space.patch  
  - anaconda-29.19.1.13-4.nfs.2.8将recovery分区最大值限制为800GB，而且代码改得还有问题，
  - 经测试，不需要限制recovery分区的最大值，移除该限制。


author: jiwu <jiwu@nfschina.com> - 29.19.1.13-4.nfs.2.12
changelog:
  - 0358132: 文本安装模式，默认安装组件不是Minimal Install
  - anaconda-29.19.1.13-default-gui-in-text-installation-mode.patch


author: Zhang Tao <zhangtao@cpu-os.ac.cn> - 3.2-1.nfs.1
changelog:
  - Adapt to nfs server system 4.0 and centos 8.
  - Add backup and recover system menuentry in grub.cfg.


author: Nick Clifton <nickc@redhat.com> - 2.32-15
changelog:
  - Stop gold from aborting when it encounters input sections with the same name and different flags.  (#1722715)


author: He Chunni <chunnni@nfschina.com> [4.19.113-10.nfs]
changelog:
  - kernel-CVE-2019-18198.patch
  - kernel-CVE-2019-19602.patch
  - kernel-CVE-2019-20810.patch
  - kernel-CVE-2020-11565.patch
  - kernel-CVE-2020-11668.patch
  - kernel-CVE-2020-12464.patch
  - kernel-CVE-2020-12657.patch
  - kernel-CVE-2020-12659.patch
  - kernel-CVE-2020-12768.patch
  - kernel-CVE-2020-12770.patch
  - kernel-CVE-2020-13974.patch
  - kernel-CVE-2018-20784.patch


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-2
changelog:
  - move pidfile to /var/run/chrony to allow chronyd to remove it on exit
    (#1584585)
  - avoid blocking in getrandom system call (#1592425)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-3
changelog:
  - fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2
    (#1614800)
  - add workaround for late reload of unit file (#1614751)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.5-1
changelog:
  - update to 3.5 (#1685469 #1677218)
  - fix shellcheck warnings in helper scripts (#1711948)
  - update ntp2chrony script


author: Jeff Law <law@redhat.com> 8.2.1-3.4
changelog:
  - Backport PPC string inlines from trunk which allow for valgrind's
    memcheck to work properly (#1652929)
  - Backport bugfix for clz pattern on s390 affecting jemalloc (#1652016)


author: Marek Polacek <polacek@redhat.com> 8.3.1-3
changelog:
  - update from Fedora 8.3.1-3 (#1680182)
  - remove load and test FP splitter (#1673116)
  - fix *movsi_from_df (#1677652)
  - add missing headers
  - add support for live patching (#1668903)
  - retire gcc8-rh1612514.patch, gcc8-rh1652016.patch, gcc8-rh1652929-?.patch


author: Marek Polacek <polacek@redhat.com> 8.3.1-4
changelog:
  - update from Fedora 8.3.1-4 (#1680182)
  - drop gcc8-pr60790.patch, gcc8-pr89629.patch, gcc8-rh1668903-4.patch


author: Marek Polacek <polacek@redhat.com> 8.3.1-4.2
changelog:
  - backport the -fuse-ld=lld option (#1670535)
  - TLS model fix (#1678555, PR c++/85400)
  - two small autoFDO fixes (#1686082)
  - libgomp update (#1707568)
  - member template redeclaration fix (#1652704, PR c++/86747)
  - turn libgcc_s.so into a linker script on i?86, x86_64, ppc64le and also on
    ppc and ppc64 for 64-bit multilib (#1708309)
  - avoid using unaligned vsx or lxvd2x/stxvd2x for memcpy/memmove inline
    expansion (#1666977)


author: Marek Polacek <polacek@redhat.com> 8.3.1-4.5
changelog:
  - fix shift count operand printing (#1730380)
  - fix tree-outof-ssa.c ICE with vector types (PR middle-end/90139, #1730454)
  - fix out-of-ssa with unsupported vector types (PR rtl-optimization/90756,
    - fix ICE with template placeholder for TTP (PR c++/86098, #1730454)


author: Zhang Dongjun <dongjun@cpu-os.ac.cn> - 1.0.4.nfs.16
changelog:
  - bug#0357410: RTM1.7 设备管理器中主板、光驱没有显示硬件品牌Logo
  - Patch: device-manager-1.0-For4.0-Add-suma-cancon-logo.patch


author: Xunian Tang <xunian@nfschina.com> - 1.0.4.nfs.17
changelog:
  - 从svs2.4移植:device-manager-1.0-For4.0-MdySystem-to-MainServer.patch
  - Fix 0357667:H620-G30S3,设备管理器下电脑概览中电脑描述错误,应Main Server Chassis.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-6
changelog:
  - #Resolve: Bug 1638011 - esc docdir should not be versioned in rhel8.
  - #Resolve: Bug 1596915 - Remove XULRunner from ESC.


author: Ni Yongliang <yongliang@cpu-os.ac.cn> - 3.28.1-5
changelog:
  - Force new archive window at top
    Add Patch: 0001-force-new-archive-window-at-top.patch
    Comment libnautilus-fileroller.so install in spec file


author: Jia <lina@cpu-os.ac.cn> - 3.28.1-6.1
changelog:
  - 移植董珍在通用上修复的解压锁时的编码问题补丁
  - patch: 0002-file-roller-fix-zip-codec.patch
  - Uncomment /usr/lib64/nautilus-extensions-3.0/libnautilus-fileroller.so


author: Li Ting <liting@cpu-os.ac.cn> - 3.32.1-21
changelog:
  - bug357377: RTM1.6:在正常使用过程中概率性发生桌面卡死现象
    Patch: 0009-do-not-show-window-previews-in-window-list.patch


author: Zhang Dongjun <dongjun@cpu-os.ac.cn> - 3.32.2-25
changelog:
  - 标准不同用户登陆，在设置中点击"解锁"时，申请提权的管理员用户若未设置密码，认证窗口中设置密码提示未汉化
    Patch: 0007-authentication-dialog-translation.patch


author: Li Ting <liting@cpu-os.ac.cn> - 3.32.2-26
changelog:
  - 用户解锁第一次弹出的授权窗口没有管理员名，取消第二次点击解锁才有
    电源、锁屏中当用户名超过 27 个之后显示成全名
    Patch: 0001-polkit-username-and-power-username.patch


author: Li Ting <liting@cpu-os.ac.cn> - 3.32.2-27
changelog:
  - 改为显示全名而不是用户名(real_name，上个补丁是user_name)
    解决偶发注销、关机框无法点击，桌面卡死的问题
    Patch: 0001-use-real-name-shell-freeze.patch


author: Peter Jones <pjones@redhat.com> - 2.02-70
changelog:
  - Fix (once again) how CFLAGS and LDFLAGS propogate the settings for hardened
    builds, because rpmdiff doesn't like the current way failing.
    Related: rhbz#1653961


author: Peter Jones <pjones@redhat.com> - 2.02-71
changelog:
  - Fix (a fourth time, due to a typo) how LDFLAGS works on non-efi platforms.
    Related: rhbz#1653961


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-27
changelog:
  - RHEL: spec: Disable gluster on i686 (rhbz#1722668)
  - rpc: virnetlibsshsession: update deprecated functions (rhbz#1722735)


author: Danilo de Paula <ddepaula@redhat.com> - 4.5.0-28
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1695587
    (Ensure modular RPM upgrade path)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-29
changelog:
  - cpu: allow include files for CPU definition (rhbz#1686895)
  - cpu: fix cleanup when signature parsing fails (rhbz#1686895)
  - cpu: push more parsing logic into common code (rhbz#1686895)
  - cpu: simplify failure cleanup paths (rhbz#1686895)
  - cpu_map: Add support for arch-capabilities feature (rhbz#1693433)
  - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1686895)
  - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1686895)
  - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1686895)
  - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1686895)
  - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1686895)
  - cpu_x86: Separate ancestor model parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Separate vendor parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Separate feature list parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Make sure CPU model names are unique in cpu_map (rhbz#1686895)
  - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1686895)
  - cpu_x86: Store CPU signature in an array (rhbz#1686895)
  - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1686895)
  - cpu_x86: Log decoded CPU model and signatures (rhbz#1686895)
  - qemu_capabilities: Inroduce virQEMUCapsGetCPUModelX86Data (rhbz#1686895)
  - qemu_capabilities: Introduce virQEMUCapsGetCPUModelInfo (rhbz#1686895)
  - qemu_capabilities: Use virQEMUCapsGetCPUModelInfo (rhbz#1686895)
  - cpu_x86: Add virCPUx86DataGetSignature for tests (rhbz#1686895)
  - cpu_map: Add hex representation of signatures (rhbz#1686895)
  - cputest: Test CPU signatures (rhbz#1686895)
  - cpu_map: Add more signatures for Conroe CPU model (rhbz#1686895)
  - cpu_map: Add more signatures for Penryn CPU model (rhbz#1686895)
  - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Westmere CPU model (rhbz#1686895)
  - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Haswell CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1686895)
  - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1686895)
  - cpu_x86: Require <cpuid> within <feature> in CPU map (rhbz#1697627)
  - cputest: Add data for Intel(R) Xeon(R) Platinum 8268 CPU (rhbz#1693433)
  - cpu_map: Add Cascadelake-Server CPU model (rhbz#1693433)
  - cpu_x86: Introduce virCPUx86DataItem container struct (rhbz#1697627)
  - cpu_x86: Rename virCPUx86Vendor.cpuid (rhbz#1697627)
  - cpu_x86: Rename virCPUx86DataItem variables (rhbz#1697627)
  - cpu_x86: Rename x86DataCpuidNext function (rhbz#1697627)
  - cpu_x86: Rename x86DataCpuid (rhbz#1697627)
  - cpu_x86: Rename virCPUx86CPUIDSorter (rhbz#1697627)
  - cpu_x86: Rename virCPUx86DataAddCPUIDInt (rhbz#1697627)
  - cpu_x86: Rename virCPUx86DataAddCPUID (rhbz#1697627)
  - cpu_x86: Rename virCPUx86VendorToCPUID (rhbz#1697627)
  - cpu_x86: Simplify x86DataAdd (rhbz#1697627)
  - cpu_x86: Introduce virCPUx86DataCmp (rhbz#1697627)
  - cpu_x86: Make x86cpuidSetBits more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidClearBits more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidAndBits more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidMatchMasked more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidMatch more general (rhbz#1697627)
  - cpu_x86: Store virCPUx86DataItem content in union (rhbz#1697627)
  - cpu_x86: Add support for storing MSR features in CPU map (rhbz#1697627)
  - cpu_x86: Move *CheckFeature functions (rhbz#1697627)
  - cputest: Add support for MSR features to cpu-parse.sh (rhbz#1697627)
  - util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1697627)
  - vircpuhost: Add support for reading MSRs (rhbz#1697627)
  - virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1697627)
  - cpu_x86: Fix placement of *CheckFeature functions (rhbz#1697627)
  - cpu_conf: Introduce virCPUDefFilterFeatures (rhbz#1697627)
  - qemu_command: Use consistent syntax for CPU features (rhbz#1697627)
  - tests: Add QEMU caps data for future 4.1.0 (rhbz#1697627)
  - tests: Add domain capabilities case for QEMU 4.1.0 (rhbz#1697627)
  - qemuxml2argvtest: Add test for CPU features translation (rhbz#1697627)
  - qemu: Add APIs for translating CPU features (rhbz#1697627)
  - qemu: Probe for max-x86_64-cpu type (rhbz#1697627)
  - qemu: Probe for "unavailable-features" CPU property (rhbz#1697627)
  - qemu: Probe host CPU after capabilities (rhbz#1697627)
  - qemu_command: Use canonical names of CPU features (rhbz#1697627)
  - qemu: Translate feature names from query-cpu-model-expansion (rhbz#1697627)
  - qemu: Don't use full CPU model expansion (rhbz#1697627)
  - qemu: Make qemuMonitorGetGuestCPU usable on x86 only (rhbz#1697627)
  - cpu: Introduce virCPUDataAddFeature (rhbz#1697627)
  - qemu: Add type filter to qemuMonitorJSONParsePropsList (rhbz#1697627)
  - util: string: Introduce macro for automatic string lists (rhbz#1697627)
  - util: json: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1697627)
  - qemu: Introduce generic qemuMonitorGetGuestCPU (rhbz#1697627)
  - qemu_process: Prefer generic qemuMonitorGetGuestCPU (rhbz#1697627)
  - util: Rework virStringListAdd (rhbz#1697627)
  - conf: Introduce virCPUDefCheckFeatures (rhbz#1697627)
  - cpu_x86: Turn virCPUx86DataIteratorInit into a function (rhbz#1697627)
  - cpu_x86: Introduce virCPUx86FeatureFilter*MSR (rhbz#1697627)
  - cpu_x86: Read CPU features from IA32_ARCH_CAPABILITIES MSR (rhbz#1697627)
  - cpu_map: Introduce IA32_ARCH_CAPABILITIES MSR features (rhbz#1697627)
  - qemu: Forbid MSR features with old QEMU (rhbz#1697627)
  - qemu: Drop MSR features from host-model with old QEMU (rhbz#1697627)
  - cpu_x86: Fix memory leak - virCPUx86GetHost (rhbz#1697627)
  - qemu: Use @tmpChr in qemuDomainDetachChrDevice to build device string (rhbz#1624204)
  - qemu: Drop "user-" prefix for guestfwd netdev (rhbz#1624204)
  - qemu_hotplug: Attach guestfwd using netdev_add (rhbz#1624204)
  - qemu_hotplug: Detach guestfwd using netdev_del (rhbz#1624204)
  - qemuhotplugtest: Test guestfwd attach and detach (rhbz#1624204)
  - daemon: Register secret driver before storage driver (rhbz#1685151)
  - bhyve: Move autostarting of domains into bhyveStateInitialize (rhbz#1685151)
  - Revert "virStateDriver - Separate AutoStart from Initialize" (rhbz#1685151)
  - Revert "Separate out StateAutoStart from StateInitialize" (rhbz#1685151)
  - util: moving 'type' argument to avoid issues with mount() syscall. (rhbz#1689297)
  - util: cgroup: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1689297)
  - vircgroup: Rename structs to start with underscore (rhbz#1689297)
  - vircgroup: Introduce standard set of typedefs and use them (rhbz#1689297)
  - vircgroup: Extract file link resolving into separate function (rhbz#1689297)
  - vircgroup: Remove unused function virCgroupKill() (rhbz#1689297)
  - vircgroup: Unexport unused function virCgroupAddTaskController() (rhbz#1689297)
  - vircgroup: Unexport unused function virCgroupRemoveRecursively (rhbz#1689297)
  - vircgroup: Move function used in tests into vircgrouppriv.h (rhbz#1689297)
  - vircgroup: Remove pointless bool parameter (rhbz#1689297)
  - vircgroup: Extract mount options matching into function (rhbz#1689297)
  - vircgroup: Use virCgroupMountOptsMatchController in virCgroupDetectPlacement (rhbz#1689297)
  - vircgroup: Introduce virCgroupEnableMissingControllers (rhbz#1689297)
  - vircgroup: machinename will never be NULL (rhbz#1689297)
  - vircgroup: Remove virCgroupAddTaskController (rhbz#1689297)
  - vircgroup: Introduce virCgroupGetMemoryStat (rhbz#1689297)
  - lxc: Use virCgroupGetMemoryStat (rhbz#1689297)
  - vircgroup: fix MinGW build (rhbz#1689297)
  - vircgroup: Duplicate string before modifying (rhbz#1689297)
  - vircgroup: Extract controller detection into function (rhbz#1689297)
  - vircgroup: Extract placement validation into function (rhbz#1689297)
  - vircgroup: Split virCgroupPathOfController into two functions (rhbz#1689297)
  - vircgroup: Call virCgroupRemove inside virCgroupMakeGroup (rhbz#1689297)
  - vircgroup: Simplify if conditions in virCgroupMakeGroup (rhbz#1689297)
  - vircgroup: Remove obsolete sa_assert (rhbz#1689297)
  - tests: Resolve possible overrun (rhbz#1689297)
  - vircgroup: cleanup controllers not managed by systemd on error (rhbz#1689297)
  - vircgroup: fix bug in virCgroupEnableMissingControllers (rhbz#1689297)
  - vircgroup: rename virCgroupAdd.*Task to virCgroupAdd.*Process (rhbz#1689297)
  - vircgroup: introduce virCgroupTaskFlags (rhbz#1689297)
  - vircgroup: introduce virCgroupAddThread (rhbz#1689297)
  - vircgroupmock: cleanup unused cgroup files (rhbz#1689297)
  - vircgroupmock: rewrite cgroup fopen mocking (rhbz#1689297)
  - vircgrouptest: call virCgroupDetectMounts directly (rhbz#1689297)
  - vircgrouptest: call virCgroupNewSelf instead virCgroupDetectMounts (rhbz#1689297)
  - util: introduce vircgroupbackend files (rhbz#1689297)
  - vircgroup: introduce cgroup v1 backend files (rhbz#1689297)
  - vircgroup: extract virCgroupV1Available (rhbz#1689297)
  - vircgroup: detect available backend for cgroup (rhbz#1689297)
  - vircgroup: extract virCgroupV1ValidateMachineGroup (rhbz#1689297)
  - vircgroup: extract virCgroupV1CopyMounts (rhbz#1689297)
  - vircgroup: extract v1 detect functions (rhbz#1689297)
  - vircgroup: extract virCgroupV1CopyPlacement (rhbz#1689297)
  - vircgroup: extract virCgroupV1ValidatePlacement (rhbz#1689297)
  - vircgroup: extract virCgroupV1StealPlacement (rhbz#1689297)
  - vircgroup: extract virCgroupV1DetectControllers (rhbz#1689297)
  - vircgroup: extract virCgroupV1HasController (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetAnyController (rhbz#1689297)
  - vircgroup: extract virCgroupV1PathOfController (rhbz#1689297)
  - vircgroup: extract virCgroupV1MakeGroup (rhbz#1689297)
  - vircgroup: extract virCgroupV1Remove (rhbz#1689297)
  - vircgroup: extract virCgroupV1AddTask (rhbz#1689297)
  - vircgroup: extract virCgroupV1HasEmptyTasks (rhbz#1689297)
  - vircgroup: extract virCgroupV1BindMount (rhbz#1689297)
  - vircgroup: extract virCgroupV1SetOwner (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioWeight (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetBlkioIoServiced (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetBlkioIoDeviceServiced (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWeight (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceReadIops (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWriteIops (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceReadBps (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWriteBps (rhbz#1689297)
  - vircgroup: extract virCgroupV1SetMemory (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetMemoryStat (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetMemoryUsage (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)Memory*Limit (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetMemSwapUsage (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Allow|Deny)Device (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Allow|Deny)AllDevices (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpuShares (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpuCfsPeriod (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpuCfsQuota (rhbz#1689297)
  - vircgroup: extract virCgroupV1SupportsCpuBW (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetCpuacct*Usage (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetCpuacctStat (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)FreezerState (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpusetMems (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpusetMemoryMigrate (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpusetCpus (rhbz#1689297)
  - vircgroup: rename virCgroupController into virCgroupV1Controller (rhbz#1689297)
  - vircgroup: rename controllers to legacy (rhbz#1689297)
  - vircgroup: remove VIR_CGROUP_SUPPORTED (rhbz#1689297)
  - vircgroup: include system headers only on linux (rhbz#1689297)
  - vircgroupv1: fix build on non-linux OSes (rhbz#1689297)
  - Revert "vircgroup: cleanup controllers not managed by systemd on error" (rhbz#1689297)
  - util: introduce cgroup v2 files (rhbz#1689297)
  - vircgroup: introduce virCgroupV2Available (rhbz#1689297)
  - vircgroup: introduce virCgroupV2ValidateMachineGroup (rhbz#1689297)
  - vircgroup: introduce virCgroupV2CopyMounts (rhbz#1689297)
  - vircgroup: introduce virCgroupV2CopyPlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2DetectMounts (rhbz#1689297)
  - vircgroup: introduce virCgroupV2DetectPlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2ValidatePlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2StealPlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2DetectControllers (rhbz#1689297)
  - vircgroup: introduce virCgroupV2HasController (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetAnyController (rhbz#1689297)
  - vircgroup: introduce virCgroupV2PathOfController (rhbz#1689297)
  - vircgroup: introduce virCgroupV2MakeGroup (rhbz#1689297)
  - vircgroup: introduce virCgroupV2Remove (rhbz#1689297)
  - vircgroup: introduce virCgroupV2AddTask (rhbz#1689297)
  - vircgroup: introduce virCgroupV2HasEmptyTasks (rhbz#1689297)
  - vircgroup: introduce virCgroupV2BindMount (rhbz#1689297)
  - vircgroup: introduce virCgroupV2SetOwner (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioWeight (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetBlkioIoServiced (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetBlkioIoDeviceServiced (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWeight (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceReadIops (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWriteIops (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceReadBps (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWriteBps (rhbz#1689297)
  - vircgroup: introduce virCgroupV2SetMemory (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetMemoryStat (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetMemoryUsage (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)MemoryHardLimit (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)MemorySoftLimit (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)MemSwapHardLimit (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetMemSwapUsage (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)CpuShares (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)CpuCfsPeriod (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)CpuCfsQuota (rhbz#1689297)
  - vircgroup: introduce virCgroupV2SupportsCpuBW (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetCpuacctUsage (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetCpuacctStat (rhbz#1689297)
  - vircgroup: register cgroup v2 backend (rhbz#1689297)
  - vircgroup: add support for hybrid configuration (rhbz#1689297)
  - vircgroupmock: change cgroup prefix (rhbz#1689297)
  - vircgroupmock: add support to test cgroup v2 (rhbz#1689297)
  - vircgrouptest: introduce initFakeFS and cleanupFakeFS helpers (rhbz#1689297)
  - vircgrouptest: prepare testCgroupDetectMounts for cgroup v2 (rhbz#1689297)
  - vircgrouptest: add detect mounts test for cgroup v2 (rhbz#1689297)
  - vircgrouptest: add detect mounts test for hybrid cgroups (rhbz#1689297)
  - vircgrouptest: prepare validateCgroup for cgroupv2 (rhbz#1689297)
  - vircgrouptest: add cgroup v2 tests (rhbz#1689297)
  - vircgrouptest: add hybrid tests (rhbz#1689297)
  - virt-host-validate: rewrite cgroup detection to use util/vircgroup (rhbz#1689297)
  - virt-host-validate: require freezer for LXC (rhbz#1689297)
  - virt-host-validate: Fix build on non-Linux (rhbz#1689297)
  - tests: Use correct function name in error path (rhbz#1689297)
  - util: Fix virCgroupGetMemoryStat (rhbz#1689297)
  - tests: Augment vcgrouptest to add virCgroupGetMemoryStat (rhbz#1689297)
  - vircgroup: introduce virCgroupKillRecursiveCB (rhbz#1689297)
  - vircgroupv2: fix virCgroupV2ValidateMachineGroup (rhbz#1689297)
  - util: implement virCgroupV2(Set|Get)CpusetMems (rhbz#1689297)
  - util: implement virCgroupV2(Set|Get)CpusetMemoryMigrate (rhbz#1689297)
  - util: implement virCgroupV2(Set|Get)CpusetCpus (rhbz#1689297)
  - util: enable cgroups v2 cpuset controller for threads (rhbz#1689297)
  - util: vircgroup: pass parent cgroup into virCgroupDetectControllersCB (rhbz#1689297)
  - internal: introduce a family of NULLSTR macros (rhbz#1689297)
  - util: vircgroup: improve controller detection (rhbz#1689297)
  - util: vircgroupv2: use any controller to create thread directory (rhbz#1689297)
  - util: vircgroupv2: enable CPU controller only if it's available (rhbz#1689297)
  - util: vircgroupv2: separate return values of virCgroupV2EnableController (rhbz#1689297)
  - util: vircgroupv2: don't error out if enabling controller fails (rhbz#1689297)
  - util: vircgroupv2: mark only requested controllers as available (rhbz#1689297)
  - Revert "util: vircgroup: pass parent cgroup into virCgroupDetectControllersCB" (rhbz#1689297)
  - util: vircgroupv2: stop enabling missing controllers with systemd (rhbz#1689297)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-30
changelog:
  - virWaitForDevices: Drop confusing part of comment (rhbz#1710575)
  - lib: Drop UDEVSETTLE (rhbz#1710575)
  - m4: Provide default value fore UDEVADM (rhbz#1710575)
  - m4: Drop needless string checks (rhbz#1710575)
  - util: vircgroup: introduce virCgroup(Get|Set)ValueRaw (rhbz#1658890)
  - util: vircgroup: move virCgroupGetValueStr out of virCgroupGetValueForBlkDev (rhbz#1658890)
  - util: vircgroupv1: add support for BFQ blkio files (rhbz#1658890)
  - util: vircgroupv2: add support for BFQ files (rhbz#1658890)
  - Handle copying bitmaps to larger data buffers (rhbz#1703160)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-31
changelog:
  - virDomainObjListAddLocked: fix double free (rhbz#1728530)
  - docs: schemas: Decouple the virtio options from each other (rhbz#1729675)
  - util: command: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1721434)
  - util: command: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1721434)
  - util: netdevopenvswitch: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1721434)
  - util: virnetdevopenvswitch: Drop an unused variable @ovs_timeout (rhbz#1721434)
  - util: netdevopenvswitch: use VIR_AUTOPTR for aggregate types (rhbz#1721434)
  - util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1721434)
  - virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1721434)
  - test: Introduce virnetdevopenvswitchtest (rhbz#1721434)
  - vircommand: Separate mass FD closing into a function (rhbz#1721434)
  - virCommand: use procfs to learn opened FDs (rhbz#1721434)
  - util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1721434)
  - util: Avoid possible error in virCommandMassClose (rhbz#1721434)
  - vircgroup: fix cgroups v2 controllers detection (rhbz#1689297)
  - vircgroupv2: store enabled controllers (rhbz#1689297)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32
changelog:
  - virDomainObjListAddLocked: Produce better error message than 'Duplicate key' (rhbz#1737790)
  - virdbus: Grab a ref as long as the while loop is executed (rhbz#1741900)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33
changelog:
  - vircgroupv2: fix parsing multiple values in single file (rhbz#1741825)
  - vircgroupv2: fix virCgroupV2GetCpuCfsQuota for "max" value (rhbz#1741837)


author: hanxf <hanxiaofeng@cpu-os.ac.cn> -0.1-2
changelog:
  - add yelp
  - 更新部分截图：通过更新tar包
  - 删除5.2.12 fonts
    Patch: 001-add-yelp.patch
    Patch: 002-del-Mfonts.patch


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1b-1
changelog:
  - update to the 1.1.1b release
  - EVP_KDF API backport from master
  - SSH KDF implementation for EVP_KDF API backport from master
  - add S390x chacha20-poly1305 assembler support from master branch


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-2
changelog:
  - do not try to use EC groups disallowed in FIPS mode
    in TLS
  - fix Valgrind regression with constant-time code


author: Peter Jones <pjones@redhat.com> - 0.112-25
changelog:
  - Preserve .py timestamp during install so .pyc/.pyo files have the same
    timestamp on all arches, preventing rpmdiff from complaining.
    Related: rhbz#1625388


author: Florian Festi <ffesti@redhat.com> - 4.14.2-23
changelog:
  - Use --dpbath only with full path (#1696408)
  - Fix memory leaks (#1714657)
  - Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
  - Fix bash warning from solution for #1689810


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 4.8.7-52.nfs
changelog:
  - Do not close apps when shutdown dialog pop up.
    Patch: 0601-Dont-close-apps-on-gnome-shutdown-dialog.patch


author: Petr Pisar <ppisar@redhat.com> - 1.0.70-8
changelog:
  - Fix invoking systemd_postun macro (bug #1676007)
  - Fix stringop-truncation GCC 7 warning (bug #1606319)
  - Adapt to glusterfs-api 7.6.3 (bug #1676007)
  - Disable Ceph support on 32-bit platforms (bug #1676007)


author: Björn Esser <besser82@fedoraproject.org> - 2:4.5-9
changelog:
  - Add patch to include crypt.h, if present
  - Use %make_{build,install} macros
  - Refresh other patches for proper alignment


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-1
changelog:
  - Update to current upstream release 4.6
  - Raise limit for passwd and shadow entry length but also prevent
    writing longer entries (#1422497)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-5
changelog:
  - use cap_setxid file capabilities for newxidmap instead of making them setuid
  - limit the SYS_U/GID_MIN value to 1 as the algorithm does not work with 0
    and the 0 is always used by root anyway
  - manual page improvements
  - flush sssd caches - patch by Jakub Hrozek


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-8
changelog:
  - properly audit group password change
  - do not add uid of a new (not yet added) user to the audit message
  - use lckpwdf() again to disable concurrent edits of databases by
    other applications
  - clarify chage manual page in regards to shadow and passwd
    inconsistency
  - fix minor issues in groupadd and login.defs manual pages
  - Ignore LOGIN_PLAIN_PROMPT variable in login.defs
  - force regeneration of getdate.c otherwise the date parsing fix
    is not applied


author: Tom Callaway <spot@fedoraproject.org> - 3.6.2-4
changelog:
  - fix conditionals so that Fedora builds against system openblas for lapack/blas
    and we only generate the R lapack/blas libs on RHEL 5-6-7 (where system lapack/openblas
    is not reliable). Thanks to Dirk Eddelbuettel for pointing out the error.


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-18.20140228gitc2f5d13
changelog:
  - fix CVE-2016-8859 (#1387112, #1387113)
  - probably fix CVE-2015-3796 (see upstream issue #37 and
    https://bugs.chromium.org/p/project-zero/issues/detail?id=428)
  - update python bindings subpackage to current guidelines
  - fix parallel installation of multilib packages (patch by joseba.gar at gmail.com)
    (bug #1275830)


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-25.20140228gitc2f5d13
changelog:
  - improve python bindings build patch based on upstream PR
  - fix infinite loop for certain regexps (upstream issue #50)
  - switch to python3 (#1634955)


author: Tomáš Mráz <tmraz@redhat.com> 1.4.0-1
changelog:
  - Do not try to check presence of too short username in password
  - Make the user name check optional (via usercheck option)
  - Add an 'enforcing' option to make the checks to be warning-only
    in PAM
  - The difok = 0 setting will disable all old password similarity
    checks except new and old passwords being identical
  - Updated translations from Zanata


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.4.0-4
changelog:
  - Python 2 binary package renamed to python2-pwquality
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Patsy Franklin <pfrankli@redhat.com> - 2018d-1
changelog:
  - Rebase to tzdata-2018d:
    - DST for Asia/Gaza and Asia/Hebron has changed 
      from March 31 to March 24.
    - Antarctica/Casey station changed to UTC+8 on March 11.


author: Patsy Franklin <pfrankli@redhat.com> - 2018e-1
changelog:
  - Rebase to tzdata-2018e
    - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
    - In this update, the upstream project now defaults to using
      the "vanguard" data implementation which includes negative DST offsets.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018g-1
changelog:
  - Rebase to tzdata-2018g
    - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
      planned.  This change is effective Octobober 28, 2018.
  - Include changes introduced in tzdata-2018f
    - Volgograd will change from UTC+03 to UTC+04 on 2018-10-28 at 02:00.
    - Fiji will end DST on 2019-01-13 instead of the 2019-01-20 as
      previously predicted.
    - Most of Chile will end DST on the first Saturday in April at 24:00
      and restart DST on the first Saturday in September at 24:00.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018i-1
changelog:
  - Rebase to tzdata-2018i (includes changes from tzdata-2018h)
    - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
    - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
    - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
      transition with the Qyzylorda change.
    - Metlakatla, Alaska will observe PST for this winter only.
    - Predict that Morocco will continue to adjust clocks around Ramadan.
    - Also include predictions for Iran from 2038 through 2090.


author: Patsy Griffin Franklin <patsy@redhat.com> - 2019a-1
changelog:
  - Rebase to tzdata-2019a
    - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
      previously predicted.
    - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
      of Pacific standard time.


author: Patsy Griffin <patsy@redhat.com> - 2019b-1
changelog:
  - Rebase to tzdata-2019b
    - Brazil will no longer observe DST going forward.
    - The 2019 spring transition for Palestine occurred 03-29, not 03-30.


author: Patsy Griffin <patsy@redhat.com> - 2019c-1
changelog:
  - Rebase to tzdata-2019c
    - Fiji will observe DST from 2019-11-10 to 2020-01-12.
    - Norfolk Island will begin observing Australian-style DST on 2019-10-06.


author: Carl George <carl@george.computer> - 1.6.1-1
changelog:
  - Latest upstream
  - Add patch0 to remove pytest-{cov,runner} deps
  - Share doc and license dir between subpackages
  - Enable EPEL PY3 build


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2
changelog:
  - Add support for OpenSSL provided random data
  - Disable often failing unit test random_test
  - Add /dev/urandom to chroot


author: ZhouJie <zhoujie@nfschina.com> - 32:9.11.4-27.P2
changelog:
  - Bug #0363887: 修复问题
  - CVE-2020-8622
  - CVE-2020-8624
  - CVE-2021-25214
  - CVE-2020-8623
  - CVE-2020-8617


author: Petr Menšík <pemensik@redhat.com> - 2.79-15
changelog:
  - Fix various issues in dnssec validation (CVE-2020-25681)
  - Accept responses only on correct sockets (CVE-2020-25684)
  - Use strong verification on queries (CVE-2020-25685)


author: He Chunni <chunnni@nfschina.com> [4.19.113-11.nfs]
changelog:
  - Add patches for huawei-NOF supports. PatchList:
  - 0005-implement-Enhanced-Command-Retry.patch
  - 0010-introduce-a-helper-function-for-controller-deletion.patch
  - 0011-avoid-that-deleting-a-controller-triggers-a-circular.patch
  - 0012-put-ns_head-ref-if-namespace-fails-allocation.patch
  - 0014-remove-redundant-reference-between-ib_device-and-tag.patch
  - 0018-use-dynamic-dma-mapping-per-command.patch
  - 0020-fix-memory-leak-caused-by-incorrect-subsystem-free.patch
  - 0021-Fix-extra-device_put-call-on-error-path.patch
  - 0022-fix-possible-use-after-free-in-connect-error-flow.patch
  - 0023-blk-mq-introduce-blk_mq_tagset_wait_completed_reques.patch
  - 0024-nvme-wait-until-all-completed-request-s-complete-fn.patch
  - 0025-nvme-don-t-abort-completed-request-in-nvme_cancel.patch
  - 0026-nvme-enable-aen-regardless-of-the-presence-of-I-O.patch
  - 0027-nvme-rdma-fix-possible-use-after-free-in-connect.patch
  - 0028-nvme-Restart-request-timers-in-resetting-state.patch
  - 0030-nvme-introduce-Command-Aborted-By-host-status-code.patch
  - 0031-nvme-Translate-more-status-codes-to-blk_status.patch
  - 0032-nvme-rdma-Avoid-double-freeing-of-async-event-data.patch
  - 0033-nvme-Add-compat_ioctl-handler-for-NVME_IOCTL_SUBMIT.patch
  - 0034-nvme-Fix-ctrl-use-after-free-during-sysfs-deletion.patch
  - 0035-nvme-Make-nvme_uninit_ctrl-symmetric-to-nvme_init.patch
  - 0036-nvme-Fix-controller-creation-races-with-teardown.patch
  - 0037-nvme-multipath-do-not-reset-on-unknown-status.patch
  - 0038-nvme-fix-deadlock-caused-by-ANA-update-wrong-locking.patch
  - 0039-nvme-release-namespace-head-reference-on-error.patch
  - 0040-nvme-unlink-head-after-removing-last-namespace.patch
  - 0041-nvme-disable-streams-when-get-stream-params-failed.patch
  - 0042-nvme-multipath-fix-deadlock-between-ana_work-and.patch
  - 0043-nvme-don-t-protect-ns-mutation-with-ns-head-lock.patch
  - 0044-nvme-multipath-fix-deadlock-due-to-head-lock.patch
  - 0045-nvme-multipath-fix-bogus-request-queue-reference-put.patch
  - 0046-nvme-clear-any-SGL-flags-in-passthru-commands.patch
  - 0047-nvme-rdma-serialize-controller-teardown-sequences.patch
  - 0048-reject-I-O-to-offline-device.patch
  - 0049-fix-possible-deadlock-when-I-O-is-blocked.patch
  - 0050-explicitly-update-mpath-disk-capacity-on-revalidation.patch
  - 0051-retry-if-status-code-cmd-interrupted.patch
  - 0052-modify-default-value-to-reconnect-forever.patch
  - 0053-fix-busy-error-code-caused-io-error.patch
  - 0054-ns-not-ready-caused-io-error.patch
  - 0055-fix-nvme_stop_queues-cost-long-time-error.patch
  - 0056-fix-keep-alive-use-qp-after-free-error.patch
  - 0057-fix-aen-enable-timeout-caused-host-coredump.patch
  - 0058-submit-io-fail-with-status-NVME_SC_HOST_PATH_ERROR.patch
  - 0059-add-module-param-to-turn-off-inline-data-dynamically.patch
  - 0060-fix-crash-casue-by-destroy-id-while-resolving-addr.patch
  - 0061-fix-crash-casue-by-get-conn-reject-after-establish.patch
  - 0062-fix-crash-cause-by-dup-cid-from-target.patch
  - 0063-nvme-rdma-fix-timeout-handler.patch
  - 0064-nvme-rdma-cancel-async-events-before-freeing-event.patch
  - 0065-nvme-add-proper-discard-setup-for-the-multipath-devi.patch
  - 0066-nvme-fix-controller-removal-race-with-scan-work.patch
  - 0067-reject-IO-to-offline-device-second.patch
  - 0068-nvme-multipath-round-robin-I-O-policy.patch


author: Devrim Gündüz <devrim@gunduz.org> - 6.2.0-1
changelog:
  - Update to 6.2.0
  - Applied https://src.fedoraproject.org/rpms/proj/pull-request/6 by
    Orion Poplawski.


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-8
changelog:
  - 1640919 - augroup fedora, test case failure: /CoreOS/vim/Regression/bz241308-use-augroup-for-rh-autocmds


author: lvqian<lvqian@nfschina.com>[4.19.113-14.nfs]
changelog:
  -Bug#0364103:修复问题，修改kernerl-x86_64选项
  -CONFIG_HZ_250=y
  -#CONFIG_IRQ_TIME_ACCOUNTING is not set
  -XCONFIG_PARAVIRT_TIME_ACCOUNTING is not set


author: zhoujie<zhoujie@nfschina.com>[4.19.113-15.nfs]
changelog:
  - BUG#0367801:修复问题，添加kernel-CVE-2020-14386.patch
  - BUG#0367803:优化unixbanch,添加0003-kernel-schedule-optimiztion.patch
  - Bug#0363621:修复问题，增加驱动9500HBA卡和9560RAID卡
  - 0079: nfs-mpt3sas-zj.patch  9500HBA卡
  - 0080: nfs-megaraid-zj.patch  9560RAID卡


author: zhangchunchao <chunchao@nfschina.com> - 29.19.1.13-4.nfs.2.19
changelog:
  - 海光性能优化方案, 禁用irqbalance,numad,psacct,ksmtuned,cups-browsed服务开机自启动
  - 寄送用户intial-setup 禁用
  - 0007-add-disable-service-script.patch


author: xunian <xunian@nfschina.com> - 29.19.1.13-4.nfs.2.20
changelog:
  - 修复bug:0361823,选择分区格式“LVM简单配置”自动分区，安装程序报错.
  - 由于lvm thin pool模式下无法完成系统备份，因此该模式下，安装时不做备份操作。
  - 添加anaconda-29.19.1.13-for-lvmthin-partition.patch


author: xunian <xunian@nfschina.com> - 29.19.1.13-4.nfs.2.21
changelog:
  - 修复系统安装时选择xfs格式文件系统，无法完成系统安装过程的备份操作
  -（与partclone软件包0.2.73-2nfs同解决该问题）；
  - Add anaconda-29.19.1.13-LvmDefaultXfs-RecorveryDefaultExt4.patch


author: zhoujie <zhoujie@nfschina.com> - 239-20.nfs.3
changelog:
  - fix bug036651:netperf的tcp_cc测试时出现大量未关闭连接，导致测试失败问题。
  - 修改sysctl.conf.README 文件
  - net.ipv4.tcp_timestamps = 1 (原为net.ipv4.tcp_timestamps = 0)
  - net.ipv4.tcp_tw_reuse = 1 (新增)


author: xunian<xunian@nfschina.com>[4.19.113-16.nfs]
changelog:
  - BUG#0369247:移植修复CVE漏洞:
  - Patch000083: kernel-CVE-2021-38160.patch
  - Patch000084: kernel-CVE-2021-38199.patch ,nfs4client.c连接设置顺序错误
  - Patch000085: kernel-CVE-2021-38205.patch
  - Patch000086: kernel-CVE-2021-38207.patch
  - Patch000087: kernel-CVE-2021-20317.patch
  - Patch000088: kernel-CVE-2021-41864.patch, bpf/stackmap.
  - Patch000089: kernel-CVE-2021-42008.patch
  - Patch000090: kernel-CVE-2021-42739.patch
  - Patch000091: kernel-cve-2021-33909.patch


author: zhoujie <zhoujie@nfschina.com>- 4.19.113-12.nfs.3
changelog:
  - 修改CONFIG_SCHED_AUTOGROUP        y  -> not set
  - 修改CONFIG_PARAVIRT_TIME_ACCOUNTING    y   -> not set


author: Liang Zhihao<zhihao@cpu-os.ac.cn> - 3.28.2-28
changelog:
  - bug0358555:在settings需要添加网络设置入口按钮
    Patch: 0028-fix-0358555-need-to-add-button-to-access-Connetcion-.patch


author: Jan Rybar <jrybar@redhat.com> - 0.115-2
changelog:
  - Error message about getting authority is too elaborate (forward of #1342855)
  - Bus disconnection report moved to debug mode (forward of #1249627)


author: Jan Rybar <jrybar@redhat.com> - 0.115-7
changelog:
  - pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
  - Mitigation of regression caused by fix of CVE-2018-19788
  - Resolves: rhbz#1693781
  - Resolves: rhbz#1693814


author: zhangyujing <zhangyujing1@huawei.com> - 6.8-2.1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:setcifsacl: fix adding ACE when owner sid in unexpected location
         cifs.upcall: fix a compiler warning


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.9-2.git17a6101
changelog:
  - Update Source to latest upstream commit
    * Previous patches 0001-0003 are included in this version
  - Rename files
    * Previous patches 0004-0011 are now patches 0002-0009
  - Add 0001-libmultipath-dm_is_mpath-cleanup.patch
    * This patch has been submitted upstream


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.7.9-4.git2df6110
changelog:
  - Update Source to latest upstream commit
    * previous patch 0001-libmultipath-dm_is_mpath-cleanup.patch is included
      in this commit
  - Rename files
    * Previous patches 0002-0009 are now patches 0006-0013
  - Add 0001-BZ-1668693-disable-user_friendly_names-for-NetApp.patch
  - Add 0002-libmultipath-handle-existing-paths-in-marginal_path-.patch
  - Add 0003-multipathd-cleanup-marginal-paths-checking-timers.patch
  - Add 0004-libmultipath-fix-marginal-paths-queueing-errors.patch
  - Add 0005-libmultipath-fix-marginal_paths-nr_active-check.patch
    * The above 5 patches have been submitted upstream
  - Add 0014-RH-Fix-nvme-compilation-warning.patch
    * This change is only necessary because of Red Hat compilation
      differences.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.7.9-5.git2df6110
changelog:
  - Rename files
    * Previous patch 0006-0014 are now patches 0008-0016
  - Add 0006-multipathd-avoid-null-pointer-dereference-in-LOG_MSG.patch
  - Add 0007-multipath-blacklist-zram-devices.patch
    * The above 2 patches have been submitted upstream
  - Resolves: bz #1672761


author: openEuler Buildteam <buildteam@openeuler.org> - 4.3.6-31
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: reducing getifaddrs calls and improving code performance


author: openEuler Buildteam <buildteam@openeuler.org> - 4.3.6-32
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix dhcpd 2038 problem;
         Adds address prefix len to dhclient cli


author: Chen Yushan <chenyushan@kylinos.cn> - 8.3.1-4.6
changelog:
  - sync source from JNS.
  - modify configure parameter to the one provided by JNS.
  - add libssp library.
  - modify macro  to 10.
  - remove /usr/lib/rpm/find-lang.sh /builddir/build/BUILDROOT/gcc-8.3.0-4.9.ky10.sw_64 to fix no translations for sw_64.


author: Chen Yushan <chenyushan@kylinos.cn> - 8.3.1-4.7
changelog:
  - sync source to a3885354d4f9d9eff25802c03cde56b9a0f6af16 from JNS.
  - add gcc-8.3.0-20200805.patch.
  - configure add "--enable-tls"


author: openEuler Buildteam <buildteam@openeuler.org> - 2.23.0-9
changelog:
  - fix CVE-2019-1348 CVE-2019-1349 CVE-2019-1350 CVE-2019-1351 CVE-2019-1352 
    CVE-2019-1353 CVE-2019-1354 CVE-2019-1387 CVE-2019-19604
    fix test error


author: Chen Yushan <chenyushan@kylinos.cn> - 2.28-73
changelog:
  - sync source from JNS.
  - modify configure parameter to the one provided by JNS. 
  - add glibc-2.28-check.patch to fix check error.
  - spec change libnsl.so.1 to libnsl.so.1.1.
  - spec add nss_nis and nss_nisplus.
  - remove libcrypt library to fix the conflict with libxcrypt-devel


author: Chen Yushan <chenyushan@kylinos.cn> - 2.28-74
changelog:
  - add glibc-2.28-sigprocmask.patch to fix sigprockmask assert error.
  - remove libnsl.so,rpcsvc/{nis*,yp*}, has been provided by libnsl2.


author: wjw <wengjiawei@kylinos.cn> - 2.28-79
changelog:
  - glibc git ver aa0cc5241
  - fix memset for multi thread read & write unsafe
  - add configure --with-cpu=sw6b


author: gulining<gulining1@huawei.com> - 3.30.1-3.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:gnome control center clickassist fix
  	gnome control center fix repetitivewallpapers
  	fix used passwd error capture
  	gnome control center change translation when changing password


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: Chen Yushan <chenyushan@kylinos.cn> - 52.9.0-5.p02
changelog:
  - SunwayPatch: firefox-52.9.0esr-platform-sw_64.patch
  - SunwayPatch: firefox-52.9.0esr-libc-sw_64.patch
  - to implement sw_64 arch


author: quzhilin <quzhilin@kylinos.cn> - 1.8.22-2.xgs.07
changelog:
  - add network-manager-applet-1.8.22-modify-applet-dialogs.patch
  - 修复bug:root用户取消勾选"所有用户都可以连接这个网络"后，非root用户查看连接信息会导致右下角图标闪退;


author: hy-euler <eulerstoragemt@huawei.com> - 3.6.2-5
changelog:
  - Type:enhancemnet
  - ID:NA
  - SUG:NA
  - DESC:add fedora patches for displaying more information while running lspci


author: wangxiao<wangxiao65@huawei.com> - 1.58-3.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Handle unknown op in DBD SQLite VirtualTable PerlData
         added a boilerplace for test
         fixed for older DBI
  - Package init


author: shenyangyang <shenyangyang4@huawei.com> - 0.625-14
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(IO::Scalar) and perl(Test::Pod::Coverage)


author: shenyangyang <shenyangyang4@huawei.com> - 12.2-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add provides of pulseaudio-libs-devel(aarch-64) needed by libmikmod-devel


author: Shui Hengcheng <shuihengcheng@kylinos.cn> - 2.9-1.se.5.p01
changelog:
  - add patch: libselinux-20200318.patch
  - add patch: add-selinux_restorecon.patch
  - remove label "Provides:libselinux-utils" and "Obsoletes:libselinux-utils" from spec
  - add "/usr/sbin/selinux_restorecon" to "%files devel" in spec


author: shenyangyang <shenyangyang4@huawei.com> - 1:4.6.2-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add build requires of texinfo to solve the problem of build


author: changhao <wuchanghao@kylinos.cn> - 3.14.2-50.xgs.23
changelog:
  - add selinux-policy-20200921-xgs-docker-pam.patch 
  - allow docker setexec, set /etc/authselect as smzy_etc_pam_d_t label.


author: changhao <wuchanghao@kylinos.cn> - 3.14.2-50.xgs.24
changelog:
  - add selinux-policy-20201123-xgs-virtual-network.patch 
  - add selinux-policy-20201205-xgs-netlabel.patch
  - add selinux-policy-20201205-xgs-netlabel2.patch
  - add selinux-policy-20210107-xgs-base-probe.patch
  - add selinux-policy-20210107-xgs-base-probe.patch
  - add selinux-policy-20201218-xgs-3in1-test.patch
  - add selinux-policy-20201228-xgs-3in1-probe.patch 
  - add selinux-policy-20210108-xgs-add-superqh.patch
  - add superqh


author: openEuler Buildteam <buildteam@openeuler.org> - 3.24.0-7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Fix CVE-2019-19923 CVE-2019-19924 CVE-2019-19925 CVE-2019-19926 CVE-2019-20218


author: Chen Yushan <chenyushan@kylinos.cn> - 3.24.0-9.p01
changelog:
  - SunwayPatch: sqlite-src-3240000-platform-sw_64.patch
  - to implement sw_64 arch
  - SunwaySpec: remove check


author: lilinmao <lilinmao@kylinos.cn> - 20180414-28.p04
changelog:
  - add texlive-base-m-tx-0.63a-buffer-overflow.patch
  - disable format-security,disable-luajittex disable-mfluajit


author: Chen Yushan <chenyushan@kylinos.cn> - 20180414-28.p07
changelog:
  - SunwayPatch: texlive-20180414-platform-sw_64.patch
  - to implement sw_64 arch
  - SunwaySpec: del -Werror=format-security;disable-luajittex disable-mfluajit for sw_64


author: wangzhitao <wangzhitao@kylinos.cn> - 2.8.4-4.xgs.01
changelog:
  - 解决多次插拔U盘，udisk2.service服务失败的问题. 
  - 更新上个版本的xgs补丁:udisks-umount-need-auth.patch、udisks-xgs-change-show-size-unit.patch


author: li qian <liqian@kylinos.cn> - 2.2.1-2.01
changelog:
  - in arm64 install system failed  in click start install 
  - 0001-virt-manager-exec-start-install-failed-due-to-cursor.patch


author: Chen Yushan <chenyushan@kylinos.cn> - 2.22.2-6.p02
changelog:
  - SunwayPatch: webkitgtk-2.22.2-platform-sw_64.patch
  - to implement sw_64 arch
  - SunwaySpec: -DUSE_SYSTEM_MALLOC=ON and -DENABLE_JIT=OFF for sw_64 arch


author: Chen Yushan <chenyushan@kylinos.cn> - 2.4.11-5.p01
changelog:
  - SunwayPatch: webkitgtk-2.4.11-platform-sw_64.patch
  - to implement sw_64 arch
  - SunwaySpec: -DENABLE_YARR_JIT=0 and --disable-jit for sw_64 arch


author: yu.sun <sunyu@kylinos.cn> - 3.34.0-1.xgs.1
changelog:
  - downgrade to desktop version - 3.18.1-1kord10k4xgs5 (from Sat May 9 2020 weizheng.cheng <chengweizheng@kylinos.cn>)


