# changelog

author: Tom Callaway <spot@fedoraproject.org> - 3.6.2-4
changelog:
  - fix conditionals so that Fedora builds against system openblas for lapack/blas
    and we only generate the R lapack/blas libs on RHEL 5-6-7 (where system lapack/openblas
    is not reliable). Thanks to Dirk Eddelbuettel for pointing out the error.


author: Martin Kutlak <mkutlak@redhat.com> - 2.10.9-9
changelog:
  - spec: turn on --enable-native-unwinder aarch64
  - spec: enable addon-vmcore on aarch64
  - daemon: Fix double closed fd race condition
  - dbus: Add configuration for Python3
  - Add autogen.sh
  - Resolves: #1646569, #1651676, #1650619, #1650622, #1652676


author: Martin Kutlak <mkutlak@redhat.com> - 2.10.9-10
changelog:
  - spec: Add-explicit-package-version-requirement-of-abrt-libs
  - cli: get list of possible workflows for problem_data_t
  - cli: mark the suggestion text for translation
  - cli list: show a hint about creating a case in RHTS
  Resolves: #1649753


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-18.20140228gitc2f5d13
changelog:
  - fix CVE-2016-8859 (#1387112, #1387113)
  - probably fix CVE-2015-3796 (see upstream issue #37 and
    https://bugs.chromium.org/p/project-zero/issues/detail?id=428)
  - update python bindings subpackage to current guidelines
  - fix parallel installation of multilib packages (patch by joseba.gar at gmail.com)
    (bug #1275830)


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-25.20140228gitc2f5d13
changelog:
  - improve python bindings build patch based on upstream PR
  - fix infinite loop for certain regexps (upstream issue #50)
  - switch to python3 (#1634955)


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.8-1
changelog:
  - Respect changesok password policy for root password (mkolman)
    Resolves: rhbz#1584145
  - Fix default value for pwpolicy emptyok (mkolman)
    Resolves: rhbz#1664704


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.9-1
changelog:
  - Adjust the exclude arguments for livepayloads (bcl)
    Related: rhbz#1684542
  - Recreate the BLS entries when using liveimg (bcl)
    Resolves: rhbz#1684542
  - Cache the liveimg tar kernel list (bcl)
    Related: rhbz#1684542
  - Add common function for creating rescue images (bcl)
    Related: rhbz#1684542
  - Re-generate BLS loader file snippets on live installs (awilliam)
    Related: rhbz#1684542


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.10-1
changelog:
  - Do not try to mount cdrom source also if it has been mounted in dracut.
    (rvykydal)
    Resolves: rhbz#1733507


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.11-1
changelog:
  - Fix noverifyssl when downloading .treeinfo file (jkonecny)
    Resolves: rhbz#1726156
    Resolves: rhbz#1723811


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.12-1
changelog:
  - Add the install class for Red Hat Virtualization (vponcova)
    Resolves: rhbz#1753316
  - Extend support for custom storage checking (vponcova)
    Related: rhbz#1753316
  - Enable to define the autopart type in an install class (vponcova)
    Related: rhbz#1753316


author: Nian Yanchuan <yanchuan@nfschina.com> - 29.19.1.13-4.nfs.2.4
changelog:
  - anaconda-29.19.1.13-disable-ima-and-selinux.patch
  - 不要备份/boot/efi，因为某些服务器上备份该分区后，导致无法进入备份还原小系统。
  - 默认不要开启ima和selinux(圣亮的提议).


author: jiwu <jiwu@cpu-os.ac.cn> - 29.19.1.13-4.nfs.2.5
changelog:
  - Fix: #0357278 系统安装过程, 点击帮助按钮无弹窗, 缺少系列帮助文档文件, 不显示帮助按钮
  - anaconda-29.19.1.13-no-show-help-button.patch


author: Nian Yanchuan <yanchuan@nfschina.com> - 29.19.1.13-4.nfs.2.6
changelog:
  - anaconda-29.19.1.13-automatic-partition.patch
  - bug 357304 357237，自动分区时，重新设计各分区大小，/:60%  /recovery:25%  /home:10%


author: Nian Yanchuan <yanchuan@nfschina.com> - 29.19.1.13-4.nfs.2.7
changelog:
  - anaconda-29.19.1.13-recovery-disk-first.patch
  - 创建分区时，/recovery分区的磁盘符尽量靠前，且限制/recovery分区的最大容量为800GB，
  - 否则，安装完系统后可能无法引导进入备份还原系统.


author: Nian Yanchuan <yanchuan@nfschina.com> - 29.19.1.13-4.nfs.2.8
changelog:
  - anaconda-29.19.1.13-automatic-partition-v2.patch
  - 重新设置自动分区规则. /boot/占1GB，/recovery占25%，且最大不超过800GB;磁盘总容量大于100GB时，
  - swap分区最小为16GB; /home占剩余容量的15%，最终剩余的空间给/分区.


author: Nian Yanchuan <yanchuan@nfschina.com> - 29.19.1.13-4.nfs.2.11
changelog:
  - anaconda-29.19.1.13-remove-installation_source.patch 移除 "安装源"
  - anaconda-29.19.1.13-recovery-space.patch  
  - anaconda-29.19.1.13-4.nfs.2.8将recovery分区最大值限制为800GB，而且代码改得还有问题，
  - 经测试，不需要限制recovery分区的最大值，移除该限制。


author: jiwu <jiwu@nfschina.com> - 29.19.1.13-4.nfs.2.12
changelog:
  - 0358132: 文本安装模式，默认安装组件不是Minimal Install
  - anaconda-29.19.1.13-default-gui-in-text-installation-mode.patch


author: zhangchunchao <chunchao@nfschina.com> - 29.19.1.13-4.nfs.2.19
changelog:
  - 海光性能优化方案, 禁用irqbalance,numad,psacct,ksmtuned,cups-browsed服务开机自启动
  - 寄送用户intial-setup 禁用
  - 0007-add-disable-service-script.patch


author: xunian <xunian@nfschina.com> - 29.19.1.13-4.nfs.2.20
changelog:
  - 修复bug:0361823,选择分区格式“LVM简单配置”自动分区，安装程序报错.
  - 由于lvm thin pool模式下无法完成系统备份，因此该模式下，安装时不做备份操作。
  - 添加anaconda-29.19.1.13-for-lvmthin-partition.patch


author: xunian <xunian@nfschina.com> - 29.19.1.13-4.nfs.2.21
changelog:
  - 修复系统安装时选择xfs格式文件系统，无法完成系统安装过程的备份操作
  -（与partclone软件包0.2.73-2nfs同解决该问题）；
  - Add anaconda-29.19.1.13-LvmDefaultXfs-RecorveryDefaultExt4.patch


author: Tom Stellard <tstellar@redhat.com> - 2.7.8-2
changelog:
  - Use go-toolset-7 instead of golang
  - Package now must be built with: rhpkg --release rhel-8.0-go-toolset


author: Steve Grubb <sgrubb@redhat.com> 3.0-0.8.20180831git0047a6c
changelog:
  resolves: rhbz#1639745 - build requires go-toolset-7 which is not available
  resolves: rhbz#1643567 - service auditd stop exits prematurely
  resolves: rhbz#1616428 - Update git snapshot of audit package
  - Remove static libs subpackage


author: Pavel Březina <pbrezina@redhat.com> - 1.0-7
changelog:
  - pam_systemd shouldn't be optional in system-auth (RHBZ #1643928)
  - compat tool: support --enablerequiresmartcard (RHBZ #1649277)
  - compat tool: support --smartcardaction=0 (RHBZ #1649279)
  - remove ecryptfs from authselect since it is not present in rhel8 (RHBZ #1649282)
  - authselect enable-features should error on unknown features (RHBZ #1651637)


author: Pavel Březina <pbrezina@redhat.com> - 1.0-9
changelog:
  - fix sources for official rhel translations (RHBZ #1608286)
  - fix coverity warnings for authselect enable-features should error on unknown features (RHBZ #1651637)


author: Pavel Březina <pbrezina@redhat.com> - 1.0-12
changelog:
  - make authselect work with selinux disabled (RHBZ #1668025)
  - require smartcard authentication only for specific services (RHBZ #1665058)
  - update translations (RHBZ #1608286)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.0-13
changelog:
  - Revert pam_systemd.so to be optional
  - Resolves: #rhbz1643928 - pam_systemd shouldn't be optional in system-auth


author: Pavel Březina <pbrezina@redhat.com> - 1.1-1
changelog:
  - Rebase to authselect-1.1 (RHBZ #1685516)
  - Notify that oddjob-mkhomedir needs to be enabled manually (RHBZ #1694103)
  - Ask for smartcard insertion when smartcard authentication is required (RHBZ #1674397)
  - Update translations (RHBZ #1689973)


author: Zhang Tao <zhangtao@cpu-os.ac.cn> - 1.1-3
changelog:
  - Add "enforce_for_root" to pam system-auth,password-auth
  - Patch: 1001-pam-add-enforce-for-root.patch


author: Iryna Shcherbina <ishcherb@redhat.com> - 2.3.4-7
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Zhang Tao <zhangtao@cpu-os.ac.cn> - 3.2-1.nfs.1
changelog:
  - Adapt to nfs server system 4.0 and centos 8.
  - Add backup and recover system menuentry in grub.cfg.


author: He Chunni <chunni@nfschina.com> - 3.28.0-4
changelog:
  - Modify localedir in meson-build and Chinese localization.
  - Add baobab-modify-localedir-Chinese-localization.patch


author: He Chunni <chunni@nfschina.com> - 3.28.0-5
changelog:
  - Remove MimeType from desktop file for nemo.
    Patch: 0001-Remove-MimeType-from-desktop-file.patch.


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2
changelog:
  - Add support for OpenSSL provided random data
  - Disable often failing unit test random_test
  - Add /dev/urandom to chroot


author: ZhouJie <zhoujie@nfschina.com> - 32:9.11.4-27.P2
changelog:
  - Bug #0363887: 修复问题
  - CVE-2020-8622
  - CVE-2020-8624
  - CVE-2021-25214
  - CVE-2020-8623
  - CVE-2020-8617


author: Nick Clifton <nickc@redhat.com> - 2.32-15
changelog:
  - Stop gold from aborting when it encounters input sections with the same name and different flags.  (#1722715)


author: He Chunni <chunnni@nfschina.com> [4.19.113-10.nfs]
changelog:
  - kernel-CVE-2019-18198.patch
  - kernel-CVE-2019-19602.patch
  - kernel-CVE-2019-20810.patch
  - kernel-CVE-2020-11565.patch
  - kernel-CVE-2020-11668.patch
  - kernel-CVE-2020-12464.patch
  - kernel-CVE-2020-12657.patch
  - kernel-CVE-2020-12659.patch
  - kernel-CVE-2020-12768.patch
  - kernel-CVE-2020-12770.patch
  - kernel-CVE-2020-13974.patch
  - kernel-CVE-2018-20784.patch


author: He Chunni <chunnni@nfschina.com> [4.19.113-11.nfs]
changelog:
  - Add patches for huawei-NOF supports. PatchList:
  - 0005-implement-Enhanced-Command-Retry.patch
  - 0010-introduce-a-helper-function-for-controller-deletion.patch
  - 0011-avoid-that-deleting-a-controller-triggers-a-circular.patch
  - 0012-put-ns_head-ref-if-namespace-fails-allocation.patch
  - 0014-remove-redundant-reference-between-ib_device-and-tag.patch
  - 0018-use-dynamic-dma-mapping-per-command.patch
  - 0020-fix-memory-leak-caused-by-incorrect-subsystem-free.patch
  - 0021-Fix-extra-device_put-call-on-error-path.patch
  - 0022-fix-possible-use-after-free-in-connect-error-flow.patch
  - 0023-blk-mq-introduce-blk_mq_tagset_wait_completed_reques.patch
  - 0024-nvme-wait-until-all-completed-request-s-complete-fn.patch
  - 0025-nvme-don-t-abort-completed-request-in-nvme_cancel.patch
  - 0026-nvme-enable-aen-regardless-of-the-presence-of-I-O.patch
  - 0027-nvme-rdma-fix-possible-use-after-free-in-connect.patch
  - 0028-nvme-Restart-request-timers-in-resetting-state.patch
  - 0030-nvme-introduce-Command-Aborted-By-host-status-code.patch
  - 0031-nvme-Translate-more-status-codes-to-blk_status.patch
  - 0032-nvme-rdma-Avoid-double-freeing-of-async-event-data.patch
  - 0033-nvme-Add-compat_ioctl-handler-for-NVME_IOCTL_SUBMIT.patch
  - 0034-nvme-Fix-ctrl-use-after-free-during-sysfs-deletion.patch
  - 0035-nvme-Make-nvme_uninit_ctrl-symmetric-to-nvme_init.patch
  - 0036-nvme-Fix-controller-creation-races-with-teardown.patch
  - 0037-nvme-multipath-do-not-reset-on-unknown-status.patch
  - 0038-nvme-fix-deadlock-caused-by-ANA-update-wrong-locking.patch
  - 0039-nvme-release-namespace-head-reference-on-error.patch
  - 0040-nvme-unlink-head-after-removing-last-namespace.patch
  - 0041-nvme-disable-streams-when-get-stream-params-failed.patch
  - 0042-nvme-multipath-fix-deadlock-between-ana_work-and.patch
  - 0043-nvme-don-t-protect-ns-mutation-with-ns-head-lock.patch
  - 0044-nvme-multipath-fix-deadlock-due-to-head-lock.patch
  - 0045-nvme-multipath-fix-bogus-request-queue-reference-put.patch
  - 0046-nvme-clear-any-SGL-flags-in-passthru-commands.patch
  - 0047-nvme-rdma-serialize-controller-teardown-sequences.patch
  - 0048-reject-I-O-to-offline-device.patch
  - 0049-fix-possible-deadlock-when-I-O-is-blocked.patch
  - 0050-explicitly-update-mpath-disk-capacity-on-revalidation.patch
  - 0051-retry-if-status-code-cmd-interrupted.patch
  - 0052-modify-default-value-to-reconnect-forever.patch
  - 0053-fix-busy-error-code-caused-io-error.patch
  - 0054-ns-not-ready-caused-io-error.patch
  - 0055-fix-nvme_stop_queues-cost-long-time-error.patch
  - 0056-fix-keep-alive-use-qp-after-free-error.patch
  - 0057-fix-aen-enable-timeout-caused-host-coredump.patch
  - 0058-submit-io-fail-with-status-NVME_SC_HOST_PATH_ERROR.patch
  - 0059-add-module-param-to-turn-off-inline-data-dynamically.patch
  - 0060-fix-crash-casue-by-destroy-id-while-resolving-addr.patch
  - 0061-fix-crash-casue-by-get-conn-reject-after-establish.patch
  - 0062-fix-crash-cause-by-dup-cid-from-target.patch
  - 0063-nvme-rdma-fix-timeout-handler.patch
  - 0064-nvme-rdma-cancel-async-events-before-freeing-event.patch
  - 0065-nvme-add-proper-discard-setup-for-the-multipath-devi.patch
  - 0066-nvme-fix-controller-removal-race-with-scan-work.patch
  - 0067-reject-IO-to-offline-device-second.patch
  - 0068-nvme-multipath-round-robin-I-O-policy.patch


author: zhoujie <zhoujie@nfschina.com>- 4.19.113-12.nfs.3
changelog:
  - 修改CONFIG_SCHED_AUTOGROUP        y  -> not set
  - 修改CONFIG_PARAVIRT_TIME_ACCOUNTING    y   -> not set


author: lvqian<lvqian@nfschina.com>[4.19.113-14.nfs]
changelog:
  -Bug#0364103:修复问题，修改kernerl-x86_64选项
  -CONFIG_HZ_250=y
  -#CONFIG_IRQ_TIME_ACCOUNTING is not set
  -XCONFIG_PARAVIRT_TIME_ACCOUNTING is not set


author: zhoujie<zhoujie@nfschina.com>[4.19.113-15.nfs]
changelog:
  - BUG#0367801:修复问题，添加kernel-CVE-2020-14386.patch
  - BUG#0367803:优化unixbanch,添加0003-kernel-schedule-optimiztion.patch
  - Bug#0363621:修复问题，增加驱动9500HBA卡和9560RAID卡
  - 0079: nfs-mpt3sas-zj.patch  9500HBA卡
  - 0080: nfs-megaraid-zj.patch  9560RAID卡


author: xunian<xunian@nfschina.com>[4.19.113-16.nfs]
changelog:
  - BUG#0369247:移植修复CVE漏洞:
  - Patch000083: kernel-CVE-2021-38160.patch
  - Patch000084: kernel-CVE-2021-38199.patch ,nfs4client.c连接设置顺序错误
  - Patch000085: kernel-CVE-2021-38205.patch
  - Patch000086: kernel-CVE-2021-38207.patch
  - Patch000087: kernel-CVE-2021-20317.patch
  - Patch000088: kernel-CVE-2021-41864.patch, bpf/stackmap.
  - Patch000089: kernel-CVE-2021-42008.patch
  - Patch000090: kernel-CVE-2021-42739.patch
  - Patch000091: kernel-cve-2021-33909.patch


author: xunian<xunian@nfschina.com>[4.19.113-16.nfs]
changelog:
  - BUG#0369247: add CVE patch.
  - Patch000083: kernel-CVE-2021-38160.patch
  - Patch000084: kernel-CVE-2021-38199.patch ,nfs4client.c Connection setting sequence error.
  - Patch000085: kernel-CVE-2021-38205.patch
  - Patch000086: kernel-CVE-2021-38207.patch
  - Patch000087: kernel-CVE-2021-20317.patch
  - Patch000088: kernel-CVE-2021-41864.patch, bpf/stackmap.
  - Patch000089: kernel-CVE-2021-42008.patch
  - Patch000090: kernel-CVE-2021-42739.patch
  - Patch000091: kernel-cve-2021-33909.patch


author: xunian<xunian@nfschina.com>[4.19.113-17.nfs]
changelog:
  - Add CVE patch, BUGID:0370481.
  - kernel-CVE-2021-4155.patch
  - kernel-CVE-2022-22942.patch
  - kernel-CVE-2021-39685.patch
  - kernel-CVE-2021-45469.patch
  - kernel-CVE-2021-38300.patch
  - kernel-CVE-2021-3715.patch
  - kernel-CVE-2021-37576.patch
  - kernel-CVE-2021-0512.patch
  - kernel-CVE-2021-32399.patch
  - kernel-CVE-2021-33034.patch
  - kernel-CVE-2020-28374.patch


author: xunian<xunian@nfschina.com>[4.19.113-18.nfs]
changelog:
  - Add CVE patchs, total 39, BUGID: 0370765.
  - kernel-CVE-2020-26139.patch
  - kernel-CVE-2020-26558.patch
  - kernel-CVE-2020-27170.patch
  - kernel-CVE-2020-27171.patch
  - kernel-CVE-2021-0605.patch
  - kernel-CVE-2021-0941.patch
  - kernel-CVE-2021-20321.patch
  - kernel-CVE-2021-21781.patch
  - kernel-CVE-2021-23133.patch
  - kernel-CVE-2021-27363.patch
  - kernel-CVE-2021-28964.patch
  - kernel-CVE-2021-28971.patch
  - kernel-CVE-2021-28972.patch
  - kernel-CVE-2021-29154.patch
  - kernel-CVE-2021-29264.patch
  - kernel-CVE-2021-29650.patch
  - kernel-CVE-2021-3178.patch
  - kernel-CVE-2021-3348.patch
  - kernel-CVE-2021-34693.patch
  - kernel-CVE-2021-3483.patch
  - kernel-CVE-2021-3564.patch
  - kernel-CVE-2021-3573.patch
  - kernel-CVE-2021-3612.patch
  - kernel-CVE-2021-3640.patch
  - kernel-CVE-2021-3679.patch
  - kernel-CVE-2021-3744.patch
  - kernel-CVE-2021-3752.patch
  - kernel-CVE-2021-3759.patch
  - kernel-CVE-2021-3864.patch
  - kernel-CVE-2021-40490.patch
  - kernel-CVE-2021-4135.patch
  - kernel-CVE-2021-4149.patch
  - kernel-CVE-2021-4157.patch
  - kernel-CVE-2021-43389.patch
  - kernel-CVE-2021-43975.patch
  - kernel-CVE-2021-43976.patch
  - kernel-CVE-2021-45095.patch
  - kernel-CVE-2021-45485.patch
  - kernel-CVE-2022-0322.patch


author: xunian<xunian@nfschina.com>[4.19.113-21.nfs]
changelog:
  - Fixed #0371225 CVE 2022.
  - kernel-CVE-2022-0435.patch
  - kernel-CVE-2022-0492.patch
  - kernel-CVE-2022-0847.patch
  - kernel-CVE-2022-1055.patch
  - kernel-CVE-2022-26490.patch
  - kernel-CVE-2022-27666.patch


author: zhoujie <zhoujie@nfschina.com> [4.19.113-22.nfs]
changelog:
  - nfs-zj-fix-dereference-null-pointer.patch：
  - #0371337: mm:migrate: fix dereference a null pointer in
  - nfs-zj-fix-oops-during-rule-dump.patch：
  - #0371337: net:netfilter:nf_tables_api: use call_rcu in netlink dumps


author: xunian<xunian@nfschina.com>[4.19.113-25.nfs]
changelog:
  - Fix CVE-2022-1729.
  - Fix CVE-2021-3600.
  - Fix CVE-2020-36516.
  - Fix CVE-2021-27364.
  - Fix CVE-2021-27365.
  - Fix CVE-2021-3655.
  - Fix CVE-2021-3732.
  - Fix CVE-2021-3743.
  - Fix CVE-2021-4002.
  - Fix CVE-2021-44879.
  - Fix CVE-2021-45868.
  - Fix CVE-2022-1016.
  - Fix CVE-2022-1419.
  - Fix CVE-2022-24448.
  - Fix CVE-2022-30594.
  - Fix CVE-2022-1966.


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-142.el8]
changelog:
  - [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
  - [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
  - [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
  - [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
  - [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
  - [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
  - [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
  - [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
  - [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-143.el8]
changelog:
  - [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
  - [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
  - [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
  - [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
  - [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-144.el8]
changelog:
  - [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
  - [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
  - [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
  - [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
  - [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
  - [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
  - [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-145.el8]
changelog:
  - [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
  - [vhost] vhost: make sure log_num < in_num (Eugenio Perez) [1750882] {CVE-2019-14835}


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-146.el8]
changelog:
  - [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
  - [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
  - [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-147.el8]
changelog:
  - [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
  - [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
  - [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
  - [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}


author: John Mcwalters <john.mcwalters@oracle.com> [4.18.0-147.el8.OL8]
changelog:
  - Oracle Linux certificates (Alexey Petrenko)
  - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  - Update x509.genkey [Orabug: 24817676]


author: xunian<xunian@nfschina.com>[4.19.113-32.nfs]
changelog:
  - X86_add_hygon_family18h newly increased for 1\2\3 CPUs.
  - Add hygon family18h model4h support.
  - Add x86_mce_Increase_maximum_number_of_banks_to_64.
  - Add EDAC_amd64_Find_Chip_Select_memory_size_using_Address_Mask.


author: xunian<xunian@nfschina.com>[4.19.113-33.nfs]
changelog:
  - Delete 2022-3169, OS can't start at Dell machine.
  - Update wangxun txgbe drivers, v1.3.3。
  - Update wangxun ngbe drivers, v1.2.3。


author: minglei<minglei@nfschina.com>[4.19.113-34.nfs]
changelog:
  - Adjust northbridge devices ID for Hygon.
  - Backport some needed upstream patches:
  	x86/mce: Increase maximum number of banks to 64
  	hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs
  	x86/amd_nb: Add PCI device IDs for family 17h, model 30h
  	x86/umip: Print UMIP line only once
  	x86/umip: Make the UMIP activated message generic
  	topology: Simplify cputopology.txt formatting and wording
  	EDAC/amd64: Add Family 17h Model 30h PCI IDs
  	EDAC/amd64: Use a macro for iterating over Unified Memory Controllers
  	EDAC/amd64: Support more than two Unified Memory Controllers
  	EDAC/amd64: Set maximum channel layer size depending on family
  	EDAC/amd64: Recognize x16 symbol size
  	x86/topology: Add CPUID.1F multi-die/package support
  	x86/topology: Create topology_max_die_per_package()
  	cpu/topology: Export die_id
  	x86/topology: Define topology_die_id()
  	x86/topology: Define topology_logical_die_id()
  	EDAC/amd64: Support more than two controllers for chip selects
  	EDAC/amd64: Find Chip Select memory size using Address Mask
  	x86/CPU/AMD: Save AMD NodeId as cpu_die_id
  	EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId
  	x86/topology: Set cpu_die_id only if DIE_TYPE found
  	EDAC: Add DDR5 new memory type
  	EDAC: Add RDDR5 and LRDDR5 memory types
  - Add support for Hygon family18h model4h.
  - Add support for Hygon family18h model5h.
  - Add support for Hygon family18h model6h.
  - Delete: X86_add_hygon_family18h newly increased for 1\2\3 CPUs,by 2023.1 update.
  - Delete: hygon family18h model4h support.by 2023.1 update.
  - Delete: x86_mce_Increase_maximum_number_of_banks_to_64,by 2023.1 update.
  - Delete: EDAC_amd64_Find_Chip_Select_memory_size_using_Address_Mask,by 2023.1 update.


author: xunian<xunian@nfschina.com>[4.19.113-35.nfs]
changelog:
  - Fix CVE-2021-34981.
  - Fix CVE-2022-2588.
  - Fix CVE-2022-2663.
  - Fix CVE-2022-3028.
  - Fix CVE-2022-3061.
  - Fix CVE-2022-3565.
  - Fix CVE-2022-3567.
  - Fix CVE-2022-3621.
  - Fix CVE-2022-3635.
  - Fix CVE-2022-3649.
  - Fix CVE-2022-42895.


author: xunian<xunian@nfschina.com>[4.19.113-36.nfs]
changelog:
  - Fix: Xen vm.
  - Fix CVE-2020-27675 patch: WRITE_ONCE(evtchn_to_irq[col], -1) modifyto WRITE_ONCE(evtchn_to_irq[row][col], -1).


author: chunchao<chunchao@nfschina.com>[4.19.113-37.nfs]
changelog:
  - Fix: genirq/affinity: Remove const qualifier from node_to_cpumask argument.
  - upstream commitid: 101f85b56d03b36418bbf867f67d81710839b0ec.
  - Fix: genirq/affinity: Spread vectors on node according to nr_cpu ratio.
  - upstream commitid: b1a5a73e64e99faa5f4deef2ae96d7371a0fb5d0.
  - Fix: genirq/affinity: Improve __irq_build_affinity_masks().
  - upstream commitid: 53c1788b7d7720565214a466afffdc818d8c6e5f.
  - Fix: genirq/affinity: Add support for allocating interrupt sets.
  - upstream commitid: 6da4b3ab9a6e9b1b5f90322ab3fa3a7dd18edb19.
  - Fix: genirq/affinity: Pass first vector to __irq_build_affinity_masks().
  - upstream commitid: 060746d9e394084b7401e7532f2de528ecbfb521.
  - Fix: genirq/affinity: Move two stage affinity spreading into a helper function.
  - upstream commitid: 5c903e108d0b005cf59904ca3520934fca4b9439.
  - Fix: perf/x86/amd: Add support for Large Increment per Cycle Events.
  - upstream commitid: 5738891229a25e9e678122a843cbf0466a456d0c.
  - Fix: perf/x86/amd: Constrain Large Increment per Cycle events.
  - upstream commitid: 471af006a747f1c535c8a8c6c0973c320fe01b22.


author: chunchao <chunchao@nfschina.com>[4.19.113-38.nfs]
changelog:
  - Fix: serial: 8250: Support disabling mdelay-filled probes of 16550A variants.
  - Upstream commit id: dc56ecb81a0aa46a7e127e916df5c8fdb8364f0b.


author: zhanglei<zhanglei_hlj@nfschina.com>[4.19.113-44.nfs]
changelog:
  - add 0001-Support-running-urb-giveback-in-tasklet-context.patch
  - add 0001-Revert-usb-dwc3.patch 
  - fix FIO usb test usb controll die problem


author: xunian<xunian@nfschina.com>[4.19.113-45.nfs]
changelog:
  - Update Hygon 4 CPU v3 Codes.
  - 004-EDAC-amd64-Revert-hi_addr_offset-for-Hygon-family-18.
  - 005-EDAC-amd64-Fix-intlv_num_chan-for-Hygon-family-18h-m.
  - 006-x86-amd_nb-Get-DF-ID-from-F5-device-for-Hygon-family.
  - 007-EDAC-amd64-Adjust-UMC-channel-for-Hygon-family-18h-m.
  - 008-ALSA-hda-Add-Hygon-HD-Audio-support.
  - 009-ALSA-hda-Fix-single-byte-write-failure-issue-for-Hyg.
  - 010-perf-x86-uncore-Add-L3-PMU-support-for-Hygon-family.
  - 011-Add-support-for-Hygon-family-18h-model-4h-5h-6h-grou.


author: Pavel Raiskup <praiskup@redhat.com> - 3.3.2-4
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-7
changelog:
  - fix use-after-free in delayed newc link processing (#1602575)
  - fix a few obvious resource leaks and strcpy() misuses (#1602575)


author: Neal Gompa <ngompa13@gmail.com> - 4.20.2-1
changelog:
  - New upstream release
  - Properly split out libraries into libs subpackages
  - Slightly modernize the spec


author: Colin Walters <walters@verbum.org> - 0.1.7-1
changelog:
  - New upstream version;
    https://github.com/projectatomic/bubblewrap/releases/tag/v0.1.7
  - Resolves: #1411814


author: Jia <lina@cpu-os.ac.cn> - 1.0.6-27
changelog:
  - add patch bzip2-fixbug_0357269.patch
  - patch from https://gitlab.com/federicomenaquintero/bzip2/commit/74de1e2e6ffc9d51ef9824db71a8ffee5962cdbc


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-2
changelog:
  - move pidfile to /var/run/chrony to allow chronyd to remove it on exit
    (#1584585)
  - avoid blocking in getrandom system call (#1592425)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-3
changelog:
  - fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2
    (#1614800)
  - add workaround for late reload of unit file (#1614751)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.5-1
changelog:
  - update to 3.5 (#1685469 #1677218)
  - fix shellcheck warnings in helper scripts (#1711948)
  - update ntp2chrony script


author: Jeff Layton <jlayton@redhat.com> - 6.7-5
changelog:
  - more updates, switch to rst for manpages
  - update mount.cifs manpage to describe defaults better (BZ#1474539)


author: Zhang Dongjun <dongjun@cpu-os.ac.cn> - 4.6.0-4
changelog:
  - nemo trash restore directory with same name translation
    Patch: 0003-nemo-trash-restore-directory-with-same-name-translat.patch


author: Stephane Thiell <sthiell@stanford.edu> 1.8.3-2
changelog:
  - Removed unversioned __python macros https://fedoraproject.org/wiki/Changes/PythonMacroError [1896129]


author: Jan Grulich <jgrulich@redhat.com> - 0.26-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1757349


author: Jan Grulich <jgrulich@redhat.com> - 0.26-4
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990398

  - Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS
    Resolves: bz#1990399


author: Jan Grulich <jgrulich@redhat.com> - 0.26-6
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993283

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993246


author: ZhouJie <zhoujie@nfschina.com> - 2.28-72.6
changelog:
  - Bug #0363903: 修复问题 
  - CVE-2019-9169
  - CVE-2020-1751
  - CVE-2020-27618
  - CVE-2020-1752
  - CVE-2021-27645
  - CVE-2020-6096
  - CVE-2020-29573


author: xunian <xunian@nfschina.com> - 2.28-72.8
changelog:
  - Revert-Hygon-AMD-Optimize.
  - revert patch for HygonGenuine CPU ID supoort because it cuts down the score of unixbench


author: Eli Uriegas <eli.uriegas@docker.com> - 1.2.0-1.2.beta.2.2
changelog:
  - Hardcoded paths for libexec and var lib considering the macros are different on SUSE based distributions
  - Removed offline installer for runc, package as a binary instead


author: Nian Yanchuan <yanchuan@nfschina.com> - 3.0.2-6
changelog:
  - corosync-crash-keys.patch
  - corosync-integer-logic.patch
  - corosync-leaks-trie.patch
  - corosync-multi-link.patch
  - corosync-number-links.patch


author: Jeff Law <law@redhat.com> 8.2.1-3.4
changelog:
  - Backport PPC string inlines from trunk which allow for valgrind's
    memcheck to work properly (#1652929)
  - Backport bugfix for clz pattern on s390 affecting jemalloc (#1652016)


author: Marek Polacek <polacek@redhat.com> 8.3.1-3
changelog:
  - update from Fedora 8.3.1-3 (#1680182)
  - remove load and test FP splitter (#1673116)
  - fix *movsi_from_df (#1677652)
  - add missing headers
  - add support for live patching (#1668903)
  - retire gcc8-rh1612514.patch, gcc8-rh1652016.patch, gcc8-rh1652929-?.patch


author: Marek Polacek <polacek@redhat.com> 8.3.1-4
changelog:
  - update from Fedora 8.3.1-4 (#1680182)
  - drop gcc8-pr60790.patch, gcc8-pr89629.patch, gcc8-rh1668903-4.patch


author: Marek Polacek <polacek@redhat.com> 8.3.1-4.2
changelog:
  - backport the -fuse-ld=lld option (#1670535)
  - TLS model fix (#1678555, PR c++/85400)
  - two small autoFDO fixes (#1686082)
  - libgomp update (#1707568)
  - member template redeclaration fix (#1652704, PR c++/86747)
  - turn libgcc_s.so into a linker script on i?86, x86_64, ppc64le and also on
    ppc and ppc64 for 64-bit multilib (#1708309)
  - avoid using unaligned vsx or lxvd2x/stxvd2x for memcpy/memmove inline
    expansion (#1666977)


author: Marek Polacek <polacek@redhat.com> 8.3.1-4.5
changelog:
  - fix shift count operand printing (#1730380)
  - fix tree-outof-ssa.c ICE with vector types (PR middle-end/90139, #1730454)
  - fix out-of-ssa with unsupported vector types (PR rtl-optimization/90756,
    - fix ICE with template placeholder for TTP (PR c++/86098, #1730454)


author: Stephen Augustus <saugustus@vmware.com> - 1.15.1
changelog:
  - Source cri-tools from https://github.com/kubernetes-sigs/cri-tools
    instead of https://github.com/kubernetes-incubator/cri-tools


author: Stephen Augustus <saugustus@vmware.com> - 1.15.1
changelog:
  - Bump minimum versions of all kubernetes dependencies
  - Remove conditional logic for unsupported versions of Kubernetes


author: Tomáš Mráz <tmraz@redhat.com> - 20181217-1.git9a35207
changelog:
  - update-crypto-policies: Fix endless loop
  - update-crypto-policies: Add warning about the need of system restart
  - fips-mode-setup: Use grub2-editenv to modify the kernelopts for BLS


author: Tomáš Mráz <tmraz@redhat.com> - 20190613-1.git21ffdc8
changelog:
  - openssh: add missing curve25519-sha256 to the key exchange list
  - openssh: fix RSA certificate support
  - fips-mode-setup: drop the kernel boot option if there is no separate
    /boot drive
  - fips-finish-install: regenerate all initramdisks
  - add libssh configuration backend


author: Tomáš Mráz <tmraz@redhat.com> - 20190613-2.git21ffdc8
changelog:
  - fix ownership of policy directories
  - nss: enable X25519 in appropriate policies and conflict with old nss
  - openssh: conflict with old incompatible openssh version


author: Nian Yanchuan <yanchuan@nfschina.com> 20190807-2.git9b1477b
changelog:
  - crypto-policies-java-enable-tls1.0-and-tls1.1.patch
  - fix the SSL_ERROR_NO_CYPHER_OVERLAP error when high version firefox connects to the website whitch using Tlsv1/v1.1


author: Andreas Schneider <asn@redhat.com> - 4.10.4-0
changelog:
  - related: #1638001 - Rebase to Samba version 4.10.4
  - resolves: #1597298 - Build Samba with python3
  - resolves: #1658558 - Add 'net ads leave --keep-account' option
  - resolves: #1669004 - Fix systemd status notifications
  - resolves: #1672167 - Fix printing cache timeout in debug output
  - resolves: #1696525 - Fix CVE-2019-3880


author: Andreas Schneider <asn@redhat.com> - 4.10.4-1
changelog:
  - resolves: #1712378 - Fix smbspool CUPS backend
  - resolves: #1696612 - Fix 'net ads join -U admin@parentdomain'


author: Andreas Schneider <asn@redhat.com> - 4.10.4-100
changelog:
  - resolves: #1760824 - Avoid overlinking with librt and libpthread
  - resolves: #1759236 - Fix forest trusts enumeration
  - resolves: #1761719 - Fix CUPS username/password authentication with smbspool


author: lidongyue <dongyue@nfschina.com> - 4.10.4-107
changelog:
  - Fix CVE-2019-10218.CVE-2019-14833.CVE-2019-14847
  - Fix CVE-2020-27840.CVE-2021-20277.CVE-2020-14383
  - Fix CVE-2019-14902.CVE-2019-14907.CVE-2019-19344


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.3-0
changelog:
  - related: rhbz#2077468 - Rebase Samba to 4.16.3
  - resolves: rhbz#2106672 - The pcap background queue process should not be stopped
  - resolves: rhbz#2106263 - Fix crash in rpcd_classic
  - resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name


author: Andreas Schneider <asn@redhat.com> - 4.17.2-1
changelog:
  - resolves: rhbz#2132051 - Update to version 4.17.2
  - resolves: rhbz#2126174 - Fix CVE-2022-1615
  - resolves: rhbz#2108487 - ctdb: Add dependency to samba-winbind-clients


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.2-2
changelog:
  - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
  - related: rhbz#2132051


author: Pavel Filipenský <pfilipenn@redhat.com> - 4.17.4-0
changelog:
  - related: rhbz#2132051 - Update to version 4.17.4
  - resolves: rhbz#2154370 - Fix CVE-2022-38023
  - resolves: rhbz#2142331 - Fix %U include directive for share listing (netshareenum)
  - resolves: rhbz#2148943 - Fix Winbind to retrieve user groups from Active Directory


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-21
changelog:
  - 1602469 - fixed covscan issues
  - 1625899 - cups 2.2.6 lpr command fails against old cups 1.3.9 server
  - 1625913 - ssl options aren't initialized when no SSLOptions directive is set in /etc/cups/client.conf
  - 1618009 - Enabling cups.path causes high load when jobs are submitted to CUPS
  - 1630805 - Make cups systemd unit files more upstream-like


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-22
changelog:
  - 1622431 - Jobs with multiple files don't complete when backend fails
  - CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection [rhel-8]


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-1
changelog:
  - new upstream release, which fixes the following vulnerability
      CVE-2018-14618 - NTLM password overflow via integer overflow


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-2
changelog:
  - enforce versioned libpsl dependency for libcurl (#1631804)
  - test320: update expected output for gnutls-3.6.4
  - drop 0105-curl-7.61.0-tests-ssh-keygen.patch no longer needed (#1622594)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-3
changelog:
  - enable TLS 1.3 post-handshake auth in OpenSSL
  - update the documentation of --tlsv1.0 in curl(1) man page


author: Kamil Dudka <kdudka@redhat.com> - 7.62.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2018-16839 - SASL password overflow via integer overflow
      CVE-2018-16840 - use-after-free in handle close
      CVE-2018-16842 - warning message out-of-buffer read


author: xunian <xunian@nfschina.com> - 7.62.0-2
changelog:
  - Add CVE-2019. CVE-2020. CVE-2021
  - 7.64.0-CVE-2019-5436,7.65.3-CVE-2019-5481,7.65.3-CVE-2019-5482
  - 7.61.1-CVE-2020-8177,7.61.1-CVE-2020-8231,7.61.1-CVE-2020-8284
  - 7.61.1-CVE-2020-8286,7.61.1-CVE-2021-22946,7.61.1-CVE-2021-22947


author: Xunian Tang <xunian@nfschina.com> - 1.0.2.nfs.6
changelog:
  - Add patch device-manager-1.0-nvme-disk-info.patch
  - Add patch nvme-cli-1.8.1.patch
  - Add patch device-manager-1.0-fix-systemversion.patch


author: Zhang Tao <zhangtao@cpu-os.ac.cn> - 1.0.2.nfs.13
changelog:
  - bug0356062 bug0355946 :修复在python3.6环境下，启动线程时会卡死。
  - Patch: device-manager-1.0-For4.0-optimize-stability.patch


author: Xunian Tang <xunian@nfschina.com> - 1.0.4.nfs.14
changelog:
  - Fix 0356063:修复在同方海光平台设备管理器不显示主板信息
  - add  device-manager-1.0-For4.0-Fix-tongfang-motherboard-info.patch


author: Zhang Dongjun <dongjun@cpu-os.ac.cn> - 1.0.4.nfs.16
changelog:
  - bug#0357410: RTM1.7 设备管理器中主板、光驱没有显示硬件品牌Logo
  - Patch: device-manager-1.0-For4.0-Add-suma-cancon-logo.patch


author: Xunian Tang <xunian@nfschina.com> - 1.0.4.nfs.17
changelog:
  - 从svs2.4移植:device-manager-1.0-For4.0-MdySystem-to-MainServer.patch
  - Fix 0357667:H620-G30S3,设备管理器下电脑概览中电脑描述错误,应Main Server Chassis.


author: Dong Chuanjian <chuanjian@nfschina.com> - 1.0.5.nfs.18
changelog:
  - add patch DERA-device-info.patch
  - 修复得瑞硬盘设别管理器中不显示logo和品牌名的问题
  - Add device-manager-1.0-Add-nvme-idctrl.patch,
  - 新增nvmecli命令，支持id-ctrl查询nvme磁盘(旭念)


author: Xunian Tang <xunian@nfschina.com> - 1.0.5.nfs.20
changelog:
  - #0371731 When the system is an English interface, change the ydevicemanger to devicemanage.
  - Add Patch device-manager-1.0-change-ydm-2-dm.patch.


author: Xunian Tang <xunian@nfschina.com> - 1.0.5.nfs.21
changelog:
  - #0371733: When oldPID cannot be converted to integer, program  will crash.
  - Add patch to fixed it.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-23
changelog:
  - Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
    * Partial fix for bz #2058222
  - Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
    * Fixes bz #2065468
  - Add 0093-updated-HPE-MSA-builtin-config.patch
    * Fixes bz #2058222
  - Resolves bz #2065468, #2058222


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-24
changelog:
  - Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
    * Fixes bz #2052054
  - Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
  - Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
  - Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
  - Add 0098-libmultipath-make-protocol_name-global.patch
  - Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
  - Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
  - Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
  - Add 0102-libmultipath-fix-eh_deadline-documentation.patch
  - Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
  - Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
    * The above 10 patches implement feature from bz #2065477
  - Resolves: bz #2052054, #2065477


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-25
changelog:
  - Add 0105-multipathd-handle-fpin-events.patch
  - Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
  - Resolves: bz #2083077


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-27
changelog:
  - Add 0108-multipathd-Add-missing-ctype-include.patch
  - Add 0109-multipathd-replace-libreadline-with-libedit.patch
    * replace readline with libedit, to avoid license conflicts
  - Resolves: bz #2119887


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-30
changelog:
  - Add 0111-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch
  - Add 0112-libmultipath-return-success-if-we-raced-to-remove-a-.patch
  - Add 0113-multipathd-Handle-losing-all-path-in-update_map.patch
  - Resolves: bz #2110485


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-31
changelog:
  - Add 0114-multipathd-ignore-duplicated-multipathd-command-keys.patch
    * Fixes bz #2133996
  - Add 0115-multipath-tools-use-run-instead-of-dev-shm.patch
    * Fixes bz #2133990
  - Resolves: bz #2133990, #2133996


author: Pavel Zhukov <pzhukov@redhat.com> - 12:4.3.6-33
changelog:
  - Resolves: #1673946 - Change default prefix length to 128
  - Add address-prefix-lenght option to change default value
  - Fix backporting issues


author: Marek Kasik <mkasik@redhat.com> - 3.5.27-8
changelog:
  - Remove XML file defining DjVu MIME type because it does not differentiate
  - between DjVu Image and DjVu Document (the default one in shared-mime-info does)
  - Resolves: #1513188


author: Lianbo Jiang <lijiang@redhat.com> - 1:3.2-6
changelog:
  - Updated to the latest upstream(5b3c8e995026 ("Allow overriding
    build settings from the environment"))
  - Resolves: rhbz#1796581


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.2.6-1
changelog:
  - Update to 4.2.6
  - Use improved config parser that preserves order of data
  - Follow RPM security policy for package verification
  - Update modules regardless of installed profiles
  - [conf] Use environment variables prefixed with DNF_VAR_
  - Allow adjustment of repo from --repofrompath (RhBug:1689591)
  - Allow globs in setopt in repoid part
  - Add command abbreviations (RhBug:1634232)
  - Installroot now requires absolute path
  - librepo: Turn on debug logging only if debuglevel is greater than 2 (RhBug:1355764,1580022)
  - Document cachedir option (RhBug:1691365)
  - Enhance documentation - API examples
  - Enhance documentation of --whatdepends option (RhBug:1687070)
  - Update documentation: implemented plugins; options; deprecated commands (RhBug:1670835,1673278)
  - [doc] Add info of relation update_cache with fill_sack (RhBug:1658694)
  - Rename man page from dnf.automatic to dnf-automatic to match command name
  - Fix alias list command (RhBug:1666325)
  - Fix behavior  of ``--bz`` option when specifying more values
  - Add protection of yum package (RhBug:1639363)
  - Fix ``list --showduplicates`` (RhBug:1655605)
  - Retain order of headers in search results (RhBug:1613860)
  - Solve traceback with the "dnf install @module" (RhBug:1688823)
  - Fix multilib obsoletes (RhBug:1672947)
  - Do not remove group package if other packages depend on it
  - Remove duplicates from "dnf list" and "dnf info" outputs
  - Fix the installation of completion_helper.py
  - Fix formatting of message about free space required
  - Fix installation failiure when duplicit RPMs are specified (RhBug:1687286)
  - Fix issues with terminal hangs when attempting bash completion (RhBug:1702854)
  - Allow plugins to terminate dnf (RhBug:1701807)
  - [provides] Enhanced detecting of file provides (RhBug:1702621)
  - [provides] Sort the output packages alphabetically


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.2.7-1
changelog:
  - Update to 4.2.7
  - Fix package reinstalls during yum module remove (RhBug:1700529)
  - Fail when "-c" option is given nonexistent file (RhBug:1512457)
  - Reuse empty lock file instead of stopping dnf (RhBug:1581824)
  - Propagate comps 'default' value correctly (RhBug:1674562)
  - Better search of provides in /(s)bin/ (RhBug:1657993)
  - Add detection for armv7hcnl (RhBug:1691430)
  - Fix group install/upgrade when group is not available (RhBug:1707624)
  - Report not matching plugins when using --enableplugin/--disableplugin
    (RhBug:1673289) (RhBug:1467304)
  - Add support of modular FailSafe (RhBug:1623128)
  - Replace logrotate with build-in log rotation for dnf.log and dnf.rpm.log
    (RhBug:1702690)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.2.7-3
changelog:
  - Update localizations from zanata (RhBug:1689982)
  - Accept multiple specs in repoquery options (RhBug:1667898,1656801)
  - Prevent switching modules in all cases (RhBug:1706215)
  - Change synchronization of rpm transaction to swdb (RhBug:1737328)
  - Print rpm error messages during transaction (RhBug:1677199)
  - Report missing default profile as an error (RhBug:1669527,1724564)
  - Describe a behavior when plugin is removed (RhBug:1700741)


author: Petr Menšík <pemensik@redhat.com> - 2.79-15
changelog:
  - Fix various issues in dnssec validation (CVE-2020-25681)
  - Accept responses only on correct sockets (CVE-2020-25684)
  - Use strong verification on queries (CVE-2020-25685)


author: xunian <xunian@nfschina.com> - 2.79-17
changelog:
  - Fix-write-after-free-error-in-DHCPv6-code-CVE-2022-0934;
  - Fix Listen-only-on-lo-device-fix-CVE-2020-14312;
  - add CVE-2020-25682 CVE-2020-25683 CVE-2020-25687 had fixed in 2.79-16.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-7
changelog:
  - do not print error message when restorecon is not present 
    during install (#1626395)
  - change default config to use minimal UID = 1000 (#1630410)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-10
changelog:
  - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
    when scanning data in quoted strings, leading to out of bounds heap
    memory writes (#1741788)


author: Lukas Nykryn <lnykryn@redhat.com> - 049-17.git20190725
changelog:
  - rngd: new module running early during boot to help generating entropy when system's default entropy sources are poor (e.g. use of SSD disks or UEFI RNG not available)


author: Lukas Nykryn <lnykryn@redhat.com> - 049-24.git20190802
changelog:
  - 95fcoe: load 'libfcoe' module as a fallback
  - 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases
  - dracut: let module handling function accept optional path option
  - squash: also squash systemctl if switch-root is not needed
  - squash: fix and simplify required_in_root
  - squash: squash systemd binary and udevadm


author: Jack Magne <jmagne@redhat.com> - 1.1.2-6
changelog:
  - #Resolve: Bug 1638011 - esc docdir should not be versioned in rhel8.
  - #Resolve: Bug 1596915 - Remove XULRunner from ESC.


author: Jan Grulich <jgrulich@redhat.com> - 0.26-9
changelog:
  - Security fix for CVE-2017-17723, CVE-2017-17725, CVE-2018-10958, CVE-2018-10998,
    CVE-2018-11531, CVE-2018-12264, CVE-2018-12265, CVE-2018-14046, CVE-2018-5772,
    CVE-2018-8976, CVE-2018-8977, CVE-2018-9144


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.5-5
changelog:
  - Fix multiple CVEs
  - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-23852
  - Resolves: CVE-2021-45960
  - Resolves: CVE-2021-46143
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.5-6
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Radovan Sroka <rsroka@redhat.com> - 0.8.8-1
changelog:
  - New upstream release
  - Added new DNF plugin that can update the trust database when rpms are installed
  - Added support for FAN_OPEN_EXEC_PERM


author: Radovan Sroka <rsroka@redhat.com> - 0.8.10-2
changelog:
  - Convert hashes to lowercase like sha256sum outputs
  - Stop littering STDOUT output for dnf plugin in fapolicyd
  Resolves: rhbz#1721496


author: Radovan Sroka <rsroka@redhat.com> - 0.8.10-3.1
changelog:
  RHEL 8.1.Z
  - fixed: fapolicyd blocks dracut from generating initramfs
  - changed default fapolicyd.rules
  Resolves: rhbz#1791856


author: Kamil Dudka <kdudka@redhat.com> - 5.33-10
changelog:
  - show details about ppc swap partition (#1224668)
  - support longer version strings for clamav database (#1539107)


author: Ni Yongliang <yongliang@cpu-os.ac.cn> - 3.28.1-5
changelog:
  - Force new archive window at top
    Add Patch: 0001-force-new-archive-window-at-top.patch
    Comment libnautilus-fileroller.so install in spec file


author: Jia <lina@cpu-os.ac.cn> - 3.28.1-6.1
changelog:
  - 移植董珍在通用上修复的解压锁时的编码问题补丁
  - patch: 0002-file-roller-fix-zip-codec.patch
  - Uncomment /usr/lib64/nautilus-extensions-3.0/libnautilus-fileroller.so


author: Qian Gaoyang <qiangaoyang@cpu-os.ac.cn> - 3.28.1-7.2
changelog:
  - 1、bug#0359520：修复往压缩文件里拖拽同名文件，没有任何提示信息会直接覆盖。
  - 2、bug#0359521：修复往压缩文件里拖拽其他文件，提取压缩包时会报错
  - patch: 0004-add-dialog-for-window-drag-data.patch


author: Qian Gaoyang <qiangaoyang@cpu-os.ac.cn> - 3.28.1-8.2
changelog:
  - 1、bug#0370008：修复选择压缩类型时，会闪一下之后关闭。
  - 2、bug#0370010：修复选择压缩类型时，鼠标可以一直向下滚动。
  - 3、bug#0369942：修复选择指定压缩类型时，出错的问题。
  - patch: 0005-fix-errors-cause-by-compress-types.patch


author: gongwen<gongwen@nfschina.com> - 68.5.0-2.nfs.1
changelog:
  - modify startup.homepage_override_url & startup.homepage_welcome_url in firefox-centos-default-prefs.js to "http://www.nfschina.com" 
  - modify spec for compiling with use_bundled_python_3
  - modify spec to remove copying of default_bookmarks_file


author: Ondrej Holy <oholy@redhat.com> - 2:2.0.0-47.rc4
changelog:
  - Fix SCARD_INSUFFICIENT_BUFFER error (rhbz#1803054)
  - Do not advertise /usb in help output (rhbz#1761144)


author: Nick Clifton <nickc@redhat.com> - 9.72-1
changelog:
  - Rebase to 9.72.  (#1957319)
  - annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.
  - timing: do not initialise the clock if the timing tool is disabled.
  - gcc-plugin: Replace ICE messsages with verbose messages.
  - Fix the testsuite so that it can be run in parallel.
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)
  - Obsolete annobin < 9.66-1 (bug #1949570)
  - Annocheck: Improve detection of missing GNU-stack support.
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough
  - Fix bz1949570
  - Fix anomolies reported by covscan.
  - Move documentation into a sub-package.
  - gcc-plugin: Use a fixed filename when running in LTO mode.
  - Annocheck: Fix detection of special function names.  (#1934189)
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)
  - Annocheck: Fix some problems with tests for missing notes.
  - Split plugins into separate sub-packages
  - Add some GO tests to annocheck.
  - Add a future fail for the presence of RPATH in the dynamic tags.
  - Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
  - Workaround for elflint problems with PPC compiled files.  (#1880634)
  - Fix bogus AArch64 test failures.
  - Improved testing by annocheck.  Add fixed format message mode.
  - Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
  - Add support for -D_FORTIFY_SOURCE=3.
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)
  - annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations.  (#1906171)
  - annocheck: Mark a missining -D_FORTIFY_SOURCE as a FAIL.
  - annocheck: Fix notes analyzer to accept empty PPC64 notes.
  - gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)
  - gcc plugin: Add support for GCC 11's cl_vars array.
  - Annocheck: Support enabling/disabling future fails.
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.
  - Clang plugin: Add -lLLVM to the build command line.
  - Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
  - Annocheck: Improve reporting of missing LTO option.
  - Add detecting of gimple compiled binaries.
  - Add --without-gcc-plugin option.
  - Annocheck: Fix bug parsing DW_AT_producer.
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.
  - NVR bump for another ELN sidetag rebuild.
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.
  - Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
  - Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
  - Enable the build and installation of the LLVM and Clang plugins.  (Experimental).
  - gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)
  - annocheck: Add tests for the AArch64 BTI and PAC security features.  (#1862478)
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
  - gcc plugin: Correct the detection of 32-bit x86 builds.  (#1876197)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.


author: Nick Clifton <nickc@redhat.com> - 9.79-1
changelog:
  - Annocheck: Fix spelling mistake in -mstack-realign failure message.  (#1977349)
  - gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set.  (#1958954)
  - Annocheck: Remove limit on number of input files.
  - Annocheck: Conditionalize test of DF_PIE_1 flag.
  - clang/llvm plugins: Build with correct security options.
  - Annocheck: Better detection of GO compiler version.
  - Annocheck: Better support for symbolic links.
  - Annocheck: In verbose mode, report the reason for skipping specific tests.  (#1969584)


author: Nick Clifton <nickc@redhat.com> - 9.85-1
changelog:
  - Annocheck: Detect a missing CET note.  (#1991931)
  - Annocheck: Do not report future fails for AArch64 notes.
  - Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.
  - Annocheck: Process files in command line order.  (#1988714)
  - Annocheck: Reverse AArch64 PAC+BTI check, ie fail if they are enabled.  (#1984995)
  - Annocheck: Add another test exceptions.
  - Annocheck: Add some more test exceptions.
  - Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes.  (#1978573)
  - Tests: Skip objcopy test if objcopy does not support --merge-notes.


author: Nick Clifton <nickc@redhat.com> - 10.23-1 (#2020405)
changelog:
  - Annocheck: Add a test for unicode characters in identifiers.
  - gcc-plugin: Default to link-order grouping for PPC64LE.  (#2016458)
  - Annocheck: Do not fail if a --skip-<name> option does not match a known test.
  - ldconfig-test: Skip the LTO check.
  - Annocheck: Add more glibc function names.
  - gcc-plugin: Fix attaching the .text section to the .text.group section.
  - Complain about DT_RPATH for Fedora binaries.
  - Better reporting of problems in object files.  (#2013708)
  - Add a requirement on llvm-libs for clang and llvm plugins.  (#2014573)
  - Fix configuring annocheck without gcc-plugin.
  - Annocheck: Better reporting of debuginfod problems.
  - Tests: Fix bugs in debuginfod test.
  - Annocheck: Add tests based upon recent bug fixes.
  - Annocheck: Another tweak to glibc detection code.
  - Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found.  (#20011438)
  - Annocheck: Fix MAYB results for mixed GO/C files.
  - Annocheck: Move some messages from VERBOSE to VERBOSE2.
  - Annocheck: Scan zero-length tool notes.
  - Annocheck: Fix covscan detected flaws.
  - plugins: Add more required build options.
  - Annocheck: Fix cf-prot test to fail if the CET notes are missing.
  - Annocheck: Skip gaps in the .plt section.
  - Plugins: Add -g option when building LLVM and Clang.
  - Annocheck: Add more cases of glibc startup functions.
  - Annocheck: Fix covscan detected problems.
  - Annocheck: Add --profile=el8.
  - gcc-plugin: Conditionalize generation of branch protection note.
  - Annocheck: Ignore gaps containing NOP instructions.
  - GCC Plugin: Fix detection of running inside the LTO compiler.  (#2004917)
  - Annocheck: Do not insist on the DT_AARCH64_PAC_PLT flag being present in AArch64 binaries.
  - Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.
  - Annocheck: Do not set CFLAGS/LDFLAGS when building.  Take from environment instead.
  - Annocheck: Fix exit code when tests PASS.
  - Documentation: Add node for each hardening test.
  - Documentation: Install online.
  - Annocheck: Annote FAIL and MAYB results with URL to documentation
  - Annocheck: Add --no-urls and --provide-urls options
  - Annocheck: Add --help-<tool> option.
  - Annocheck: Fix fuzzing detected failures.
  - Annocheck: Add --profile option.
  - Docs: Document --profile option and rpminspect.yaml.
  - Annocheck: Skip GO/CET checks.  Fix fuzzing detected failures.
  - LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444)
  - Annocheck: Fix memory corruption.  (#1996963)
  - Annocheck: Fix conditionalization of AArch64's PAC+BTI detection.
  - Annocheck: Add linker generated function for ppc64le exceptions.  (#1981410)
  - LLVM Plugin: Allow checks to be selected from the command line.
  - Annocheck: Examine DW_AT_producer for -flto.    
  - Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
  - Annocheck: Add linker generated function for s390x exceptions.  (#1981410)
  - Annocheck: Generate MAYB results for gaps in notes covering the .text section.  (#1991943)
  - Annocheck: Close DWARF file descriptors once the debug info is no longer needed.  (#1981410)
  - LLVM Plugin: Update to build with Clang v13.  (Thanks to: Tom Stellard <tstellar@redhat.com>)
  - Annocheck: Fix memory corruption.  (#1988715)
  - Annocheck: Skip certain tests for kernel modules.


author: Nick Clifton <nickc@redhat.com> - 2.35-3
changelog:
  - Do not enable debuginfod support by default.
  - Add run-time dependency on libdebuginfod library when debuginfod support is enabled.


author: Nick Clifton <nickc@redhat.com> - 2.35-5
changelog:
  - Fix building with LTO enabled.
  - Set the sh_entsize field of the AArch64's PLT section to 0.  (PR 26312)


author: Mark Wielaard <mjw@redhat.com> - 0.182-1
changelog:
  - Upgrade to upstream 0.182
    - backends: Support for tilegx has been removed.
    - config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
    - debuginfod: More efficient package traversal, tolerate various
      errors during scanning, grooming progress is more visible and
      interruptible, more prometheus metrics.
    - debuginfod-client: Now supports compressed (kernel) ELF images.
    - libdwfl: Add ZSTD compression support.


author: Marek Polacek <polacek@redhat.com> 11.2.1-6
changelog:
  - update from releases/gcc-11-branch (#1996862)
    - PRs target/100208, target/100316, target/102761
  - build target shared libraries with -Wl,-z,relro,-z,now
  - add mwaitintrin.h on x86 (#2013860)
  - improve generated code with extern thread_local constinit vars
    with trivial dtors
  - add support for C++20 #__VA_OPT__
  - apply DTS-specific testsuite patches (#1996085)


author: Marek Polacek <polacek@redhat.com> 11.2.1-7
changelog:
  - update from releases/gcc-11-branch (#1996862)
    - PRs ada/100486, c++/70796, c++/92746, c++/93286, c++/94490, c++/102642,
  	c++/102786, debug/101378, debug/103046, debug/103315, fortran/87711,
  	fortran/87851, fortran/97896, fortran/99061, fortran/99348,
  	fortran/102521, fortran/102685, fortran/102715, fortran/102745,
  	fortran/102816, fortran/102817, fortran/102917, fortran/103137,
  	fortran/103138, fortran/103392, gcov-profile/100520, ipa/102714,
  	ipa/102762, ipa/103052, ipa/103246, ipa/103267, libstdc++/96416,
  	libstdc++/98421, libstdc++/100117, libstdc++/100153, libstdc++/100748,
  	libstdc++/101571, libstdc++/101608, libstdc++/102894,
  	libstdc++/103022, libstdc++/103086, libstdc++/103133,
  	libstdc++/103240, libstdc++/103381, middle-end/64888,
  	middle-end/101480, middle-end/102431, middle-end/102518,
  	middle-end/103059, middle-end/103181, middle-end/103248,
  	middle-end/103384, preprocessor/103130, rtl-optimization/102356,
  	rtl-optimization/102842, target/101985, target/102976, target/102991,
  	target/103205, target/103274, target/103275, testsuite/102690,
  	tree-optimization/100393, tree-optimization/102139,
  	tree-optimization/102505, tree-optimization/102572,
  	tree-optimization/102788, tree-optimization/102789,
  	tree-optimization/102798, tree-optimization/102970,
  	tree-optimization/103192, tree-optimization/103204,
  	tree-optimization/103237, tree-optimization/103255,
  	tree-optimization/103435
  - fix up #__VA_OPT__ handling (PR preprocessor/103415)


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047286)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047286)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Keith Seitz <keiths@redhat.com> - 10.1-14
changelog:
  - Backport "Save/restore file offset while reading notes in core file"
    (Keith Seitz, RHBZ 1931344)


author: Kevin Buettner <kevinb@redhat.com> - 10.2-1
changelog:
  - Rebase to FSF GDB 10.2.
  - Drop gdb-6.3-test-pie-20050107.patch.
  - Drop gdb-6.3-test-self-20050110.patch.
  - Drop gdb-6.5-bz218379-ppc-solib-trampoline-test.patch.
  - Drop gdb-6.6-buildid-locate-core-as-arg.patch.
  - Drop gdb-6.8-quit-never-aborts.patch.
  - Drop gdb-archer-pie-addons-keep-disabled.patch.
  - Drop gdb-archer-pie-addons.patch.
  - Drop gdb-archer-vla-tests.patch.
  - Drop gdb-archer.patch.
  - Drop gdb-attach-fail-reasons-5of5.patch.
  - Drop gdb-btrobust.patch.
  - Drop gdb-bz1219747-attach-kills.patch.
  - Drop gdb-bz533176-fortran-omp-step.patch.
  - Drop gdb-dts-rhel6-python-compat.patch.
  - Drop gdb-gnat-dwarf-crash-3of3.patch.
  - Drop gdb-jit-reader-multilib.patch.
  - Drop gdb-moribund-utrace-workaround.patch.
  - Drop gdb-rhbz1930528-fix-gnulib-build-error.patch.
  - Drop gdb-rhbz1932645-aarch64-ptrace-header-order.patch.
  - Drop gdb-vla-intel-fix-print-char-array.patch.
  - Drop gdb-vla-intel-fortran-strides.patch.
  - Drop gdb-vla-intel-stringbt-fix.patch.
  - Drop gdb-vla-intel-tests.patch.
  - Drop process_psymtab_comp_unit-type-unit.patch.
  - Drop gdb-testsuite-readline63-sigint-revert.patch.
  - Drop gdb-config.patch.
  - Add following upstream patches for Fortran stride / slice support:
    gdb-rhbz1964167-convert-enum-range_type.patch
    gdb-rhbz1964167-fortran-array-slices-at-prompt.patch
    gdb-rhbz1964167-fortran-array-strides-in-expressions.patch
    gdb-rhbz1964167-fortran-clean-up-array-expression-evaluation.patch
    gdb-rhbz1964167-fortran-range_type-to-range_flag.patch
    gdb-rhbz1964167-fortran-whitespace_array.patch
    gdb-rhbz1964167-move-fortran-expr-handling.patch


author: Keith Seitz <keiths@redhat.com> - 10.2-2
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Fix crash when expanding partial symtab..."
    (Tom Tromey. gdb/27743)


author: Keith Seitz <keiths@redhat.com> - 10.2-3.el8
changelog:
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903375)


author: Keith Seitz <keiths@redhat.com> - 10.2-4.el8
changelog:
  - Backport "Fix gdb.fortran/array-slices.exp with -m32"
    (Tom de Vries, testsuite/269970)
  - Backport "adjust gdb.python/flexible-array-member.exp expected pattern"
    (Simon Marchi)


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-6
changelog:
  - Fix expected alignment for IPC tests (#1794490):
    4377e3a1 "tests: fix expected output for some ipc tests", and
    a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-4
changelog:
  - Work around unknown msgctl/semctl/shmctl cmd check issue in tests-m32
    and tests-mx32 as well (#1997082).


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-3
changelog:
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys
  - rhbz1873492 related: rhel8 kernel_is_locked_down detection


author: Mark Wielaard <mjw@redhat.com> - 3.16.0-4
changelog:
  - Add valgrind-3.16.1-REX-prefix-JMP.patch
  - Add valgrind-3.16.1-epoll.patch
  - Add valgrind-3.16.1-sched_getsetattr.patch
  - Add valgrind-3.16.1-dl_runtime_resolve.patch


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-4
changelog:
  - Update to upstream 3.17.0 final.
  - Add valgrind-3.17.0-ppc64-isa-3.1{,tests}.patch
  - Add valgrind-3.17.0-s390_insn_as_string.patch
  - Add valgrind-3.17.0-debuginfod.patch
  - Add valgrind-3.17.0-clone-parent-res.patch


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.24-1
changelog:
  - rebase to latest upstream version, which contains important CVE fixes
  - additional ZER0-DAY fixes added


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.25-1
changelog:
  - rebase to latest upstream version to fix issues discovered in previous CVE fixes (bug #1631701 and #1626997)


author: Martin Osvald <mosvald@redhat.com> - 9.25-2
changelog:
  - Resolves: #1652937 - CVE-2018-19409 ghostscript: Improperly implemented
    security check in zsetdevice function in psi/zdevice.c
  - Resolves: #1642586 - CVE-2018-18073 ghostscript: saved execution stacks
    can leak operator arrays
  - Resolves: #1642580 - CVE-2018-17961 ghostscript: saved execution stacks
    can leak operator arrays (incomplete fix for CVE-2018-17183)
  - Resolves: #1642941 - CVE-2018-18284 ghostscript: 1Policy operator
    allows a sandbox protection bypass
  - Resolves: #1656336 - CVE-2018-19134 ghostscript: Type confusion in
    setpattern (700141)
  - Resolves: #1660571 - CVE-2018-19475 ghostscript: access bypass in
    psi/zdevice2.c (700153)
  - Resolves: #1660830 - CVE-2018-19476 ghostscript: access bypass in
    psi/zicc.c
  - Resolves: #1661280 - CVE-2018-19477 ghostscript: access bypass in
    psi/zfjbig2.c (700168)
  - Resolves: #1668891 - CVE-2019-6116 ghostscript: subroutines within
    pseudo-operators must themselves be pseudo-operators (700317)


author: Martin Osvald <mosvald@redhat.com> - 9.25-3
changelog:
  - Resolves: #1692798 - CVE-2019-3839 ghostscript: missing attack vector
    protections for CVE-2019-6116
  - Resolves: #1678170 - CVE-2019-3835 ghostscript: superexec operator
    is available (700585)
  - Resolves: #1691414 - CVE-2019-3838 ghostscript: forceput in DefineResource
    is still accessible (700576)
  - fix included for ghostscript: Regression: double comment chars
    '%' in gs_init.ps leading to missing metadata
  - fix for pdf2dsc regression added to allow fix for CVE-2019-3839


author: Martin Osvald <mosvald@redhat.com> - 9.25-5
changelog:
  - Resolves: #1744011 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
  - Resolves: #1744015 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
  - Resolves: #1744006 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
  - Resolves: #1744231 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)


author: Robert Scheck <robert@fedoraproject.org> 4.1.6-2
changelog:
  - Solved multilib problems with documentation (#465208, #474538)
  - Removed static library from giflib-devel package (#225796 #c1)


author: Jia <lina@cpu-os.ac.cn> - 4.1.6-10
changelog:
  - 增加补丁Patch0,用于支持在server 4.0上的编译
  - 修改包名为giflib4, 避免和server 4.0上的默认主线包gitlib-5.1.4 冲突
  - 移除utils和devel相关文件，避免和giflib主线包冲突
  - 该包修改自NFS3.1,用于为java-1.7.0-openjdk添加依赖


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.1.2-3
changelog:
  - Build process updated to correctly build .debug_info for i386
    and to correctly use hardening flags


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.1.2-8
changelog:
  - Missing fipschecks added into build process (bug #1553679)
  - --enable-fat option added to %configure (bug #1493218)


author: Jakub Martisko <jamartis@redhat.com> - 1:6.1.2-9
changelog:
  - Add support for intel CET and -fcf-protection
  - Add missing compiler/linker flags
  Related: #1630567


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.1-12
changelog:
  - Add translations for desktop-icons extension.
    Patch: 0001-Add-the-translations-of-desktop-icons-extension.patch.


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.1-18
changelog:
  - Disable disable system partitions:
    '/', '/boot', '/boot/efi', '/home', '/recovery', '/var/log'.
  - Modify the default app for opening files to Nemo.
    0006-Disable-display-system-partitions-in-driver-menu.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.1-19
changelog:
  - bug0356809: 在测试版本中的待测评水印太小且字体不清晰，需尽快修改.
    Patch: 0007-Modify-the-panel-icon-size-of-top-icons.patch


author: Li Ting <liting@cpu-os.ac.cn> - 3.32.1-21
changelog:
  - bug357377: RTM1.6:在正常使用过程中概率性发生桌面卡死现象
    Patch: 0009-do-not-show-window-previews-in-window-list.patch


author: He Chunni<chunni@nfschina.com> - 3.28.2-7
changelog:
  - Fix the problem of verifing the old password in password dialog.
    Patch: 0005-Fix-the-problem-of-checking-old-password-in-password.patch


author: Zhang Dongjun <dongjun@cpu-os.ac.cn> - 3.28.2-13
changelog:
  - bug#0357295: RTM1.3:已注册用户点击更换头像,下方拍照或选择照片按键为英文展示
    Patch: 0008-user-avatar-button-translation.patch


author: Liang Zhihao<zhihao@cpu-os.ac.cn> - 3.28.2-28
changelog:
  - bug0358555:在settings需要添加网络设置入口按钮
    Patch: 0028-fix-0358555-need-to-add-button-to-access-Connetcion-.patch


author: yangguanghui<yangguanghui@nfschina.com> - 3.28.2-34
changelog:
  - 修复bugid: 79118: OEM版本-240308(x86)设置-详细信息-日期与时间开启定位后无法自动设置时区
  - Patch:0035-79118-autoset-timezone-switch.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.0-5
changelog:
  - Set the default gsettings value of power-button-action to nothing.
    Patch: 0001-Modify-the-default-gsettings-value-of-power-button-a.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.0-6
changelog:
  - Add tranlations for account: gsd-account-manager.c.
    Patch: 0002-Add-tranlations-for-gsd-account-manager.patch


author: Ni Yongliang <yongliang@cpu-os.ac.cn> - 3.32.0-7
changelog:
  - Fix delay empty trash settings changed not work
    Add patch: 0005-delay-empty-trash-settings-changed.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.2-14
changelog:
  - Remove the other user button in unlock page.
    Patch: 0004-Remove-other-user-button.patch.
  - Remove the session menu button in login page.
    Patch: 0005-Remove-session-menu-button.patch.


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.2-15
changelog:
  - Add enabledExtensions for user session mode.
    Patch: 0006-Add-enabledExtensions-for-user-session-mode.patch.


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.2-16
changelog:
  - Disable showing lock screen when user is not logged in.
    Patch: 0007-Disable-lock-screen-when-user-is-not-logged-in.patch.


author: Ni Yongliang <yongliang@cpu-os.ac.cn> - 3.32.2-17
changelog:
  - Fix close notification banners not work
    Patch: 0008-fix-close-notification-banners-not-work.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.2-18
changelog:
  - Disable the screen-magnifier function (#0356185).
    Patch: 0009-Disable-the-screen-magnifier-function.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.2-21
changelog:
  - Remove keyboard in unlock-dialog.
    Patch: 0012-Remove-keyboard-in-unlock-dialog.patch
  - Modify to suit Nemo.
    Patch: 0013-Modify-to-suit-Nemo.patch


author: Ni Yongliang <yongliang@cpu-os.ac.cn> - 3.32.2-22
changelog:
  - Forbid suspend function in system actions
    Patch: 0014-Forbid-suspend-function-in-system-actions.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.2-23
changelog:
  - Add top-icons extension into default enabled-extensions list.
    The package gnome-shell-extension-top-icons must be installed.
    Patch: 0015-Add-top-icons-extension-in-default-enabled-extension.patch


author: Zhang Dongjun <dongjun@cpu-os.ac.cn> - 3.32.2-25
changelog:
  - 标准不同用户登陆，在设置中点击"解锁"时，申请提权的管理员用户若未设置密码，认证窗口中设置密码提示未汉化
    Patch: 0007-authentication-dialog-translation.patch


author: Li Ting <liting@cpu-os.ac.cn> - 3.32.2-26
changelog:
  - 用户解锁第一次弹出的授权窗口没有管理员名，取消第二次点击解锁才有
    电源、锁屏中当用户名超过 27 个之后显示成全名
    Patch: 0001-polkit-username-and-power-username.patch


author: Li Ting <liting@cpu-os.ac.cn> - 3.32.2-27
changelog:
  - 改为显示全名而不是用户名(real_name，上个补丁是user_name)
    解决偶发注销、关机框无法点击，桌面卡死的问题
    Patch: 0001-use-real-name-shell-freeze.patch


author: Ren Baiqian <boqian@cpu-os.ac.cn> - 3.32.2-31
changelog:
  - 0358553: 支持类windows的中英文切换快捷键
    使ctrl+space、shift+ctrl+space和super+space、shift+super+space都能切换输入法
    Patch: 0016-bug358553-Add-SwitcherPopup-action.patch


author: Ren Baiqian <boqian@cpu-os.ac.cn> - 3.32.2-33
changelog:
  - 0359523: 截图工具：使用截图工具截图时，截取当前窗口，延迟时间2秒，保存时修改图片的后缀未jpg，查看图片时桌面背景为黑色图（必现）
    0359524: 截图工具：使用截图工具截图时，截取当前窗口，延迟时间2秒，图片背景变网格状背景（必现）
    Patch71: 0017-bug0359523-0359524-detect-desktop-in-window-shortcut.patch


author: Daiki Ueno <dueno@redhat.com> - 3.6.14-7
changelog:
  - Increase DH key bits to >= 2048 in self-tests (#1879506)
  - Implement self-tests for KDF and CMAC (#1890870)
  - Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)


author: Peter Jones <pjones@redhat.com> - 2.02-70
changelog:
  - Fix (once again) how CFLAGS and LDFLAGS propogate the settings for hardened
    builds, because rpmdiff doesn't like the current way failing.
    Related: rhbz#1653961


author: Peter Jones <pjones@redhat.com> - 2.02-71
changelog:
  - Fix (a fourth time, due to a typo) how LDFLAGS works on non-efi platforms.
    Related: rhbz#1653961


author: xunian <xunian@nfschina.com> - 2.02-78.nfs.3
changelog:
  - Fixed CVE.
  - add 0386-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch, for CVE-2020-25647
  - add 0430-lib-arg-Block-repeated-short-options-that-require-an.patch, for CVE-2021-20225
  - add 0432-commands-menuentry-Fix-quoting-in-setparams_prefix.patch, for CVE-2021-20233
  - add 0385-dl-Only-allow-unloading-modules-that-are-not-depende.patch,  for CVE-2020-25632


author: xunian <xunian@nfschina.com> - 2.02-78.nfs.5
changelog:
  - Fix #0371837.
  - Add 0281-yylex-Make-lexer-fatal-errors-actually-be-fatal. for CVE-2020-10713.
  - Add 0313-linuxefi-fail-kernel-validation-without-shim-protoco. for CVE-2020-15705.


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32-0-4
changelog:
  - Add Add ibus-libpinyin and ibus-table-chinese-wubi-jidian into the default input sources.
    Patch: 0001-Add-default-input-sources-for-svs2.4.patch.


author: Jia Lina <saidan@cpu-os.ac.cn> - 3.32-0-6
changelog:
  - add post script to solve issue:
    GLib-GIO-ERROR **: 17:02:39.433: No GSettings schemas are installed on the system


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32-0-7
changelog:
  - Modify the default wubi input source to wubi-haifeng86.
    Patch: 0002-Modify-default-wubi-input-source-to-wubi-haifeng86.patch.


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-6
changelog:
  - Prevent spawning new daemons if outgoing operation exists (#1739117)
  - Force NT1 protocol version for workgroup support (#1739116)


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 1.36.2-8
changelog:
  - Modify the file-operations policy to disable non-root user to get permission.
    Patch: 0001-daemon-Modify-the-file-operations-policy.patch


author: Zhang Dongjun <dongjun@cpu-os.ac.cn> - 1.36.2-10
changelog:
  - Add removabel disk unmount notification translation
    Patch: 0003-removable-disk-unmount-notification-translation.patch


author: Jakub Martisko <jamartis@redhat.com> - 1.9-5
changelog:
  - Fix wrong skip size in gzexe
  - Add new test dealing with the ^^ (needs autoreconf)
  - Enable make check (needs less)
    Resolves: 1705413

   * Tue Aug 07 2018 Jakub Martisko <jamartis@redhat.com> - 1.9-4
   - Fix FTBFS bug (gnulib problems)
   - more details: https://lists.gnu.org/r/bug-gnulib/2018-03/msg00000.html
     Resolves 1611722


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-36
changelog:
  - Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
    mod_proxy_wstunnel
  - Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-37
changelog:
  - Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
    to be able to handle certs without matching private key


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-40
changelog:
  - Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
  - Resolves: #1937334 - SSLProtocol with based virtual hosts


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-41
changelog:
  - Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
  - Resolves: #1905613 - mod_ssl does not like valid certificate chain
  - Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
    usertrack
  - Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
  - Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
    dereference in parser
  - Resolves: #1934741 - Apache trademark update - new logo


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-42
changelog:
  - Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
    a crafted request uri-path
  - Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
    mod_session


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-43
changelog:
  - Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
    a crafted request uri-path


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-33
changelog:
  - Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
    concurrency issues
  - Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
    a client cert to backend server
  - Resolves: #1680118 - unorderly connection close when client attempts
    renegotiation


author: Joe Orton <jorton@redhat.com> - 2.4.38-6
changelog:
  - apachectl: cleanup and replace script wholesale (#1641237)
   * drop "apachectl fullstatus" support
   * run systemctl with --no-pager option
   * implement graceful&graceful-stop by signal directly
  - run "httpd -t" from legacy action script


author: Joe Orton <jorton@redhat.com> - 2.4.39-3
changelog:
  - fix statedir symlink to point to /var/lib/httpd (#1697662)
  - mod_reqtimeout: fix default values regression (PR 63325)


author: xunian <xunian@nfschina.com> - 2.4.46-3
changelog:
  - #0371839: Fix CVE-2021-26691.
  - #0371723: fix CVE-2022-22720.
  - ver:2.4.46 fix CVE-2020-9490 CVE-2020-11984 CVE-2020-11993.


author: xunian <xunian@nfschina.com> - 2.4.46-5
changelog:
  - Fix CVE-2022-26377.
  - Fix CVE-2022-28614.
  - Fix CVE-2022-28615.
  - Fix CVE-2022-29404.
  - Fix CVE-2022-30522.
  - Fix CVE-2022-30556.
  - Fix CVE-2022-31813.


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-7
changelog:
  - Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
    smuggling
  - Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in 
    ap_strcmp_match()
  - Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
    by hop-by-hop mechanism
  - Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
  - Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
  - Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
  - Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
    with websockets


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-11
changelog:
  - Resolves: #2162500 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write
    of zero byte
  - Resolves: #2162486 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting
  - Resolves: #2162510 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request
    smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.57-1
changelog:
  - Resolves: #2184403 - rebase httpd to 2.4.57
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.57-2
changelog:
  - Resolves: #2186645 - Fix issue found by covscan in httpd package
  - Resolves: #2173295 - Include Apache httpd module mod_authnz_fcgi


author: Honggang Li <honli@redhat.com> - 29.0-2
changelog:
  - Suppress ibdev2netdev warning messgae
  - Unversioned documentation directory
  - Resolves: bz1794904, bz1824853


author: Honggang Li <honli@redhat.com> - 32.0-1
changelog:
  - Update to upstream v32 release for features and fixes
  - Support Amazon Elastic Fabric Adapter
  - Enable pyverbs
  - Add a check for udevadm in the specfile
  - Resolves: bz1851721, bz1856076, bz1887396, bz1868804


author: Honggang Li <honli@redhat.com> - 32.0-4
changelog:
  - Update to upstream stable release v32.1
  - Fix mlx5 pyverbs CQ test
  - Resolves: bz1915745, bz1907377


author: Mike FABIAN <mfabian@redhat.com> - 1.9.15-1
changelog:
  - update to 1.9.15
  - Update translations from zanata (ca, de, fr, uk updated)
  - Point to new home-page in the “About” tab.
  - Improve README


author: Mike FABIAN <mfabian@redhat.com> - 1.9.16-1
changelog:
  - update to 1.9.16
  - Avoid running initialization code of ibus_table_location.py
    when using ibus-table-createdb.
  - Make it work on Python 3.6 (Unbreak sqlite on Python 3.6)
    (Resolves: rhbz#1413580).


author: Mike FABIAN <mfabian@redhat.com> - 1.9.17-1
changelog:
  - update to 1.9.17
  - Load .desktop file for ibus-setup-table correctly under Gnome Wayland
  - Set WM_CLASS of ibus-setup-table correctly


author: Mike FABIAN <mfabian@redhat.com> - 1.9.18-1
changelog:
  - update to 1.9.18
  - validate ibus-table.appdata.xml in %check
  - Update translations from zanata (pt_BR updated, es new)
  - Don't query user database if user define phrase and
    dynamic adjust are disabled (thanks to heiher)
  - Enable hash map based cache for user database enabled
    (thanks to heiher)
  - Import hash map based cache for table database (thanks to
    heiher)
  - Install appstream metadata to /usr/share/metainfo/ (thanks
    to jbicha)
  - Fix some appdata validation issues (thanks to jbicha)
  - Fix bug in Unihan_Variants.txt, 著 U+8457 is both
    simplified *and* traditional Chinese (thanks to heiher)


author: Phil Sutter <psutter@redhat.com> - 1.8.4-8
changelog:
  - xtables-translate: Fix for iface++
  - tests: shell: Fix skip checks with --host mode
  - xtables-restore: fix for --noflush and empty lines


author: Phil Sutter <psutter@redhat.com> - 1.8.4-11
changelog:
  - Complete ebtables-nft among match support
  - Replace RHEL-only xtables-monitor fix with upstream solution
  - xtables: Align effect of -4/-6 options with legacy
  - xtables: Drop -4 and -6 support from xtables-{save,restore}
  - Review systemd unit files


author: Herton R. Krzesinski <herton@redhat.com> - 20190516-94.git711d3297
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
  - Pull new version of Netronome firmware (rhbz 1663989)
  - Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
  - Update Netronome firmware that include bug fixes (rhbz 1673890)
  - Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)


author: Bruno Meneguele <bmeneg@redhat.com> - 20191202-95.gite8a0f4c9
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
  - Update bnx2x firmware to latest upstream (rhbz 1720395)
  - AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
  - Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
  - Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
  - Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
  - DDP Package to support Columbiaville NIC (rhbz 1726454)
  - Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
  - Change install section to use usptream installation process


author: Frantisek Hrbata <fhrbata@redhat.com> - 20200512-98.gitb2cad6a2
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
  - Update bnx2x firmware to latest upstream (rhbz 1791031)
  - Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
  - Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)


author: Jan Stancek <jstancek@redhat.com> - 20201022-100.gitdae4b4cd
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - ice: Pull Comms Market Segment Package (rhbz 1861491)
  - ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)


author: Jan Stancek <jstancek@redhat.com> - 20201118-101.git7455a360
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
  - Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)


author: Bruno Meneguele <bmeneg@redhat.com> - 20210702-103.gitd79c2677
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
  - Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
  - Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
  - Package the new iwl7260 ucode files and also the new binary format PNVM


author: Josef Ridky <jridky@redhat.com> - 2.0.14-5
changelog:
  - Fix CVE-2021-26927 (#1933860)
  - Fix CVE-2021-26926 (#1922316)
  - Fix CVE-2021-3272 (#1922283)
  - Fix CVE-2020-27828 (#1905692)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.4
changelog:
  - Require a version of java-1.7.0-openjdk-devel with a working jar uf
  - Use readlink rather than a wildcard to resolve the system JDK directory
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.5
changelog:
  - Change to disable RC4 did not add MD5 checksum of previous java.security file from 2016/01
  - Resolves: rhbz#1350042


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.111-2.6.7.6
changelog:
  - declared check_sum_presented_in_spec and used in prep and check
  - it is checking that latest packed java.security is mentioned in listing
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.7
changelog:
  - Rebuild java-1.7.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372747)
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.0
changelog:
  - Bump to 2.6.8 and u121b00.
  - Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
  - Update md5sum list with checksum for the new java.security file.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.0
changelog:
  - Bump to 2.6.9 and u131b00.
  - Remove patch application debris in fsg.sh.
  - Re-generate PR2809 and RH1022017 against 2.6.9.
  - Update md5sum list with checksum for the new java.security file.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.231-2.6.19.1
changelog:
  - Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
  - Fix fsg.sh to fail if patching fails.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.241-2.6.20.1
changelog:
  - Bump to 2.6.20 and OpenJDK 7u241-b01.
  - Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Drop JDK-8226318/RH1738637 which is now included upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.261-2.6.22.1
changelog:
  - Add release notes from IcedTea.
  - Mark license files with appropriate macro.
  - Resolves: rhbz#1810557


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3
changelog:
  - Remove CVE-2018-3639 mitigation due to performance regression and
      OpenJDK position on speculative execution vulnerabilities.
      https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4
changelog:
  - Revert SSBD removal for now, until appropriate messaging has been decided.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b05.
  - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
  - Revise b05 snapshot to include JDK-8236178.
  - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b07.
  - Switch to GA mode for final release.
  - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b08.
  - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.4.11-1
changelog:
  - Update to shenandoah-jdk-11.0.4+11 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.4.11-4
changelog:
  - Backport JDK-8230923 so arguments are passed to security providers.
  - Update RH1655466 patch with changes in OpenJDK 8 version.
  - SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file.
  - Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg.
  - No need to substitute path to nss.fips.cfg as java.security file supports a java.home variable.
  - Resolves: rhbz#1751845


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.1-0.1.ea
changelog:
  - Update to shenandoah-jdk-11.0.5+1 (EA)
  - Switch to EA mode for 11.0.5 pre-release builds.
  - Drop JDK-8223482 which is included upstream in 11.0.5+1.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.10-1
changelog:
  - Update to shenandoah-jdk-11.0.5+10 (GA)
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Tomas Orsava <torsava@redhat.com> - 2.6.0-5
changelog:
  - Require the Python interpreter directly instead of using the package name
  - Resolves: rhbz#1633617


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-7
changelog:
  - Resolves: rhbz#1634268 - ECP signature check fails with
                             LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when
                             assertion signed instead of response


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-8
changelog:
  - Resolves: rhbz#1730018 - lasso includes "Destination" attribute in SAML
                             AuthnRequest populated with SP
                             AssertionConsumerServiceURL when ECP workflow
                             is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-9
changelog:
  - Resolves: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (coming
                             from lasso)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-10
changelog:
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-11
changelog:
  - Bump release to force the package through OSCI as the previous
    build reached CI just in time for an outage
  - Related: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (comingfrom lasso)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-12
changelog:
  - Fix a dead code issue in the signature wrapping patch
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-5
changelog:
  - kdumpctl: check for ssh path availability when rebuild
  - kdumpctl: Check kdump.conf for error when rebuild is called
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
  - aarch64/kdump.sysconfig: Make config options similar to x86_64


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-9
changelog:
  - kexec/arm64: Add support for handling zlib compressed (Image.gz) image
  - kexec/kexec-zlib.h: Add 'is_zlib_file()' helper function
  - kexec-uImage-arm64.c: Fix return value of uImage_arm64_probe()
  - kexec/kexec.c: Add the missing close() for fd used for kexec_file_load()


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-4
changelog:
  - kexec-kdump-howto.txt: Add document about encrypted targets
  - kexec-kdump-howto.txt: Add document about initramfs rebiuld
  - kexec-kdump-howto: Add note on setting correct value of kptr_restrict
  - doc: fix dead links in the file kexec-kdump-howto.txt
  - earlykdump: provide a prompt message after the rebuilding of kdump initramfs.
  - Get rid of duplicated strip_comments when reading config
  - mkdumprd: Improve the config reading logic
  - kdumpctl: don't always rebuild when extra_modules is set
  - kdumpctl: follow symlink when checking for modified files
  - fadump: leverage kernel support to re-regisgter FADump


author: David Howells <dhowells@redhat.com> - 1.5.9-1
changelog:
  - Add manpages for get_persistent.
  - Fix memory leaks in keyctl_describe/read/get_security_alloc().
  - Use keyctl_describe_alloc in dump_key_tree_aux rather than open coding it.
  - Exit rather than returning from act_xxx() functions.
  - Fix memory leak in dump_key_tree_aux.
  - Only get the groups list if we need it.
  - Don't trust sscanf's %n argument.
  - Use the correct path macros in the specfile.
  - Avoid use realloc when the memory has no content.
  - Fix a bunch of issues in key.dns_resolver.
  - Fix command table searching in keyctl utility.
  - Fix a typo in the permissions mask constants.
  - Improve the keyctl_read manpage.
  - Add man7 pages describing various keyrings concepts.


author: David Howells <dhowells@redhat.com> - 1.5.10-1
changelog:
  - Include sys/types.h in keyutils.h.
  - The dns resolver needs limits.h.
  - Overhaul of all manual pages.
  - Some manual pages moved to Linux man-pages project.
  - Add Diffie-Helman keyctl function.


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.134-56
changelog:
  - Finished converting the VDO device to conform to the DM convention of not
    issuing I/O while suspended.
  - Resolves: rhbz#1659303
  - Fixed a bug where crash recovery could use the wrong threads for certain
    operations potentially resulting in memory corruption.
  - Resolves: rhbz#1703621
  - Fixed a bug which could cause segfaults when running the vdostatus
    command.
  - Resolves: rhbz#1669960
  - Eliminated a backtrace from the error logged when creating a VDO device
    with an erroneous physical size in the table line.
  - Resolves: rhbz#1717435
  - Fixed a possible use-after-free of the UDSConfiguration.
  - Resolves: rhbz#1653802
  - Made VDO a singleton device because multi-segment devices containing a
    VDO have a number of issues.
  - Resolves: rhbz#1725077
  - Converted the VDO device to conform to the DM convention of not issuing
    writes from the constructor.
  - Resolves: rhbz#1669086


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.138-56
changelog:
  - Fixed a crash on allocation failure and a use-after-free race introduced by
    the changes to avoid issuing I/O while suspended.
  - Resolves: rhbz#1659303


author: xunian <xunian@nfschina.com> - 1.17-11
changelog:
  - Fixed #0371179 CVE-2021-36222和CVE-2021-37750 .
  - Add Fix-KDC-null-deref-on-bad-encrypted-challenge.patch CVE-2021-36222.
  - Add Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch CVE-2021-37750.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.19.2-6
changelog:
  - Drop old trigger scriplet
  - Reenable package notes and strip LDFLAGS from krb5-config (rhbz#2048909)


author: Julien Rische <jrische@redhat.com> - 1.19.2-10
changelog:
  - Use p11-kit as default PKCS11 module
  - Resolves: rhbz#2073274
  - Try harder to avoid password change replay errors
  - Resolves: rhbz#2072059


author: Julien Rische <jrische@redhat.com> - 1.19.2-11
changelog:
  - Allow libkrad UDP/TCP connection to localhost in FIPS mode
  - Resolves: rhbz#2082189
  - Read GSS configuration files with mtime 0


author: Andreas Schneider <asn@redhat.com> - 1.19.2-12
changelog:
  - Use baserelease to set the release number
  - Do not define netlib, but use autoconf detection for res_* functions
  - Add missing BR for resolv_wrapper to run t_discover_uri.py


author: Stephen Augustus <saugustus@vmware.com> - 1.18.4
changelog:
  - Source CNI plugins from https://storage.googleapis.com/k8s-artifacts-cni/release
    instead of https://dl.k8s.io/network-plugins


author: Stephen Augustus <saugustus@vmware.com> - 1.18.4
changelog:
  - Source cri-tools from https://storage.googleapis.com/k8s-artifacts-cri-tools/release
    instead of https://github.com/kubernetes-sigs/cri-tools


author: Isaac Boukris <iboukris@redhat.com> - 2.2.0-1
changelog:
  - Resolves: rhbz#1878114 - Rebase libldb to the version required by Samba
  - Resolves: rhbz#1794349 - Build libldb with lmdb support


author: Andreas Schneider <asn@redhat.com> - 2.3.0-1
changelog:
  - resolves: rhbz#1945021 - Update to version 2.3.0
  - resolves: rhbz#1897082 - Fix libldb tests on aarch64


author: Ondrej Dubaj <odubaj@redhat.com> - 3.26.0-10
changelog:
  - Fixed CVE-2020-13632 (#1845572)
  - Fixed CVE-2020-13631 (#1845474)
  - Fixed CVE-2020-13630 (#1845153)


author: Petr Kubat <pkubat@redhat.com> - 3.26.0-1
changelog:
  - Updated to version 3.26.0 (https://sqlite.org/releaselog/3_26_0.html)
    Fixes fts3/4 corrupt database exploit (#1659684)


author: Karel Zak <kzak@redhat.com> 2.32.1-13
changelog:
  - fix #1734553 - blkid_get_dev() leak file descriptor to underlying block device
  - fix #1719069 - findmnt warning "recommended root FS passno is 1" for XFS


author: Jens Petersen <petersen@redhat.com> - 0.8.6-1
changelog:
  - update to 0.8.6 (#1462722)
  - fixes manpage conflict (#1504831)
  - condition the gcc deprecation patch on epel < 7
  - clean up spec file


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-2
changelog:
  - make only_urandom a default in non-presence of configuration file
  - run the full FIPS selftests only when the library is called from
    application


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-3
changelog:
  - add CMAC selftest for FIPS POST
  - add continuous FIPS entropy test
  - disable non-approved FIPS hashes in the enforced FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.8.5-3
changelog:
  - new upstream version 1.8.5
  - AES performance improvements backported from master branch
  - FIPS module is implicit with kernel FIPS flag
  - always run the FIPS selftests if FIPS module is installed


author: Jakub Jelen <jjelen@redhat.com> - 1.8.5-6
changelog:
  - Fix for CVE-2021-33560 (#1971421)
  - Enable HW optimizations in FIPS (#1976137)
  - Performance enchancements for ChaCha20 and Poly1305 (#1855231)


author: Kalev Lember <klember@redhat.com> - 3.12.0-14
changelog:
  - Add gnome-keyring-devel provides (#1557241)
  - Minor spec cleanup
  - Use license macro for COPYING
  - Rely on pkgconfig dep extractor instead of manual glib2-devel requires
  - Tighten -devel requires with the _isa macro


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.3-3
changelog:
  - Allow for the tablet mode quirk to apply to touchpads (#1664225)
  - Add a quirk for the Asus VivoBook Flip to keep the
    keyboard and touchpad working in tablet mode


author: Michal Židek <mzidek@redhat.com> - 2.2.0-13
changelog:
  - Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
              systemd-user service in the account phase in RHEL-8


author: Michal Židek <mzidek@redhat.com> - 2.2.0-14
changelog:
  - Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                             should not cause files domain entries to be
                             qualified, this can break sudo access


author: Michal Židek <mzidek@redhat.com> - 2.2.0-15
changelog:
  - Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                             loop if wrong PIN was provided


author: Michal Židek <mzidek@redhat.com> - 2.2.0-16
changelog:
  - Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                             the IP address of the machine updated in IPA upon
                             sssd.service startup


author: Michal Židek <mzidek@redhat.com> - 2.2.0-17
changelog:
  - Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                             keyring
  - Also apply a patch to fix gating tests issue


author: Michal Židek <mzidek@redhat.com> - 2.2.0-18
changelog:
  - Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
  - Also sync. kcm multihost tests with master


author: Michal Židek <mzidek@redhat.com> - 2.2.0-19
changelog:
  - Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                             new ones (kcm)


author: chunchao <chunchao@nfschina.com> - 2.2.0-21
changelog:
  - CONF: there is no use for CONFDB_FALLBACK_CONFIG.
  - upstream commit id: b639f335dfd8f5c9e15086492867da1272e26ba2


author: Pavel Březina <pbrezina@redhat.com> - 2.5.0-2
changelog:
  - Fix regression in sssd-kcm when upgrading from 2.4.0 directly to 2.5.0
  - Return correct error code for unknown/unsupported operations in sssd-kcm


author: Pavel Březina <pbrezina@redhat.com> - 2.5.1-2
changelog:
  - Multiple small fixes to reduce size of log files with debug_backtrace on
  - Fix a corner case bug in KCM renewals that makes user lookup in the daemon fail


author: Phil Sutter <psutter@redhat.com> [1.1.1-2.el8]
changelog:
  - chain: Hash chain list by name (Phil Sutter) [1658533]
  - chain: Add lookup functions for chain list and rules in chain (Phil Sutter) [1658533]
  - chain: Support per chain rules list (Phil Sutter) [1658533]
  - src: remove nftnl_rule_cmp() and nftnl_expr_cmp() (Phil Sutter) [1658533]


author: Phil Sutter <psutter@redhat.com> [1.1.1-3.el8]
changelog:
  - src: chain: Fix nftnl_chain_rule_insert_at() (Phil Sutter) [1666495]
  - src: chain: Add missing nftnl_chain_rule_del() (Phil Sutter) [1666495]
  - flowtable: Fix for reading garbage (Phil Sutter) [1661327]
  - flowtable: Fix memleak in nftnl_flowtable_parse_devs() (Phil Sutter) [1661327]
  - flowtable: Fix use after free in two spots (Phil Sutter) [1661327]
  - flowtable: Add missing break (Phil Sutter) [1661327]
  - object: Avoid obj_ops array overrun (Phil Sutter) [1661327]


author: Phil Sutter <psutter@redhat.com> [1.1.4-2.el8]
changelog:
  - obj/ct_timeout: Fix NFTA_CT_TIMEOUT_DATA parser (Phil Sutter) [1758673]
  - set_elem: Validate nftnl_set_elem_set() parameters (Phil Sutter) [1758673]
  - obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data() (Phil Sutter) [1758673]
  - set: Don't bypass checks in nftnl_set_set_u{32,64}() (Phil Sutter) [1758673]
  - obj/tunnel: Fix for undefined behaviour (Phil Sutter) [1758673]
  - set_elem: Fix return code of nftnl_set_elem_set() (Phil Sutter) [1758673]
  - obj: ct_timeout: Check return code of mnl_attr_parse_nested() (Phil Sutter) [1758673]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el8]
changelog:
  - chain: Correctly check realloc() call (Phil Sutter) [1778952]
  - flowtable: Correctly check realloc() call (Phil Sutter) [1778952]
  - chain: Fix memleak in error path of nftnl_chain_parse_devs() (Phil Sutter) [1778952]
  - flowtable: Fix memleak in error path of nftnl_flowtable_parse_devs() (Phil Sutter) [1778952]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el8]
changelog:
  - set_elem: Introduce support for NFTNL_SET_ELEM_KEY_END (Phil Sutter) [1795223]
  - set: Add support for NFTA_SET_DESC_CONCAT attributes (Phil Sutter) [1795223]
  - include: resync nf_tables.h cache copy (Phil Sutter) [1795223]


author: Matt Domsch <mdomsch@fedoraproject.org> - 1.4.2-5
changelog:
  - Add systemd protections and restart
  - Use systemd RuntimeDirectory instead of tmpfiles where possible
  - Default config file to using local socket


author: Andreas Schneider <asn@redhat.com> - 1.1.3-1
changelog:
  - Update to version 1.1.3
    * https://gitlab.com/cwrap/pam_wrapper/-/blob/master/CHANGELOG
    * resolves: #1816943


author: Tomáš Mráz <tmraz@redhat.com> 1.4.0-1
changelog:
  - Do not try to check presence of too short username in password
  - Make the user name check optional (via usercheck option)
  - Add an 'enforcing' option to make the checks to be warning-only
    in PAM
  - The difok = 0 setting will disable all old password similarity
    checks except new and old passwords being identical
  - Updated translations from Zanata


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.4.0-4
changelog:
  - Python 2 binary package renamed to python2-pwquality
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-2.1
changelog:
  - Use Python distutils to install SELinux python bindings (#1719771)
  - Move  sefcontext_compile to -utils package (#1612518)


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-2
changelog:
  - reset pointer after free in cil_strpool_destroy()
  - cil: Add ability to redeclare types[attributes]
  - cil: Keep attributes used by generated attributes in neverallow rules
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - fix memory leak in sepol_bool_query()
  - cil: drop wrong unused attribute
  - cil: fix -Wwrite-strings warning
  - cil: __cil_post_db_neverallow_attr_helper() does not use extra_args


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-5
changelog:
  - cil: Create new keep field for type attribute sets
  - build: follow standard semantics for DESTDIR and PREFIX
  - cil: show an error when cil_expr_to_string() fails


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-6
changelog:
  - Prevent freeing unitialized value in ibendport handling
  - Add support for the SCTP portcon keyword
  - Export sepol_polcap_getnum/name functions


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-3
changelog:
  - cil: Fix out-of-bound read of file context pattern ending with "\"
  - cil: Destroy classperms list when resetting classpermission (#1983517)
  - cil: Destroy classperm list when resetting map perms (#1983521)
  - cil: cil_reset_classperms_set() should not reset classpermission (#1983525)
  - cil: Set class field to NULL when resetting struct cil_classperms
  - cil: More strict verification of constraint leaf expressions
  - cil: Exit with an error if declaration name is a reserved word
  - cil: Allow permission expressions when using map classes
  - cil: Reorder checks for invalid rules when building AST
  - cil: Cleanup build AST helper functions
  - cil: Create new first child helper function for building AST
  - cil: Remove unused field from struct cil_args_resolve
  - cil: Destroy disabled optional blocks after pass is complete
  - cil: Check if name is a macro parameter first
  - cil: fix NULL pointer dereference in __cil_insert_name
  - cil: Report disabling an optional block only at high verbose levels
  - cil: Use AST to track blocks and optionals when resolving
  - cil: Reorder checks for invalid rules when resolving AST
  - cil: Sync checks for invalid rules in booleanifs
  - cil: Check for statements not allowed in optional blocks (#1983530)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10
changelog:
  - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
    i2alaw_array in alaw (#1673085)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10.1
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985027)


author: jengelh@inai.de
changelog:
  - Rename spf2 to libspf2-tools (like we do for e.g. libwmf-tools)
  - Move README file to tools subpackage. Trim description of SRPM
    a bit.


author: crrodriguez@opensuse.org
changelog:
  - Use -std=gnu89, logging macros are broken when __STDC_VERSION__ >= 199901L
    is true, which is the case when using GCC5.


author: Marcus Meissner <meissner@suse.com>
changelog:
  - 0001-spf_compile.c-Correct-size-of-ds_avail.patch: fix remote overflow in SPF parsing
    CVE-2021-20314 bsc#1189104


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-1
changelog:
  - Resolves: rhbz#1684577 - Rebase libtalloc to version 2.1.16 for Samba
  - Resolves: rhbz#1597315 - libtalloc uses Python 2 to build
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-2
changelog:
  - Remove python2 libraries on upgrade
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-3
changelog:
  - Also obsolete python2-libtalloc-debuginfo
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.16-1
changelog:
  - New upstream release 1.3.16
  - Use RHEL_ALLOW_PYTHON2_FOR_BUILD=1 until libtalloc uses waf3
  - Patch the waf script to explicitly call python2 as "env python" doesn't
    yield py2 anymore


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.18.1
changelog:
  - Resolves: rhbz#1684579 - Rebase libtdb to version 1.3.18 for Samba
  - Resolves: rhbz#1597319 - libtdb uses Python 2 to build
  - Resolves: rhbz#1567138 - libtdb: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.18.2
changelog:
  - Obsolete the python2 packages on upgrade
  - Resolves: rhbz#1567138 - libtdb: Drop Python 2 subpackage from RHEL 8


author: Isaac Boukris <iboukris@redhat.com> - 1.4.2-2
changelog:
  - Resolves: rhbz#1754420 - Rebase libtdb 1.4.2 for samba
  - Related: rhbz#1754420 - Fix sssd tests (tdb)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.37-1
changelog:
  - New upstream release 0.9.37
  - Use RHEL_ALLOW_PYTHON2_FOR_BUILD=1 for build
  - Use %{__python2}, not "python", as the Python2 interpreter


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.39-1
changelog:
  - Resolves: #1684580 - Rebase libtevent to version 0.9.36 for Samba
  - Resolves: #1597318 - libtevent uses Python 2 to build
  - Resolves: #1567139 - libtevent: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com>
changelog:
  - Remove the python2 subpackages on upgrade
  - Resolves: #1567139 - libtevent: Drop Python 2 subpackage from RHEL 8


author: Isaac Boukris <iboukris@redhat.com> - 0.10.0-2
changelog:
  - Resolves: #1754421 - Upgrade tevent to 0.10.0 version for samba
  - Related: #1754421 - Fix sssd tests (tevent)


author: Steve Dickson <steved@redhat.com> 1.1.4-4
changelog:
  - Enable gating using reverse dependency testing of nfs-utils (bz 1681965)
  - Updated the URL (bz 1638671)
  - Fix EOF detection on non-blocking socket (bz 1641875)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-27
changelog:
  - RHEL: spec: Disable gluster on i686 (rhbz#1722668)
  - rpc: virnetlibsshsession: update deprecated functions (rhbz#1722735)


author: Danilo de Paula <ddepaula@redhat.com> - 4.5.0-28
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1695587
    (Ensure modular RPM upgrade path)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-29
changelog:
  - cpu: allow include files for CPU definition (rhbz#1686895)
  - cpu: fix cleanup when signature parsing fails (rhbz#1686895)
  - cpu: push more parsing logic into common code (rhbz#1686895)
  - cpu: simplify failure cleanup paths (rhbz#1686895)
  - cpu_map: Add support for arch-capabilities feature (rhbz#1693433)
  - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1686895)
  - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1686895)
  - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1686895)
  - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1686895)
  - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1686895)
  - cpu_x86: Separate ancestor model parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Separate vendor parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Separate feature list parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Make sure CPU model names are unique in cpu_map (rhbz#1686895)
  - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1686895)
  - cpu_x86: Store CPU signature in an array (rhbz#1686895)
  - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1686895)
  - cpu_x86: Log decoded CPU model and signatures (rhbz#1686895)
  - qemu_capabilities: Inroduce virQEMUCapsGetCPUModelX86Data (rhbz#1686895)
  - qemu_capabilities: Introduce virQEMUCapsGetCPUModelInfo (rhbz#1686895)
  - qemu_capabilities: Use virQEMUCapsGetCPUModelInfo (rhbz#1686895)
  - cpu_x86: Add virCPUx86DataGetSignature for tests (rhbz#1686895)
  - cpu_map: Add hex representation of signatures (rhbz#1686895)
  - cputest: Test CPU signatures (rhbz#1686895)
  - cpu_map: Add more signatures for Conroe CPU model (rhbz#1686895)
  - cpu_map: Add more signatures for Penryn CPU model (rhbz#1686895)
  - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Westmere CPU model (rhbz#1686895)
  - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Haswell CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1686895)
  - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1686895)
  - cpu_x86: Require <cpuid> within <feature> in CPU map (rhbz#1697627)
  - cputest: Add data for Intel(R) Xeon(R) Platinum 8268 CPU (rhbz#1693433)
  - cpu_map: Add Cascadelake-Server CPU model (rhbz#1693433)
  - cpu_x86: Introduce virCPUx86DataItem container struct (rhbz#1697627)
  - cpu_x86: Rename virCPUx86Vendor.cpuid (rhbz#1697627)
  - cpu_x86: Rename virCPUx86DataItem variables (rhbz#1697627)
  - cpu_x86: Rename x86DataCpuidNext function (rhbz#1697627)
  - cpu_x86: Rename x86DataCpuid (rhbz#1697627)
  - cpu_x86: Rename virCPUx86CPUIDSorter (rhbz#1697627)
  - cpu_x86: Rename virCPUx86DataAddCPUIDInt (rhbz#1697627)
  - cpu_x86: Rename virCPUx86DataAddCPUID (rhbz#1697627)
  - cpu_x86: Rename virCPUx86VendorToCPUID (rhbz#1697627)
  - cpu_x86: Simplify x86DataAdd (rhbz#1697627)
  - cpu_x86: Introduce virCPUx86DataCmp (rhbz#1697627)
  - cpu_x86: Make x86cpuidSetBits more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidClearBits more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidAndBits more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidMatchMasked more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidMatch more general (rhbz#1697627)
  - cpu_x86: Store virCPUx86DataItem content in union (rhbz#1697627)
  - cpu_x86: Add support for storing MSR features in CPU map (rhbz#1697627)
  - cpu_x86: Move *CheckFeature functions (rhbz#1697627)
  - cputest: Add support for MSR features to cpu-parse.sh (rhbz#1697627)
  - util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1697627)
  - vircpuhost: Add support for reading MSRs (rhbz#1697627)
  - virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1697627)
  - cpu_x86: Fix placement of *CheckFeature functions (rhbz#1697627)
  - cpu_conf: Introduce virCPUDefFilterFeatures (rhbz#1697627)
  - qemu_command: Use consistent syntax for CPU features (rhbz#1697627)
  - tests: Add QEMU caps data for future 4.1.0 (rhbz#1697627)
  - tests: Add domain capabilities case for QEMU 4.1.0 (rhbz#1697627)
  - qemuxml2argvtest: Add test for CPU features translation (rhbz#1697627)
  - qemu: Add APIs for translating CPU features (rhbz#1697627)
  - qemu: Probe for max-x86_64-cpu type (rhbz#1697627)
  - qemu: Probe for "unavailable-features" CPU property (rhbz#1697627)
  - qemu: Probe host CPU after capabilities (rhbz#1697627)
  - qemu_command: Use canonical names of CPU features (rhbz#1697627)
  - qemu: Translate feature names from query-cpu-model-expansion (rhbz#1697627)
  - qemu: Don't use full CPU model expansion (rhbz#1697627)
  - qemu: Make qemuMonitorGetGuestCPU usable on x86 only (rhbz#1697627)
  - cpu: Introduce virCPUDataAddFeature (rhbz#1697627)
  - qemu: Add type filter to qemuMonitorJSONParsePropsList (rhbz#1697627)
  - util: string: Introduce macro for automatic string lists (rhbz#1697627)
  - util: json: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1697627)
  - qemu: Introduce generic qemuMonitorGetGuestCPU (rhbz#1697627)
  - qemu_process: Prefer generic qemuMonitorGetGuestCPU (rhbz#1697627)
  - util: Rework virStringListAdd (rhbz#1697627)
  - conf: Introduce virCPUDefCheckFeatures (rhbz#1697627)
  - cpu_x86: Turn virCPUx86DataIteratorInit into a function (rhbz#1697627)
  - cpu_x86: Introduce virCPUx86FeatureFilter*MSR (rhbz#1697627)
  - cpu_x86: Read CPU features from IA32_ARCH_CAPABILITIES MSR (rhbz#1697627)
  - cpu_map: Introduce IA32_ARCH_CAPABILITIES MSR features (rhbz#1697627)
  - qemu: Forbid MSR features with old QEMU (rhbz#1697627)
  - qemu: Drop MSR features from host-model with old QEMU (rhbz#1697627)
  - cpu_x86: Fix memory leak - virCPUx86GetHost (rhbz#1697627)
  - qemu: Use @tmpChr in qemuDomainDetachChrDevice to build device string (rhbz#1624204)
  - qemu: Drop "user-" prefix for guestfwd netdev (rhbz#1624204)
  - qemu_hotplug: Attach guestfwd using netdev_add (rhbz#1624204)
  - qemu_hotplug: Detach guestfwd using netdev_del (rhbz#1624204)
  - qemuhotplugtest: Test guestfwd attach and detach (rhbz#1624204)
  - daemon: Register secret driver before storage driver (rhbz#1685151)
  - bhyve: Move autostarting of domains into bhyveStateInitialize (rhbz#1685151)
  - Revert "virStateDriver - Separate AutoStart from Initialize" (rhbz#1685151)
  - Revert "Separate out StateAutoStart from StateInitialize" (rhbz#1685151)
  - util: moving 'type' argument to avoid issues with mount() syscall. (rhbz#1689297)
  - util: cgroup: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1689297)
  - vircgroup: Rename structs to start with underscore (rhbz#1689297)
  - vircgroup: Introduce standard set of typedefs and use them (rhbz#1689297)
  - vircgroup: Extract file link resolving into separate function (rhbz#1689297)
  - vircgroup: Remove unused function virCgroupKill() (rhbz#1689297)
  - vircgroup: Unexport unused function virCgroupAddTaskController() (rhbz#1689297)
  - vircgroup: Unexport unused function virCgroupRemoveRecursively (rhbz#1689297)
  - vircgroup: Move function used in tests into vircgrouppriv.h (rhbz#1689297)
  - vircgroup: Remove pointless bool parameter (rhbz#1689297)
  - vircgroup: Extract mount options matching into function (rhbz#1689297)
  - vircgroup: Use virCgroupMountOptsMatchController in virCgroupDetectPlacement (rhbz#1689297)
  - vircgroup: Introduce virCgroupEnableMissingControllers (rhbz#1689297)
  - vircgroup: machinename will never be NULL (rhbz#1689297)
  - vircgroup: Remove virCgroupAddTaskController (rhbz#1689297)
  - vircgroup: Introduce virCgroupGetMemoryStat (rhbz#1689297)
  - lxc: Use virCgroupGetMemoryStat (rhbz#1689297)
  - vircgroup: fix MinGW build (rhbz#1689297)
  - vircgroup: Duplicate string before modifying (rhbz#1689297)
  - vircgroup: Extract controller detection into function (rhbz#1689297)
  - vircgroup: Extract placement validation into function (rhbz#1689297)
  - vircgroup: Split virCgroupPathOfController into two functions (rhbz#1689297)
  - vircgroup: Call virCgroupRemove inside virCgroupMakeGroup (rhbz#1689297)
  - vircgroup: Simplify if conditions in virCgroupMakeGroup (rhbz#1689297)
  - vircgroup: Remove obsolete sa_assert (rhbz#1689297)
  - tests: Resolve possible overrun (rhbz#1689297)
  - vircgroup: cleanup controllers not managed by systemd on error (rhbz#1689297)
  - vircgroup: fix bug in virCgroupEnableMissingControllers (rhbz#1689297)
  - vircgroup: rename virCgroupAdd.*Task to virCgroupAdd.*Process (rhbz#1689297)
  - vircgroup: introduce virCgroupTaskFlags (rhbz#1689297)
  - vircgroup: introduce virCgroupAddThread (rhbz#1689297)
  - vircgroupmock: cleanup unused cgroup files (rhbz#1689297)
  - vircgroupmock: rewrite cgroup fopen mocking (rhbz#1689297)
  - vircgrouptest: call virCgroupDetectMounts directly (rhbz#1689297)
  - vircgrouptest: call virCgroupNewSelf instead virCgroupDetectMounts (rhbz#1689297)
  - util: introduce vircgroupbackend files (rhbz#1689297)
  - vircgroup: introduce cgroup v1 backend files (rhbz#1689297)
  - vircgroup: extract virCgroupV1Available (rhbz#1689297)
  - vircgroup: detect available backend for cgroup (rhbz#1689297)
  - vircgroup: extract virCgroupV1ValidateMachineGroup (rhbz#1689297)
  - vircgroup: extract virCgroupV1CopyMounts (rhbz#1689297)
  - vircgroup: extract v1 detect functions (rhbz#1689297)
  - vircgroup: extract virCgroupV1CopyPlacement (rhbz#1689297)
  - vircgroup: extract virCgroupV1ValidatePlacement (rhbz#1689297)
  - vircgroup: extract virCgroupV1StealPlacement (rhbz#1689297)
  - vircgroup: extract virCgroupV1DetectControllers (rhbz#1689297)
  - vircgroup: extract virCgroupV1HasController (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetAnyController (rhbz#1689297)
  - vircgroup: extract virCgroupV1PathOfController (rhbz#1689297)
  - vircgroup: extract virCgroupV1MakeGroup (rhbz#1689297)
  - vircgroup: extract virCgroupV1Remove (rhbz#1689297)
  - vircgroup: extract virCgroupV1AddTask (rhbz#1689297)
  - vircgroup: extract virCgroupV1HasEmptyTasks (rhbz#1689297)
  - vircgroup: extract virCgroupV1BindMount (rhbz#1689297)
  - vircgroup: extract virCgroupV1SetOwner (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioWeight (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetBlkioIoServiced (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetBlkioIoDeviceServiced (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWeight (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceReadIops (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWriteIops (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceReadBps (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWriteBps (rhbz#1689297)
  - vircgroup: extract virCgroupV1SetMemory (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetMemoryStat (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetMemoryUsage (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)Memory*Limit (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetMemSwapUsage (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Allow|Deny)Device (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Allow|Deny)AllDevices (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpuShares (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpuCfsPeriod (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpuCfsQuota (rhbz#1689297)
  - vircgroup: extract virCgroupV1SupportsCpuBW (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetCpuacct*Usage (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetCpuacctStat (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)FreezerState (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpusetMems (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpusetMemoryMigrate (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpusetCpus (rhbz#1689297)
  - vircgroup: rename virCgroupController into virCgroupV1Controller (rhbz#1689297)
  - vircgroup: rename controllers to legacy (rhbz#1689297)
  - vircgroup: remove VIR_CGROUP_SUPPORTED (rhbz#1689297)
  - vircgroup: include system headers only on linux (rhbz#1689297)
  - vircgroupv1: fix build on non-linux OSes (rhbz#1689297)
  - Revert "vircgroup: cleanup controllers not managed by systemd on error" (rhbz#1689297)
  - util: introduce cgroup v2 files (rhbz#1689297)
  - vircgroup: introduce virCgroupV2Available (rhbz#1689297)
  - vircgroup: introduce virCgroupV2ValidateMachineGroup (rhbz#1689297)
  - vircgroup: introduce virCgroupV2CopyMounts (rhbz#1689297)
  - vircgroup: introduce virCgroupV2CopyPlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2DetectMounts (rhbz#1689297)
  - vircgroup: introduce virCgroupV2DetectPlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2ValidatePlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2StealPlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2DetectControllers (rhbz#1689297)
  - vircgroup: introduce virCgroupV2HasController (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetAnyController (rhbz#1689297)
  - vircgroup: introduce virCgroupV2PathOfController (rhbz#1689297)
  - vircgroup: introduce virCgroupV2MakeGroup (rhbz#1689297)
  - vircgroup: introduce virCgroupV2Remove (rhbz#1689297)
  - vircgroup: introduce virCgroupV2AddTask (rhbz#1689297)
  - vircgroup: introduce virCgroupV2HasEmptyTasks (rhbz#1689297)
  - vircgroup: introduce virCgroupV2BindMount (rhbz#1689297)
  - vircgroup: introduce virCgroupV2SetOwner (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioWeight (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetBlkioIoServiced (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetBlkioIoDeviceServiced (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWeight (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceReadIops (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWriteIops (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceReadBps (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWriteBps (rhbz#1689297)
  - vircgroup: introduce virCgroupV2SetMemory (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetMemoryStat (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetMemoryUsage (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)MemoryHardLimit (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)MemorySoftLimit (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)MemSwapHardLimit (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetMemSwapUsage (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)CpuShares (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)CpuCfsPeriod (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)CpuCfsQuota (rhbz#1689297)
  - vircgroup: introduce virCgroupV2SupportsCpuBW (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetCpuacctUsage (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetCpuacctStat (rhbz#1689297)
  - vircgroup: register cgroup v2 backend (rhbz#1689297)
  - vircgroup: add support for hybrid configuration (rhbz#1689297)
  - vircgroupmock: change cgroup prefix (rhbz#1689297)
  - vircgroupmock: add support to test cgroup v2 (rhbz#1689297)
  - vircgrouptest: introduce initFakeFS and cleanupFakeFS helpers (rhbz#1689297)
  - vircgrouptest: prepare testCgroupDetectMounts for cgroup v2 (rhbz#1689297)
  - vircgrouptest: add detect mounts test for cgroup v2 (rhbz#1689297)
  - vircgrouptest: add detect mounts test for hybrid cgroups (rhbz#1689297)
  - vircgrouptest: prepare validateCgroup for cgroupv2 (rhbz#1689297)
  - vircgrouptest: add cgroup v2 tests (rhbz#1689297)
  - vircgrouptest: add hybrid tests (rhbz#1689297)
  - virt-host-validate: rewrite cgroup detection to use util/vircgroup (rhbz#1689297)
  - virt-host-validate: require freezer for LXC (rhbz#1689297)
  - virt-host-validate: Fix build on non-Linux (rhbz#1689297)
  - tests: Use correct function name in error path (rhbz#1689297)
  - util: Fix virCgroupGetMemoryStat (rhbz#1689297)
  - tests: Augment vcgrouptest to add virCgroupGetMemoryStat (rhbz#1689297)
  - vircgroup: introduce virCgroupKillRecursiveCB (rhbz#1689297)
  - vircgroupv2: fix virCgroupV2ValidateMachineGroup (rhbz#1689297)
  - util: implement virCgroupV2(Set|Get)CpusetMems (rhbz#1689297)
  - util: implement virCgroupV2(Set|Get)CpusetMemoryMigrate (rhbz#1689297)
  - util: implement virCgroupV2(Set|Get)CpusetCpus (rhbz#1689297)
  - util: enable cgroups v2 cpuset controller for threads (rhbz#1689297)
  - util: vircgroup: pass parent cgroup into virCgroupDetectControllersCB (rhbz#1689297)
  - internal: introduce a family of NULLSTR macros (rhbz#1689297)
  - util: vircgroup: improve controller detection (rhbz#1689297)
  - util: vircgroupv2: use any controller to create thread directory (rhbz#1689297)
  - util: vircgroupv2: enable CPU controller only if it's available (rhbz#1689297)
  - util: vircgroupv2: separate return values of virCgroupV2EnableController (rhbz#1689297)
  - util: vircgroupv2: don't error out if enabling controller fails (rhbz#1689297)
  - util: vircgroupv2: mark only requested controllers as available (rhbz#1689297)
  - Revert "util: vircgroup: pass parent cgroup into virCgroupDetectControllersCB" (rhbz#1689297)
  - util: vircgroupv2: stop enabling missing controllers with systemd (rhbz#1689297)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-30
changelog:
  - virWaitForDevices: Drop confusing part of comment (rhbz#1710575)
  - lib: Drop UDEVSETTLE (rhbz#1710575)
  - m4: Provide default value fore UDEVADM (rhbz#1710575)
  - m4: Drop needless string checks (rhbz#1710575)
  - util: vircgroup: introduce virCgroup(Get|Set)ValueRaw (rhbz#1658890)
  - util: vircgroup: move virCgroupGetValueStr out of virCgroupGetValueForBlkDev (rhbz#1658890)
  - util: vircgroupv1: add support for BFQ blkio files (rhbz#1658890)
  - util: vircgroupv2: add support for BFQ files (rhbz#1658890)
  - Handle copying bitmaps to larger data buffers (rhbz#1703160)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-31
changelog:
  - virDomainObjListAddLocked: fix double free (rhbz#1728530)
  - docs: schemas: Decouple the virtio options from each other (rhbz#1729675)
  - util: command: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1721434)
  - util: command: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1721434)
  - util: netdevopenvswitch: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1721434)
  - util: virnetdevopenvswitch: Drop an unused variable @ovs_timeout (rhbz#1721434)
  - util: netdevopenvswitch: use VIR_AUTOPTR for aggregate types (rhbz#1721434)
  - util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1721434)
  - virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1721434)
  - test: Introduce virnetdevopenvswitchtest (rhbz#1721434)
  - vircommand: Separate mass FD closing into a function (rhbz#1721434)
  - virCommand: use procfs to learn opened FDs (rhbz#1721434)
  - util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1721434)
  - util: Avoid possible error in virCommandMassClose (rhbz#1721434)
  - vircgroup: fix cgroups v2 controllers detection (rhbz#1689297)
  - vircgroupv2: store enabled controllers (rhbz#1689297)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32
changelog:
  - virDomainObjListAddLocked: Produce better error message than 'Duplicate key' (rhbz#1737790)
  - virdbus: Grab a ref as long as the while loop is executed (rhbz#1741900)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33
changelog:
  - vircgroupv2: fix parsing multiple values in single file (rhbz#1741825)
  - vircgroupv2: fix virCgroupV2GetCpuCfsQuota for "max" value (rhbz#1741837)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.9.11-2
changelog:
  - libvncclient sets +SRP in priority string (#1449605)
  - libvncserver blocks gtk-vnc clients >= 0.7.0 (#1451321)


author: Petr Pisar <ppisar@redhat.com> - 0.9.11-9
changelog:
  - Fix CVE-2018-15127 (Heap out-of-bounds write in
    rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662997)


author: Björn Esser <besser82@fedoraproject.org> - 4.0.1-5
changelog:
  - Add patch to update to recent development branch
  - Re-enable SUNMD5 support as it is BSD licensed now
  - Build compatibility symbols for glibc only
  - Skip failing testsuite once


author: David King <dking@redhat.com> - 2.9.7-9.1
changelog:
  - Fix CVE-2021-3516 (#1956975)
  - Fix CVE-2021-3517 (#1957000)
  - Fix CVE-2021-3518 (#1957027)
  - Fix CVE-2021-3537 (#1957283)


author: Miroslav Lichvar <mlichvar@redhat.com> 2.0-3
changelog:
  - add support for active-backup team interface (#1685467)
  - add support for more accurate synchronization to phc2sys (#1677217)
  - add hwts_filter option to ptp4l (#1708554)
  - limit unicast message rate per address and grant duration (#1707395)
  - fix comparing of unicast addresses (#1707395)
  - fix building with new kernel headers (#1707395)
  - update testsuite (#1707395)
  - don't leak memory when allocation fails (#1707395)


author: Miroslav Lichvar <mlichvar@redhat.com> 2.0-5
changelog:
  - fix sample timestamps when synchronizing PHC to system clock (#1787376)
  - fix handling of zero-length messages (#1827275)


author: Fabio Valentini <decathorpe@gmail.com> - 2.13.1-1
changelog:
  - Update to version 2.13.1.
  - Drop upstream patch that's included in the new release.
  - Rebase patch for removing the unsupported SLF4J EventDataConverter.


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.8-6
changelog:
  - Use openssl-devel instead of pkgconfig(openssl)
  - Enable conflicts against mysql (instead of community-mysql)
    Related: #1581034


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.9-1
changelog:
  - Rebase to 10.3.9
  - Add workaround for short SSL certificates
  - Fix parallel installability for x86_64 and i686 devel packages
  - CVEs fixed: #1603531
    CVE-2018-3058 CVE-2018-3063 CVE-2018-3064 CVE-2018-3066


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.10-3
changelog:
  - Fix "-fstack-protector-strong" static analysis errors
    Resolves: #1624139
  - Add wsrep_sst_rsync_tunnel script, add README
    Resolves: #1650463
  - Fix few covscan issues
    Resolves: #1649707
  - Fix galera_new_cluster script
    Resolves: #1641663


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.11-1
changelog:
  - Rebase to 10.3.11
  - Remove README.mysql-cnf as we don't ship example configuration files anymore
    Resolves: #1653318
  - CVEs fixed:
    CVE-2018-3282, CVE-2016-9843, CVE-2018-3174, CVE-2018-3143, CVE-2018-3156
    CVE-2018-3251, CVE-2018-3185, CVE-2018-3277, CVE-2018-3162, CVE-2018-3173
    CVE-2018-3200, CVE-2018-3284


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.17-1
changelog:
  - Rebase to 10.3.17
    Resolves: #1711265
    Resolves: #1701687
  - Add patch for server pkgconfig file location
  - Use logrotatedir macro on one more spot
  - Fix building of TokuDB with Jemalloc 5
  - Fix building with / without lz4
  - Fix "ggsapi" -> "gssapi" typo but keep the broken behaviour
  - Control building of the CACHING_SHA2_PASSWORD plugin
  - Fix the license tag
    Resolves: #1702707


author: sjp <junping@nfschina.com> - 3:10.3.17-3
changelog:
  - Fix CVE-2022-27378 CVE-2022-27381 CVE-2022-27383 CVE-2022-27384 CVE-2022-27386
  - CVE-2022-27377 CVE-2022-27380  CVE-2022-27387 CVE-2022-27445


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-2
changelog:
  - Disable building of the ed25519 client plugin.
    From now on it will be shipped by 'mariadb-connector-c' package


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-3
changelog:
  - Remove mariadb_rpl.h from includedir
    This file is shipped in mariadb-connector-c package
  - Require matching version of mariadb-connector-c package


author: Yang Tongrui <tongrui@nfschina.com> - 3:10.3.32-3
changelog:
  - Fix CVE-2022-27377 CVE-2022-27378 CVE-2022-27380  CVE-2022-27381 CVE-2022-27383 CVE-2022-27384 CVE-2022-27386 CVE-2020-15180 CVE-2021-27928 CVE-2021-2144 CVE-2020-2780 CVE-2020-14765 CVE-2020-2574 CVE-2020-2760 CVE-2020-2752 CVE-2020-2814 CVE-2020-2812 CVE-2020-14776 CVE-2020-14789 CVE-2020-14812 CVE-2021-2194 CVE-2021-2166 CVE-2021-2154 CVE-2019-2938 CVE-2021-2022


author: Michal Schorm <mschorm@redhat.com> - 3.0.8-2
changelog:
  - Add "zlib-devel" requirement in "-devel" subpackage. MariaDB requires
    linking with "-lz", which will fail without the zlib library
  - Resolves: #1710471


author: Michal Schorm <mschorm@redhat.com> - 3.0.10-1
changelog:
  - Rebase to 3.0.10
  - Use macro for tarball name
  - Use macro to set build flags
  - Use macros for make commands
  - Remove the scriptlets non relevant for RHEL-8
  - Add info for the testsuite execution
  - Remove glob from library version
  - Remove info about the upstream issues


author: Michal Schorm <mschorm@redhat.com> - 3.1.2-1
changelog:
  - Rebase to 3.1.2
  - Introducing ED25519 plugin
  - Plugindir issues (from 3.0.9 release) fixed by upstream
    Resolves: #1691176


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.1.9-1
changelog:
  - Rebase to 3.1.9
  - Overlinking issues fixed by upstream in 3.1.3 release
  - Add explicit confict between mariadb-connector-c-devel and mysql-devel packages


author: Artem Polishchuk <ego.cordatus@gmail.com> - 19.10.2-7
changelog:
  - Initial package
  - Thanks to Vitaly Zaitsev <vitaly@easycoding.org> for help with packaging and review


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200609-1
changelog:
  - Update Intel CPU microcode to microcode-20200609 release (#1845967):
    - Fixed a typo in the release note file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200609-2
changelog:
  - Blacklist latest microcode revision for 06-[89]e-0x CPUs (AML-Y,
    CFL-H/S/U/Xeon E, CML-Y, KBL-G/H/S/X/U/Y/Xeon E3 v6, WHL-U) on Dell systems,
    use revision 0xae/0xb4/0xb8 by default, provide the latest revision
    and intermediate revision 0xca in caveats (#1807960, #1846097).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200609-3
changelog:
  - Add README file to the documentation directory.
  - Add publicly-sourced codenames list to supply to gen_provides.sh; update
    the latter to handle the somewhat different format.
  - Add SUMMARY.intel-ucode file containing metadata information from
    the microcode file headers.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201027-1
changelog:
  - Update Intel CPU microcode to microcode-20201027 release, addresses
    CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
    (#1893266, #1893254, #1893234):
    - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
    - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
    - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
    - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
    - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
    - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
      0xe0;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
      to 0x2006a08;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
      to 0xe0;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xd6 up to 0xde;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
      to 0xde;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x43 up to 0x44;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
      up to 0x1000159;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
      up to 0x4003003;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5002f01 up to 0x5003003;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
      to 0x40;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
      to 0x1e;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
      to 0x18;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
      up to 0xa0;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
      up to 0xe0.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201112-1
changelog:
  - Update Intel CPU microcode to microcode-20201112 release (#1896912):
    - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
      to 0x34;
    - Updated releasenote file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201112-2
changelog:
  - Do not use "grep -q" in a pipe in check_caveats (#1902021).
  - Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
    (#1902884).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210216-1
changelog:
  - Update Intel CPU microcode to microcode-20210216 release (#1902884):
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
      to 0x2006a0a;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
      up to 0x4003006;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003003 up to 0x5003006.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210216-1.20210525.1
changelog:
  - Update Intel CPU microcode to microcode-20210525 release, addresses
    CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
    (#1962663, #1962713, #1962733, #1962679):
    - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
    - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
    - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
    - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
      at revision 0xb00000f;
    - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
      at revision 0xb00000f;
    - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
    - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
    - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
    - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
    - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
    - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
      intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
      to 0xb00003e;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
      to 0x2006b06;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
      to 0xea;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
      to 0xea;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
      to 0xea;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
      to 0xea;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xde up to 0xea;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
      to 0xea;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x44 up to 0x46;
    - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
      to 0x19;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
      up to 0x100015b;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
      up to 0x4003102;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003006 up to 0x5003102;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
      up to 0x7002302;
    - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
      0x7000019 up to 0x700001b;
    - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
      up to 0xf000019;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe00000f up to 0xe000012;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
      to 0x44;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
      to 0x20;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
      to 0x34;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
      to 0x1a;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
      up to 0xa6;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
      to 0xea;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
      up to 0xea;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
      up to 0xec;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
      up to 0xe8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
      0xe0 up to 0xea.


author: Petr Pisar <ppisar@redhat.com> - 47-19
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: jiwu <jiwu@cpu-os.ac.cn> - 47-25.nfs.1
changelog:
  * Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 47-25
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-32
changelog:
  - Apply IBM patch for compressBound() function
  - Source from https://github.com/madler/zlib/issues/410#issuecomment-947212824
  - Resolves: #2057484


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.12-5
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-1
changelog:
  - new version 1.11.3
  - Resolves: #1633401 - CVE-2018-11763 mod_http2: httpd:  DoS for HTTP/2
    connections by continuous SETTINGS


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-3
changelog:
  - Resolves: #1744999 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745086 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
    headers leads to denial of service
  - Resolves: #1745154 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request for
    large response leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-1
changelog:
  - new version 1.15.7
  - Resolves: #1814236 - RFE: mod_http2 rebase 
  - Resolves: #1747289 - CVE-2019-10082 httpd:2.4/mod_http2: httpd: 
    read-after-free in h2 connection shutdown
  - Resolves: #1696099 - CVE-2019-0197 httpd:2.4/mod_http2: httpd: 
    mod_http2: possible crash on late upgrade
  - Resolves: #1696094 - CVE-2019-0196 httpd:2.4/mod_http2: httpd:
    mod_http2: read-after-free on a string compare
  - Resolves: #1677591 - CVE-2018-17189 httpd:2.4/mod_http2: httpd: 
    mod_http2: DoS via slow, unneeded request bodies


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-2
changelog:
  - Resolves: #1869073 - CVE-2020-9490 httpd:2.4/mod_http2: httpd: 
    Push diary crash on specifically crafted HTTP/2 header


author: Lubos Uhliarik <luhliari@redhat.com> - 1:2.0.8-8
changelog:
  - Resolves: #1832844 - mod_md does not work with ACME server that does not
    provide keyChange or revokeCert resources


author: James Paul Turner <jamesturner246@fedoraproject.org> - 3.1.6-1
changelog:
  - Update to MPFR version 3.1.6
  - Use autosetup specfile macro for applying patches (patches 1 and 2 applied)
  - Removed iconv calls, as they were breaking .info files, which are now unicode
    resolves #1299649
  - Other minor cleanups
  - BuildRequire gcc per https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires


author: Michal Schorm <mschorm@redhat.com> - 8.0.12-3
changelog:
  - Add bundled ICU version
  - Add a patch for the 'mysql_com.h' header file
  - Use system mecab tool
  - Use RPATH for mysqld, so we can later set capabilities


author: Michal Schorm <mschorm@redhat.com> - 8.0.12-6
changelog:
  - Fix the default configuration of the server, so it uses same authentication
    method as MySQL 5.7
    Resolves: #1631400


author: Michal Schorm <mschorm@redhat.com> - 8.0.13-1
changelog:
  - Rebase to 8.0.13
  - ICU patch removed; upstreamed
  - Patch for MySQL Router introduced. Do not build it.
  - Fixes for annocheck hardening
    Resolves: #1624148
  - CVEs fixed:
    CVE-2018-3276 CVE-2018-3200 CVE-2018-3137 CVE-2018-3284 CVE-2018-3195
    CVE-2018-3173 CVE-2018-3212 CVE-2018-3279 CVE-2018-3162 CVE-2018-3247
    CVE-2018-3156 CVE-2018-3161 CVE-2018-3278 CVE-2018-3174 CVE-2018-3282
    CVE-2018-3285 CVE-2018-3187 CVE-2018-3277 CVE-2018-3144 CVE-2018-3145
    CVE-2018-3170 CVE-2018-3186 CVE-2018-3182 CVE-2018-3133 CVE-2018-3143
    CVE-2018-3283 CVE-2018-3171 CVE-2018-3251 CVE-2018-3286 CVE-2018-3185
    CVE-2018-3280 CVE-2018-3203 CVE-2018-3155


author: Matej Mužila <mmuzila@redhat.com> - 8.0.17-1
changelog:
  - Rebase to 8.0.17
  - Resolves: #1732042
  - CVEs fixed:
    CVE-2019-2737 CVE-2019-2738 CVE-2019-2739 CVE-2019-2740 CVE-2019-2741
    CVE-2019-2743 CVE-2019-2746 CVE-2019-2747 CVE-2019-2752 CVE-2019-2755
    CVE-2019-2757 CVE-2019-2758 CVE-2019-2774 CVE-2019-2778 CVE-2019-2780
    CVE-2019-2784 CVE-2019-2785 CVE-2019-2789 CVE-2019-2791 CVE-2019-2795
    CVE-2019-2796 CVE-2019-2797 CVE-2019-2798 CVE-2019-2800 CVE-2019-2801
    CVE-2019-2802 CVE-2019-2803 CVE-2019-2805 CVE-2019-2808 CVE-2019-2810
    CVE-2019-2811 CVE-2019-2812 CVE-2019-2814 CVE-2019-2815 CVE-2019-2819
    CVE-2019-2822 CVE-2019-2826 CVE-2019-2830 CVE-2019-2834 CVE-2019-2879


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 4.6.2-30
changelog:
  - bug0356703: 删除U盘文件通过回收站无法恢复及清空.
    Patch: 0031-Bug-of-moving-files-in-mounted-partition-to-trash.patch


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.3-5
changelog:
  - Removed executables from the library to allow parallel installation
    of x86-64 and x86 packages. The executables had testing purpose, and
    may be re-introduced in a separate package if needed.


author: Tomáš Mráz <tmraz@redhat.com> - 3.4-4
changelog:
  - Cover the gaps in annotation coverage for assembler sources
  - Add .hmac checksums for FIPS mode integrity checking


author: Stephen Gallagher <sgallagh@redhat.com> - 80.1-2
changelog:
  - Separate desktop backgrounds into their own subpackage
  - Correct the description to match the license terms
  - Drop vestiges of fedora-logos


author: Ray Strode <rstrode@redhat.com> - 80.3-1
changelog:
  - Make night time pattern lighter
    Resolves: #1628092
  - Remove Alpha from logos
    Resolves: #1637446
  - Remove Alpha from wallpapers
    Resolves: #1636822


author: Alain Reguera Delgado <areguera@centosproject.org> - 80.5-2
changelog:
  - Add CentOS brands
  - Add CentOS backgrounds based on artistic motif sketch 4
  - Support rolling notes localization in CentOS installer


author: wqx<qixu@cpu-os.ac.cn>
changelog:
  - bug514 安装Flash插件时，root用户安装Flash成功，切换到普通用户需要再次安装且提示Flash安装失败
  - bug516 在线播放视频和音频没有声音，但是在系统设置-声音试听中能够听到声音


author: guoliang <guoliang@nfschina.com> - 1.0.11-3
changelog:
  - 针对Sonar扫描报的异味问题中三种类型进行了修复：1)8个异味是建议删除无用的无效注释，这些无用、无效注释原来是代码，长久下来，容易形成大量僵尸代码；2)1个异味是建议合并两个分支，这两个分支代码的处理语句相同。3)1个异味是有未使用的局部变量
  - gl.patch


author: hanxf <hanxiaofeng@cpu-os.ac.cn> -0.1-2
changelog:
  - add yelp
  - 更新部分截图：通过更新tar包
  - 删除5.2.12 fonts
    Patch: 001-add-yelp.patch
    Patch: 002-del-Mfonts.patch


author: lidongyue <dongyue@nfschina.com> - 1.1.13-m1.19.nfs4
changelog:
  - Fix: 修复离线情况下在非主页面点击重新激活页面再依次返回无法返回主页面的问题.
    nfs-license-1.1.13.m1-Fix-unable-To-return-mainpage.patch


author: Support <support@nfschina.com> - 1.0.2-1nfs
changelog:
  - Add /usr/lib/systemd/systemd-logind to process list & Add echo -1000 > gnome-terminal-server/oom_score_adj


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1
changelog:
  - new version 1.14.1
  - Resolves: #1647257 - CVE-2018-16845 nginx: Denial of service and
    memory disclosure via mp4 module
  - Resolves: #1647262 - CVE-2018-16844 nginx: Excessive CPU usage
    via flaw in HTTP/2 implementation
  - Resolves: #1647263 - CVE-2018-16843 nginx: Excessive memory consumption
    via flaw in HTTP/2 implementation


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.0-1
changelog:
  - new version 1.16.0
  - enable ngx_stream_ssl_preread module
  - main package does NOT require all-modules package


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-1
changelog:
  - update to 1.16.1
  - Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.1.1-35
changelog:
  - Python 2 binary package renamed to python2-notify
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Kamil Páral <kparal@redhat.com> - 2:2017.3.23-10
changelog:
  - add Recommends: ntfs-3g-system-compression. That allows people with
    Windows 10 to read system files.


author: Neal Gompa <ngompa@datto.com> - 2:2021.8.22-1
changelog:
  - Rebase to version 2021.8.22 to fix various CVEs (RHBZ#1999869)
  - Clean up old cruft for RHEL < 7
  - Split libraries out to libs subpackage


author: Iryna Shcherbina <ishcherb@redhat.com> - 1:1.13.3-5
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Jeff Squyres <jsquyres@cisco.com>
changelog:
  - Add missing executables to specfile (ompi-server, etc.)
  - Fix: pull in VT files when building multiple RPMs (reported by Jim
    Kusznir).
  - Add allow_fortify_source option to let users selectively disable
    _FORTIFY_SOURCE processing on platforms where it just doesn't work
    (even with gcc; also reported by Jim Kusznir).


author: Jeff Squyres <jsquyres@cisco.com>
changelog:
  - Removed OSCAR defines.
  - If use_mpi_selector==1, then also set install_shell_scripts to 1.
  - Change modules default RPM name and modulefiles path to the defaults
    on RHEL6.


author: Jeff Squyres <jsquyres@cisco.com>
changelog:
  - Didn't change the specfile, but changed the script that generates
    the SRPM to force the use of MD5 checksums (vs. SHA1 checksums) so
    that the SRPM is friendly to older versions of RPM, such as that on
    RHEL 5.x.


author: Jeff Squyres <jsquyres@cisco.com>
changelog:
  - Remove the "ofed" and "munge_build_into_install" options, because
    OFED no longer distributes MPI implementations.  Yay!


author: Jeff Squyres <jsquyres@cisco.com>
changelog:
  - Re-release 1.6.0-1.6.3 SRPMs (with new SRPM Release numbers) with
    patch for VampirTrace's configure script to make it install the
    private "libtool" script in the right location (the script is used
    to build user VT applications).
  - Update the regexps/methodology used to generate the lists of files
    in the multi-RPM sub-packages; it's been broken for a little while.
  - No longer explicitly list the bin dir executables in the multi-RPM
    sub-packages
  - Per https://svn.open-mpi.org/trac/ompi/ticket/3382, remove all files
    named "config.log" from the install tree so that we can use this
    spec file to re-release all OMPI v1.6.x SRPMs.


author: Jeff Squyres <jsquyres@cisco.com>
changelog:
  - Several minor fixes from Oliver Lahaye: fix dates in changelog,
    added .nfs4 tag to the Release field, and added some Provides
    fields in case openmpi is overridden.


author: Jeff Squyres <jsquyres@cisco.com>
changelog:
  - Reverting a decision from a prior changelog entry: if
    install_in_opt==1, then even put the modulefile under /opt.


author: Jakub Jelen <jjelen@redhat.com> - 7.7p1-6 + 0.10.3-4
changelog:
  - Fix listing of kex algoritms in FIPS mode
  - Allow aes-gcm cipher modes in FIPS mode
  - Coverity fixes


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-2 + 0.10.3-5
changelog:
  - New upstream release fixing CVE 2018-15473
  - Remove unused patches
  - Remove reference to unused enviornment variable SSH_USE_STRONG_RNG
  - Address coverity issues
  - Unbreak scp between two IPv6 hosts (#1620333)
  - Unbreak GSSAPI key exchange (#1624323)
  - Unbreak rekeying with GSSAPI key exchange (#1624344)


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-3 + 0.10.3-5
changelog:
  - Disable OpenSSH hardening flags and use the ones provided by system (#1630615)
  - Ignore unknown parts of PKCS#11 URI (#1631478)
  - Do not fail with GSSAPI enabled in match blocks (#1580017)
  - Fix the segfaulting cavs test (#1629692)


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-4 + 0.10.3-5
changelog:
  - Unbreak PKCS#11 URI tests (#1648262)
  - Allow to disable RSA signatures with SHA1 (#1648898)
  - Dump missing GSS options from client configuration (#1649505)
  - Minor fixes from Fedora related to GSSAPI and keberos
  - Follow the system-wide PATH settings


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-1 + 0.10.3-7
changelog:
  - New upstream release (#1691045)
  - Remove support for unused VendorPatchLevel configuration option
  - Fix kerberos cleanup procedures (#1683295)
  - Do not negotiate arbitrary primes with DH GEX in FIPS (#1685096)
  - Several GSSAPI key exchange improvements and sync with Debian
  - Allow to use labels in PKCS#11 URIs even if they do not match on private key (#1671262)
  - Do not fall back to sshd_net_t SELinux context (#1678695)
  - Use FIPS compliant high-level signature OpenSSL API and KDF
  - Mention crypto-policies in manual pages
  - Do not fail if non-FIPS approved algorithm is enabled in FIPS
  - Generate the PEM files in new PKCS#8 format without the need of MD5 (#1712436)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-2 + 0.10.3-7
changelog:
  - Allow specifying a pin-value in PKCS #11 URI in ssh-add (#1639698)
  - Whitelist another syscall variant for s390x cryptographic module (ibmca engine) (#1714915)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-3 + 0.10.3-7
changelog:
  - Fix typos in manual pages (#1668325)
  - Use the upstream support for PKCS#8 PEM files alongside with the legacy PEM files (#1712436)
  - Unbreak ssh-keygen -A in FIPS mode (#1732424)
  - Add missing RSA certificate types to offered hostkey types in FIPS mode (#1732449)


author: Damien Miller <djm@mindrot.org>
changelog:
  - Don't install profile.d scripts when not building with GNOME/GTK askpass
    (patch from bet@rahul.net)


author: Damien Miller <djm@mindrot.org>
changelog:
  - Remove noip6 option. This may be controlled at run-time in client config
    file using new AddressFamily directive


author: Nico Kadel-Garcia <nakdel@gmail.com>
changelog:
  - Add '--mandir' and '--with-mantype' for RHEL 5 compatibility
  - Add 'dist' option to 'ver' so package names reflect OS at build time
  - Always include x11-ssh-askpass tarball in SRPM
  - Add openssh-x11-aspass BuildRequires for libXT-devel, imake, gtk2-devel
  - Discard 'K5DIR' reporting, not usable inside 'mock' for RHEL 5 compatibility
  - Discard obsolete '--with-rsh' configure option
  - Update openssl-devel dependency to 0.9.8f, as found in autoconf


author: Darren Tucker <dtucker@dtucker.net>
changelog:
  - Update openssl-devel dependency to match current requirements.
  - Handle Fedora >=6 openssl 1.0 compat libs.
  - Remove SSH1 from description.
  - Don't strip binaries at build time so that debuginfo package can be
    created.


author: yangguanghui <yangguanghui@nfschina.com> 9.4p1-5
changelog:
  - fix bugid: 80281, "240329版本ssh连接使用logname命令显示当前用户的登录名称为 无登录名"
  - add openssh-9.4p1-sshd_config_addPAM.patch


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-2
changelog:
  - do not try to use EC groups disallowed in FIPS mode
    in TLS
  - fix Valgrind regression with constant-time code


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1b-1
changelog:
  - update to the 1.1.1b release
  - EVP_KDF API backport from master
  - SSH KDF implementation for EVP_KDF API backport from master
  - add S390x chacha20-poly1305 assembler support from master branch


author: Sérgio Basto <sergio@serjux.com> - 16.02-9
changelog:
  - Security fix for CVE-2017-17969 (from Debian)
  - Add 05-hardening-flags.patch, 09-man-update.patch, 10-drop-fm-doc.patch
    and 14-Fix-g++-warning.patch patches from Debian, very small changes
    better documentation, compile flags and compile warning.


author: Fedora Release Engineering <releng@fedoraproject.org> - 16.02-13
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  - https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.1-5
changelog:
  - Add gating tests for CI
  - Restore correct behavior when live migration is interrupted
  - Improve clients' authentication of IPC servers (CVE-2018-16877)
  - Fix use-after-free with potential information disclosure (CVE-2019-3885)
  - Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
  - Resolves: rhbz#1682116
  - Resolves: rhbz#1684306
  - Resolves: rhbz#1694558
  - Resolves: rhbz#1694560
  - Resolves: rhbz#1694908


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.2-1
changelog:
  - Add stonith_admin option to display XML output
  - Add new crm_rule tool to check date/time rules
  - List any constraints cleared by crm_resource --clear
  - crm_resource --validate can now get resource parameters from command line
  - Rebase on upstream version 2.0.2
  - Default concurrent-fencing to true
  - Resolves: rhbz#1555939
  - Resolves: rhbz#1572116
  - Resolves: rhbz#1631752
  - Resolves: rhbz#1637020
  - Resolves: rhbz#1695737
  - Resolves: rhbz#1715426


author: Klaus Wenninger <kwenning@redhat.com> - 2.0.2-2
changelog:
  - Synchronize fence-history on fenced-restart
  - Cleanup leftover pending-fence-actions when fenced is restarted
  - Improve fencing of remote-nodes
  - Resolves: rhbz#1708380
  - Resolves: rhbz#1708378
  - Resolves: rhbz#1721198
  - Resolves: rhbz#1695737


author: Michal Hlavinka <mhlavink@redhat.com> - 3.7.0-1
changelog:
  - pciutils updated to 3.7.0, add support for basic DVSEC and CXL DVSEC (#1856436)
  - add support for RCEC Associated Endpoint (#1856440)


author: Petr Pisar <ppisar@redhat.com> - 10.31-3
changelog:
  - Add support to pcre2grep for binary zeros in -f files (upstream bug #2222)
  - Fix compiler warnings in pcre2grep


author: Petr Pisar <ppisar@redhat.com> - 10.31-6
changelog:
  - Fix global search/replace in pcre2test and pcre2_substitute() when the pattern
    matches an empty string, but never at the starting offset


author: Petr Pisar <ppisar@redhat.com> - 10.31-7
changelog:
  - Fix checking that a lookbehind assertion has a fixed length if the
    lookbehind assertion is used inside a lookahead assertion
  - Fix parsing VERSION conditions


author: Petr Pisar <ppisar@redhat.com> - 10.31-8
changelog:
  - Fix backtracking atomic groups when they are not separated by something with
    a backtracking point


author: Petr Pisar <ppisar@redhat.com> - 10.31-9
changelog:
  - Recognize all Unicode space characters with /x option in a pattern
    (bug #1617960)
  - Fix changing dynamic options (bug #1617960)
  - Fix autopossessifying a repeated negative class with no characters less than
    256 that is followed by a positive class with only characters less than 255,
    (bug #1617960)
  - Fix autopossessifying a repeated negative class with no characters less than
    256 that is followed by a positive class with only characters less than 256,
    (bug #1617960)


author: Petr Pisar <ppisar@redhat.com> - 10.32-1
changelog:
  - 10.32 bump (bug #1628200)
  - Fix a subject buffer overread in JIT when UTF is disabled and \X or \R has
    a greater than 1 fixed quantifier (bug #1628200)
  - Fix matching a zero-repeated subroutine call at a start of a pattern
    (bug #1628200)
  - Fix heap limit checking overflow in pcre2_dfa_match() (bug #1628200)


author: Miroslav Lisik <mlisik@redhat.com> - 0.10.4-2
changelog:
  - Added disaster recovery support
  - Fixed error message when cluster is not set up
  - Removed '-g' option from rubygem's cflags because it does not generate .gnu_debugdata and option '-K' for strip command was removed
  - Resolves: rhbz#1676431 rhbz#1743731


author: Miroslav Lisik <mlisik@redhat.com> - 0.10.4-5
changelog:
  - Fixed link to sbd man page from `sbd enable` doc
  - Fixed safe-disabling clones, groups, bundles
  - Fixed sinatra wrapper performance issue
  - Fixed detecting fence history support
  - Fixed cookie options
  - Updated hint for 'resource create ... master'
  - Updated gating tests execution, smoke tests run from upstream sources
  - Resolves: rhbz#1750427 rhbz#1781303 rhbz#1783106 rhbz#1793574


author: Paul Howarth <paul@city-fan.org> - 1.35-1
changelog:
  - update to 1.35
  - classify buildreqs by usage
  - make %files list more explicit
  - don't need to remove empty directories from the buildroot


author: Peter Jones <pjones@redhat.com> - 0.112-25
changelog:
  - Preserve .py timestamp during install so .pyc/.pyo files have the same
    timestamp on all arches, preventing rpmdiff from complaining.
    Related: rhbz#1625388


author: Remi Collet <rcollet@redhat.com> - 7.2.7-1
changelog:
  - Update to 7.2.7 - http://www.php.net/releases/7_2_7.php
  - drop -mstackrealign option, workaround to #1593144


author: zhouchang <zhouchang@nfschina.com> - 7.3.5-3.1
changelog:
  -Fix CVE-2019-11045,CVE-2019-11050,CVE-2020-7063,CVE-2020-7064,CVE-2020-7066,CVE-2020-7070,CVE-2022-31628,CVE-2022-31629
  - add: php-7.3.5-CVE-2019-11045.patch
  - add: php-7.3.5-CVE-2019-11050.patch
  - add: php-7.3.5-CVE-2020-7063.patch
  - add: php-7.3.5-CVE-2020-7064.patch
  - add: php-7.3.5-CVE-2020-7066.patch
  - add: php-7.3.5-CVE-2020-7070.patch
  - add: php-7.3.5-CVE-2022-31628.patch
  - add: php-7.3.5-CVE-2022-31629.patch


author: Remi Collet <remi@remirepo.net> - 4.9.1-1
changelog:
  - update to 4.9.1 (2019-09-21, bug fix release)
  - add tarball signature check
  - allow twig version 2


author: Remi Collet <remi@remirepo.net> 5.0.0-1
changelog:
  - update to 5.0.0 (2019-12-26, new features release)
  - raise dependency on PHP 7.1.3
  - raise dependency on phpmyadmin/sql-parser 5.0
  - raise dependency on twig 2.1
  - add dependency on pragmarx/google2fa-qrcode
  - drop dependency on pragmarx/google2fa and bacon/bacon-qr-code
  - drop dependency on psr/container
  - sync spec file with remirepo one


author: Remi Collet <remi@remirepo.net> 5.0.2-1
changelog:
  - update to 5.0.2 (2020-03-21, security release)
  - use phpmyadmin/twig-i18n-extension instead of twig/extensions


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.8-9
changelog:
  - Reduced default build flags used to build extension modules
    https://fedoraproject.org/wiki/Changes/Python_Extension_Flags
  Resolves: rhbz#1634784


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.8-12
changelog:
  - Use RPM built wheels of pip and setuptools in ensurepip instead of our rewheel patch
  - Require platform-python-setuptools from platform-python-devel to prevent packaging errors
  Resolves: rhbz#1701286


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-13
changelog:
  - Do not set PHA verify flag on client side (rhbz#1725721)
  - Enable TLS 1.3 post-handshake authentication in http.client (rhbz#1671353)


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-14
changelog:
  - Adding a new patch 329 that adds support for OpenSSL FIPS mode
  - Explicitly listing man pages in files section to fix an RPM warning
  Resolves: rhbz#1731424


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-15
changelog:
  - Patch 329 that adds support for OpenSSL FIPS mode has been improved and
    bugfixed
  Resolves: rhbz#1744670 rhbz#1745499 rhbz#1745685


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-15.1
changelog:
  - Patch 329 (FIPS) modified: Added workaround for mod_ssl:
    Skip error checking in _Py_hashlib_fips_error
  Resolves: rhbz#1760106


author: chuanqi <chuanqi@nfs-hlj.com> - 3.6.8-15.1.nfs.5
changelog:
  - Fixed CVE. CVE-2020-8492
  - Fixed CVE. CVE-2019-16056
  - Fixed CVE. CVE-2019-16935
  - Fixed CVE. CVE-2020-26116
  - Fixed CVE. CVE-2020-14422
  - Fixed CVE. add 00366-CVE-2020-8315.patch
  - Fixed CVE. add 00367-CVE-2007-4559.patch


author: Tomas Orsava <torsava@redhat.com> - 4.5.1-7
changelog:
  - New subpackage platform-python-coverage without files from /usr/bin/*
  - python3-coverage contains only files from /usr/bin/* and depends
    on platform-python-coverage
  - Resolves: rhbz#1658674


author: Jan Rybar <jrybar@redhat.com> - 0.115-2
changelog:
  - Error message about getting authority is too elaborate (forward of #1342855)
  - Bus disconnection report moved to debug mode (forward of #1249627)


author: Jan Rybar <jrybar@redhat.com> - 0.115-7
changelog:
  - pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
  - Mitigation of regression caused by fix of CVE-2018-19788
  - Resolves: rhbz#1693781
  - Resolves: rhbz#1693814


author: Devrim Gündüz <devrim@gunduz.org> - 6.2.0-1
changelog:
  - Update to 6.2.0
  - Applied https://src.fedoraproject.org/rpms/proj/pull-request/6 by
    Orion Poplawski.


author: Owen Taylor <otaylor@redhat.com> - 2.24.0-24
changelog:
  - Don't check for libglade - we require it. There was left-over conditionalization
    of unclear purpose based on the results of 'pkg-config libglade-2.0'


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.6-5
changelog:
  - Python 2 binary package renamed to python2-mako
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Petr Viktorin <pviktori@redhat.com> - 1.0.6-9
changelog:
  - Make python-beaker an optional dependency
  - Add missing python_provide for python3-mako
  - Conditionalize the Python 2 subpackage
  - Modernize the specfile


author: Petr Viktorin <pviktori@redhat.com> - 1.0.6-11
changelog:
  - Add back the Python 2 subpackage (temporarily, for mesa build)
    https://bugzilla.redhat.com/show_bug.cgi?id=1569193


author: Petr Viktorin <pviktori@redhat.com> - 1.0.6-13
changelog:
  - Disable the Python 2 subpackage again
    https://bugzilla.redhat.com/show_bug.cgi?id=1590397
  - Fix the Python2 workaround


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-14
changelog:
  - Fixes for CVE-2021-25290, CVE-2021-25292, CVE-2021-25293, CVE-2021-27921
  CVE-2021-27922, and CVE-2021-27923
  Resolves: rhbz#1934685 rhbz#1934699 rhbz#1934705 rhbz#1935384 rhbz#1935396 rhbz#1935401


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-15
changelog:
  - Fixes for CVE-2021-25288, CVE-2021-25287, CVE-2021-28675, CVE-2021-28676,
  CVE-2021-28677 and CVE-2021-28678
  Resolves: rhbz#1958231, rhbz#1958226, rhbz#1958240, rhbz#1958252, rhbz#1958257, rhbz#1958263


author: Charalampos Stratakis <cstratak@redhat.com> - 5.1.1-18
changelog:
  - Fixup for CVE-2022-22817
  - Security fixes for CVE-2022-22815, CVE-2022-22816
  Resolves: rhbz#2042511, rhbz#2042522


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0-15
changelog:
  - enable vsftpd-based tests
  - run the test-suite for Python 3 only
  - do not disable TLS-SRP test because it is now supported by OpenSSL in Fedora


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.16-7
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1703539 and rhbz#1704367


author: Miro Hrončok <mhroncok@redhat.com> - 2.7.16-11
changelog:
  - Use RPM built wheels of pip and setuptools in ensurepip instead of our rewheel patch
  - Require python2-setuptools from python2-devel to prevent packaging errors
  Resolves: rhbz#1718398


author: Tomas Orsava <torsava@redhat.com> - 2.7.16-12
changelog:
  - Adding FIPS compliance to Python 2 in RHEL8:
    - Updated patch 146 with a new version of the FIPS patch
    - Patch 169 has been removed, obsoleted by the updated patch 146
  Resolves: rhbz#1734126


author: Eric Smith <brouhaha@fedoraproject.org> 1.1.6-1
changelog:
  - New upstream version 1.1.6 (#1441428)
  - Update upstream tarball dir
  - Convert to newer build marcos
  - Update tests to pass in new build
  - These RPM spec changes were all provided by Greg Hellings.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.1.6-3
changelog:
  - Python 2 binary package renamed to python2-enum34
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Petr Viktorin <pviktori@redhat.com> - 2.0.0-10
changelog:
  - Drop dependency on python3-funcsigs
    (funcsigs functionality is in the Python 3 standard library -- inspect)
  - Drop dependency on python2-unittest2
    (Not available in the distro)

  - Fix python2 requires names


author: Petr Viktorin <pviktori@redhat.com> - 2.0.0-11
changelog:
  - Remove the Python 2 subpackage
    https://bugzilla.redhat.com/show_bug.cgi?id=1590793
  - Re-enable tests


author: Petr Viktorin <pviktori@redhat.com> - 3.4.2-6
changelog:
  - Don't use timeout in tests
    https://bugzilla.redhat.com/show_bug.cgi?id=1592940
  - Add missing BuildRequires


author: Petr Viktorin <pviktori@redhat.com> - 3.4.2-7
changelog:
  - Remove BuildRequires on python2-hypothesis, a circular dependency
  - Explicitly BuildRequire python-attrs


author: Florian Festi <ffesti@redhat.com> - 4.14.2-23
changelog:
  - Use --dpbath only with full path (#1696408)
  - Fix memory leaks (#1714657)
  - Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
  - Fix bash warning from solution for #1689810


author: xunian <xunian@nfschina.com> - 4.14.2-26.2
changelog:
  - Fixed CVE-2021-20271 CVE-2021-3521.
  - Add rpm-4.14.3-more-careful-sig-hdr-copy.patch
  - Add rpm-4.14.3-validate-and-require-subkey-binding-sigs.patch


author: Lumír Balhar <lbalhar@redhat.com> - 1.15.6-3
changelog:
  - Add subpackage for platform-python
  - Disable tests so platform-python stack can be bootstrapped
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Tomas Orsava <torsava@redhat.com> - 1.15.6-4
changelog:
  - Re-enable tests to finish bootstrapping the platform-python stack
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Tomas Orsava <torsava@redhat.com> - 1.24.2-1
changelog:
  - Rebased to 1.24.2 to fix CVE-2019-11324
  - Added patches for CVE-2019-11236 (AKA CVE-2019-9740)
  - Resolves: rhbz#1703361 rhbz#1706026


author: Miro Hrončok <mhroncok@redhat.com> - 1.4-3
changelog:
  - Subpackage python2-jdcal has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Carl George <carl@george.computer> - 1.6.1-1
changelog:
  - Latest upstream
  - Add patch0 to remove pytest-{cov,runner} deps
  - Share doc and license dir between subpackages
  - Enable EPEL PY3 build


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.4-4
changelog:
  - Subpackage python2-openpyxl has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 4.8.7-52.nfs
changelog:
  - Do not close apps when shutdown dialog pop up.
    Patch: 0601-Dont-close-apps-on-gnome-shutdown-dialog.patch


author: Björn Esser <besser82@fedoraproject.org> - 0.66-1
changelog:
  - Update to 0.66 release (rhbz 1693765)
  - Modernize spec file
  - Add some additional BuildRequires
  - Add Requires: p7zip


author: Remi Collet <rcollet@redhat.com> - 4.0.10-2
changelog:
  - drop build dependency on pandoc
  - drop dependency on jemalloc #1591762
  - fix License (BSD and MIT)
  - add bundled libraries licences
  - cleanup conditions from spec file


author: Remi Collet <rcollet@redhat.com> - 5.0.3-2
changelog:
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192
  - fix Stack buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10193


author: Remi Collet <rcollet@redhat.com> - 5.0.3-4
changelog:
  - fix lua scripts can overflow the heap-based Lua stack
    CVE-2021-32626
  - fix integer overflow issue with Streams
    CVE-2021-32627
  - fix integer overflow bug in the ziplist data structure
    CVE-2021-32628
  - fix integer overflow issue with intsets
    CVE-2021-32687
  - fix integer overflow issue with strings
    CVE-2021-41099


author: Remi Collet <remi@remirepo.net> - 7.0.10-2
changelog:
  - fix modules directory ownership and permissions #2176173
  - drop redis-shutdown helper and rely on systemd #2181181


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-10
changelog:
  RHEL 8.1.0 ERRATUM
  - added option for imfile endmsg.regex
    resolves: rhbz#1627941
  - added patch enhancing imfile rotation detection
    resolves: rhbz#1674471
  - added patch fixing msgOffset datatype preventing crash on
    message with too long other fields
    resolves: rhbz#1677037
  - added patch introducing "preservecase" option for imudp/imtcp
    resolves: rhbz#1614181


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-11
changelog:
  RHEL 8.1.0 ERRATUM
  - fixed memory leak in imjournal by proper cursor releasing
    resolves: rhbz#1716867


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-12
changelog:
  RHEL 8.1.0 ERRATUM
  - edited imjournal memleak patch to not cause double-free crash
    resolves: rhbz#1729995
  - added patch calling journald API only when there are no
    preceeding errors
    resolves: rhbz#1722165
  - added patch fixing imrelp module when invoked with old syntax
    resolves: rhbz#1724218


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-13
changelog:
  RHEL 8.1.0 ERRATUM
  - added patch enabling stricter TLS certs checking conforming to 
    common criteria requirements
    resolves: rhbz#1733244


author: Petr Pisar <ppisar@redhat.com> - 1.0.70-8
changelog:
  - Fix invoking systemd_postun macro (bug #1676007)
  - Fix stringop-truncation GCC 7 warning (bug #1606319)
  - Adapt to glusterfs-api 7.6.3 (bug #1676007)
  - Disable Ceph support on 32-bit platforms (bug #1676007)


author: Björn Esser <besser82@fedoraproject.org> - 2:4.5-9
changelog:
  - Add patch to include crypt.h, if present
  - Use %make_{build,install} macros
  - Refresh other patches for proper alignment


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-1
changelog:
  - Update to current upstream release 4.6
  - Raise limit for passwd and shadow entry length but also prevent
    writing longer entries (#1422497)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-5
changelog:
  - use cap_setxid file capabilities for newxidmap instead of making them setuid
  - limit the SYS_U/GID_MIN value to 1 as the algorithm does not work with 0
    and the 0 is always used by root anyway
  - manual page improvements
  - flush sssd caches - patch by Jakub Hrozek


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-8
changelog:
  - properly audit group password change
  - do not add uid of a new (not yet added) user to the audit message
  - use lckpwdf() again to disable concurrent edits of databases by
    other applications
  - clarify chage manual page in regards to shadow and passwd
    inconsistency
  - fix minor issues in groupadd and login.defs manual pages
  - Ignore LOGIN_PLAIN_PROMPT variable in login.defs
  - force regeneration of getdate.c otherwise the date parsing fix
    is not applied


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-1
changelog:
  - New upstream release
  - Update links to the upstream project page and releases
  - Use extended SSSD API to signal that an entry should not be cached anymore
  - Add support for timeout-based NSS queries with libsss_nss_idmap


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-3
changelog:
  - Do not build on i686 in Fedora 28 or later as 389-ds-base is not available there anymore
  - Resolves rhbz#1556448
  - Remove outdated ExclusiveArch for RHEL6


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-5
changelog:
  - Link with libnsl explicitly in Fedora 28 or later
  - Require libnsl2-devel for build
  - Resolves rhbz#1573636


author: Pavel Moravec <pmoravec@redhat.com> = 3.7-1
changelog:
  - Rebase on upstream 3.7
    Resolves: bz1684400
  - [buildah] parse container list properly even for scratch ones
    Resolves: bz1687954
  - [PATCH] [maas,mysql,npm,pacemaker,postgresql] fix plugopts data types
    Resolves: bz1695583
  - [plugins] add vdsm plugin
    Resolves: bz1700780
  - [openstack_instack] add ansible.log
    Resolves: bz1702806
  - [pcp] collect pmlogger without a sizelimit
    Resolves: bz1719884
  - [foreman,satellite] increase plugin default timeouts
    Resolves: bz1719885
  - [sosreport] [sosreport] initialize disabled plugins properly
    Resolves: bz1719886
  - [katello] support both locations of qpid SSL certs
    Resolves: bz1719887


author: Pavel Moravec <pmoravec@redhat.com> = 3.7-2
changelog:
  - [sar] collect whole sar log dir
    Resolves: bz1714243
  - [archive] convert absolute symlink targets to relative
    Resolves: bz1702806
  - [archive] Handle checking container sysroot in _make_leading_paths
    Resolves: bz1728214
  - [frr] FRR plugin
    Resolves: bz1709906
  - [policies] redhat policy to use hostname instead of rhn id
    Resolves: bz1718087
  - Updates to vdsm plugin
    Resolves: bz1700780


author: Pavel Moravec <pmoravec@redhat.com> = 3.7-3
changelog:
  - [openstack] Extract Placement plugin from Nova
    Resolves: bz1717882
  - [utilities] Fix high CPU usage and slow command collection
    Resolves: bz1733352
  - [peripety] collect proper config file
    Resolves: bz1665981
  - [sosreport,plugins] Stop plugin execution after timeout hit
    Resolves: bz1733469
  - [nvme] collect config file everytime
    Resolves: bz1665929


author: Pavel Moravec <pmoravec@redhat.com> = 3.7-7
changelog:
  - [ovirt_hosted_engine] Add gluster deployment and cleanup log
    Resolves: bz1767361
  - [vdsm]: Fix executing shell commands
    Resolves: bz1751171
  - [ovn_*] Add support to containerized setups
    Resolves: bz1767359
  - [ipa] collect ipa-healthcheck logs, kdcproxy configs, httpd cert
    Resolves: bz1767360


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-1
changelog:
  - Resolves: #1656871 - squid rebase to 4.4
  - Resolves: #1645148 - CVE-2018-19131 squid: Cross-Site Scripting when
    generating HTTPS response messages about TLS errors
  - Resolves: #1645156 - CVE-2018-19132 squid: Memory leak in SNMP query
    rejection code


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-6
changelog:
  - Resolves: #1679526 - Missing detailed configuration file
  - Resolves: #1703117 - RHEL 7 to 8 fails with squid installed because dirs
    changed to symlinks
  - Resolves: #1691741 - Squid cache_peer DNS lookup failed when not all lower
    case
  - Resolves: #1683527 - "Reloading" message on a fresh reboot after enabling
    squid


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-8
changelog:
  - Resolves: # 1738485 - CVE-2019-12527 squid:4/squid: heap-based buffer overflow
    in HttpHeader::getAuth


author: Radovan Sroka <rsroka@redhat.com> - 1.8.25-1
changelog:
  - rebase to the new upstream version 1.8.25p1
  - sync patches with rhel-7.6
  - sync sudoers with rhel-7.6
    resolves: rhbz#1633144


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.25-2
changelog:
  - Depend explicitly on /usr/sbin/sendmail instead of sendmail (rhel-7 sync)
  - Simplified pam configuration file by removing duplicate pam stack entries
  Resolves: rhbz#1633144


author: Radovan Sroka <rsroka@redhat.com> - 1.8.25-5
changelog:
  - RHEL 8.1 ERRATUM
  - Fixed problem with sudo-1.8.23 and 'who am i'
  Resolves: rhbz#1673886
  - Backporting sudo bug with expired passwords
  Resolves: rhbz#1676819


author: Radovan Sroka <rsroka@redhat.com> - 1.8.25-6
changelog:
  - RHEL 8.1 ERRATUM
  - Fixed The LDAP backend which is not properly parsing sudoOptions,
    resulting in selinux roles not being applied
  Resolves: rhbz#1738326


author: Lukas Nykryn <lnykryn@redhat.com> - 239-16
changelog:
  - sd-bus: deal with cookie overruns (#1694999)
  - journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
  - journal: do not remove multiple spaces after identifier in syslog message (#1691817)
  - cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
  - cryptsetup: call crypt_load() for LUKS only once (#1719153)
  - cryptsetup: Add LUKS2 token support. (#1719153)
  - udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
  - Change job mode of manager triggered restarts to JOB_REPLACE (#11456
  - bash-completion: analyze: support 'security' (#1733395)
  - man: note that journal does not validate syslog fields (#1707175)
  - rules: skip memory hotplug on ppc64 (#1713159)


author: Lukas Nykryn <lnykryn@redhat.com> - 239-17
changelog:
  - mount: simplify /proc/self/mountinfo handler (#1696178)
  - mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
  - swap: scan /proc/swaps before processing waitid() results (#1696178)
  - analyze-security: fix potential division by zero (#1734400)


author: Lukas Nykryn <lnykryn@redhat.com> - 239-18
changelog:
  - shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
  - sd-bus: adjust indentation of comments (#1746857)
  - resolved: do not run loop twice (#1746857)
  - resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
  - resolved: query polkit only after parsing the data (#1746857)


author: Lukas Nykryn <lnykryn@redhat.com> - 239-18.1
changelog:
  - journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-18.3
changelog:
  - core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
  - syslog: fix segfault in syslog_parse_priority() (#1781712)
  - journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
  - test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
  - test: mask several unnecessary services (#1781712)
  - test: bump the second partition's size to 50M (#1781712)
  - sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
  - sd-bus: reorder bus ref and bus message ref handling (#20201712)
  - sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
  - sd-bus: drop two inappropriate empty lines (#20201712)
  - sd-bus: initialize mutex after we allocated the wqueue (#20201712)
  - sd-bus: always go through sd_bus_unref() to free messages (#20201712)
  - bus-message: introduce two kinds of references to bus messages (#20201712)
  - sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
  - sd-event: add sd_event_source_disable_unref() helper (#20201712)
  - polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-18.4
changelog:
  - sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)


author: He Chunni <chunni@neschina.com> - 239-18.nfs.5
changelog:
  - fix 0355845 fix reboot time out User Manager
    0240-fix-0355845-reboot-time-out-User-Manager.patch


author: zhoujie <zhoujie@nfschina.com> - 239-20.nfs.3
changelog:
  - fix bug036651:netperf的tcp_cc测试时出现大量未关闭连接，导致测试失败问题。
  - 修改sysctl.conf.README 文件
  - net.ipv4.tcp_timestamps = 1 (原为net.ipv4.tcp_timestamps = 0)
  - net.ipv4.tcp_tw_reuse = 1 (新增)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-43
changelog:
  - man: mention System Administrator's Guide in systemctl manpage (#1623116)
  - udev: introduce udev net_id "naming schemes" (#1827462)
  - meson: make net.naming-scheme= default configurable (#1827462)
  - man: describe naming schemes in a new man page (#1827462)
  - udev/net_id: parse _SUN ACPI index as a signed integer (#1827462)
  - udev/net_id: don't generate slot based names if multiple devices might claim the same slot (#1827462)
  - fix typo in ProtectSystem= option (#1871139)
  - remove references of non-existent man pages (#1876807)
  - log: Prefer logging to CLI unless JOURNAL_STREAM is set (#1865840)
  - locale-util: add new helper locale_is_installed() (#1755287)
  - test: add test case for locale_is_installed() (#1755287)
  - tree-wide: port various bits over to locale_is_installed() (#1755287)
  - install: allow instantiated units to be enabled via presets (#1812972)
  - install: small refactor to combine two function calls into one function (#1812972)
  - test: fix a memleak (#1812972)
  - docs: Add syntax for templated units to systemd.preset man page (#1812972)
  - shared/install: fix preset operations for non-service instantiated units (#1812972)
  - introduce setsockopt_int() helper (#1887181)
  - socket-util: add generic socket_pass_pktinfo() helper (#1887181)
  - core: add new PassPacketInfo= socket unit property (#1887181)
  - resolved: tweak cmsg calculation (#1887181)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-44
changelog:
  - ci: PowerTools repo was renamed to powertools in RHEL 8.3 (#1871827)
  - ci: use quay.io instead of Docker Hub to avoid rate limits (#1871827)
  - ci: move jobs from Travis CI to GH Actions (#1871827)
  - unit: make UNIT() cast function deal with NULL pointers (#1871827)
  - use link to RHEL-8 docs (#1623116)
  - cgroup: Also set blkio.bfq.weight (#1657810)
  - units: make sure initrd-cleanup.service terminates before switching to rootfs (#1657810)
  - core: reload SELinux label cache on daemon-reload (#1888912)
  - selinux: introduce mac_selinux_create_file_prepare_at() (#1888912)
  - selinux: add trigger for policy reload to refresh internal selabel cache (#1888912)
  - udev/net_id: give RHEL-8.4 naming scheme a name (#1827462)
  - basic/stat-util: make mtime check stricter and use entire timestamp (#1642728)
  - udev: make algorithm that selects highest priority devlink less susceptible to race conditions (#1642728)
  - test: create /dev/null in test-udev.pl (#1642728)
  - test: missing "die" (#1642728)
  - udev-test: remove a check for whether the test is run in a container (#1642728)
  - udev-test: skip the test only if it can't setup its environment (#1642728)
  - udev-test: fix test skip condition (#1642728)
  - udev-test: fix missing directory test/run (#1642728)
  - udev-test: check if permitted to create block device nodes (#1642728)
  - test-udev: add a testcase of too long line (#1642728)
  - test-udev: use proper semantics for too long line with continuation (#1642728)
  - test-udev: add more tests for line continuations and comments (#1642728)
  - test-udev: add more tests for line continuation (#1642728)
  - test-udev: fix alignment and drop unnecessary white spaces (#1642728)
  - test/udev-test.pl: cleanup if skipping test (#1642728)
  - test: add test cases for empty string match (#1642728)
  - test: add test case for multi matches when use "||" (#1642728)
  - udev-test: do not rely on "mail" group being defined (#1642728)
  - test/udev-test.pl: allow multiple devices per test (#1642728)
  - test/udev-test.pl: create rules only once (#1642728)
  - test/udev-test.pl: allow concurrent additions and removals (#1642728)
  - test/udev-test.pl: use computed devnode name (#1642728)
  - test/udev-test.pl: test correctness of symlink targets (#1642728)
  - test/udev-test.pl: allow checking multiple symlinks (#1642728)
  - test/udev-test.pl: fix wrong test descriptions (#1642728)
  - test/udev-test.pl: last_rule is unsupported (#1642728)
  - test/udev-test.pl: Make some tests a little harder (#1642728)
  - test/udev-test.pl: remove bogus rules from magic subsys test (#1642728)
  - test/udev-test.pl: merge "space and var with space" tests (#1642728)
  - test/udev-test.pl: merge import parent tests into one (#1642728)
  - test/udev-test.pl: count "good" results (#1642728)
  - tests/udev-test.pl: add multiple device test (#1642728)
  - test/udev-test.pl: add repeat count (#1642728)
  - test/udev-test.pl: generator for large list of block devices (#1642728)
  - test/udev-test.pl: suppress umount error message at startup (#1642728)
  - test/udev_test.pl: add "expected good" count (#1642728)
  - test/udev-test: gracefully exit when imports fail (#1642728)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-45
changelog:
  - Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
  - test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
  - sd-event: split out helper functions for reshuffling prioqs (#1937315)
  - sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
  - sd-event: mention that two debug logged events are ignored (#1937315)
  - sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
  - sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
  - sd-event: fix delays assert brain-o (#17790) (#1937315)
  - sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
  - sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
  - sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
  - sd-event: follow coding style with naming return parameter (#1937315)
  - sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
  - sd-event: update state at the end in event_source_enable (#1937315)
  - sd-event: increase n_enabled_child_sources just once (#1937315)
  - sd-event: add ability to ratelimit event sources (#1937315)
  - test: add ratelimiting test (#1937315)
  - core: prevent excessive /proc/self/mountinfo parsing (#1937315)
  - udev: run link_update() with increased retry count in second invocation (#1935124)
  - pam-systemd: use secure_getenv() rather than getenv() (#1936866)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-46
changelog:
  - Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
  - Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
  - test/udev-test.pl: drop test cases that add mutliple devices (#1942299)


author: Jan Macku <jamacku@redhat.com> - 239-47
changelog:
  - systemd-binfmt: Add safeguard in triggers (#1787144)
  - spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
  - spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
  - spec: Disable libiptc support (#1817265)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-48
changelog:
  - cgroup: Also set io.bfq.weight (#1927290)
  - seccomp: allow turning off of seccomp filtering via env var (#1916835)
  - meson: remove strange dep that causes meson to enter infinite loop (#1970860)
  - copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
  - core: Hide "Deactivated successfully" message (#1954802)
  - util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
  - initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
  - initrd: do a debug log if failed to detect rootfs type (#1959339)
  - initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
  - units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
  - units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
  - units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
  - user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
  - shared/install: Preserve escape characters for escaped unit names (#1952686)
  - basic/virt: Detect PowerVM hypervisor (#1937989)
  - man: document differences in clean exit status for Type=oneshot (#1940078)
  - busctl: add a timestamp to the output of the busctl monitor command (#1909214)
  - basic/cap-list: parse/print numerical capabilities (#1946943)
  - shared/mount-util: convert to libmount (#1885143)
  - mount-util: bind_remount: avoid calling statvfs (#1885143)
  - mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
  - test-install-root: create referenced targets (#1835351)
  - install: warn if WantedBy targets don't exist (#1835351)
  - test-install-root: add test for unknown WantedBy= target (#1835351)
  - ceph is a network filesystem (#1952013)
  - sysctl: set kernel.core_pipe_limit=16 (#1949729)
  - core: don't drop timer expired but not yet processed when system date is changed (#1899402)
  - core: Detect initial timer state from serialized data (#1899402)
  - rc-local: order after network-online.target (#1934028)
  - set core ulimit to 0 like on RHEL-7 (#1905582)
  - test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-49
changelog:
  - remove a left-over break (#1970860)
  - basic/unit-name: do not use strdupa() on a path (#1974700)
  - sd-event: change ordering of pending/ratelimited events (#1968528)
  - sd-event: drop unnecessary "else" (#1968528)
  - sd-event: use CMP() macro (#1968528)
  - sd-event: use usec_add() (#1968528)
  - sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
  - sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
  - ci: run unit tests on z-stream branches as well (#1970860)
  - ci: drop forgotten Travis references (#1934504)
  - ci: run unit tests on CentOS 8 Stream as well (#1934504)
  - ci: add missing test dependencies (#1934504)
  - meson: bump timeout for test-udev to 180s (#1934504)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-50
changelog:
  - Added option --check-inhibitors for non-tty usage (#1269726)
  - logind: Introduce RebootWithFlags and others (#1269726)
  - logind: add …WithFlags methods to policy (#1269726)
  - logind: simplify flags handling a bit (#1269726)
  - Update link to RHEL documentation (#1982584)
  - Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
  - shared/seccomp-util: address family filtering is broken on ppc (#1982650)
  - logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
  - logind: fix serialization/deserialization of user's "display session" (#1642460)
  - logind: turn of stdio locking when writing session files too (#1642460)
  - units: set StopWhenUnneeded= for the user slice units too (#1642460)
  - units: improve Description= string a bit (#1642460)
  - logind: improve logging in manager_connect_console() (#1642460)
  - logind: save/restore User object's "stopping" field during restarts (#1642460)
  - logind: correct bad clean-up path (#1642460)
  - logind: fix bad error propagation (#1642460)
  - logind: never elect a session that is stopping as display (#1642460)
  - logind: introduce little helper that checks whether a session is ready (#1642460)
  - logind: propagate session stop errors (#1642460)
  - logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
  - logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
  - logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
  - logind: improve error propagation of user_check_linger_file() (#1642460)
  - logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
  - pam_systemd: simplify code which with we set environment variables (#1642460)
  - logind: validate /run/user/1000 before we set it (#1642460)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-51
changelog:
  - define newly needed constants (#1850986)
  - sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
  - sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
  - sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
  - test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
  - util: introduce ifname_valid_full() (#1850986)
  - rename function (#1850986)
  - udev: support AlternativeName= setting in .link file (#1850986)
  - network: make Name= in [Match] support alternative names of interfaces (#1850986)
  - udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
  - udev: do not fail if kernel does not support alternative names (#1850986)
  - udev: introduce AlternativeNamesPolicy= setting (#1850986)
  - network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
  - random-util: call initialize_srand() after fork() (#1850986)
  - sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
  - udev: sort alternative names (#1850986)
  - netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
  - netlink: do not fail when new interface name is already used as an alternative name (#1850986)
  - udev: do not try to reassign alternative names (#1850986)
  - Fix LGTM build (#1850986)
  - sd-hwdb: allow empty properties (#1930568)
  - Update hwdb (#1930568)


author: xunian <xunian@nfschina.com> - 239-51.1
changelog:
  - Changed-tty-default-6-to-7;
  - fix bug036651:netperf的tcp_cc测试时出现大量未关闭连接，导致测试失败问题;
  - 修改sysctl.conf.README 文件;
  - net.ipv4.tcp_timestamps = 1;
  - net.ipv4.tcp_tw_reuse = 1.


author: Mark de Does <mark@mdedoes.com> 2.12-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Solid shading of paragraphs and table cells.
  - Colored table cell borders, Text colors.


author: Mark de Does <mark@mdedoes.com> 2.13-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Options for making much more compact PostScript when a document 
  is printed.
  - Support for smallcaps.
  - Upgraded the pdfmarks to a version that more recent versions of 
  acroread support.


author: Mark de Does <mark@mdedoes.com> 2.14-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Table Headers
  - Tabs in page headers/footers compatible with MS-Word 2000


author: Mark de Does <mark@mdedoes.com> 2.16-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Fonts can be embedded in the printout to print on any printer.
  - Version 2.15 was skipped.


author: Mark de Does <mark@mdedoes.com> 2.17-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Numbered lists finished.
  - Yet more footnote bugs fixed.
  - Behaviour of explicit line and page breaks simulates that of MS-Word.
  - Made a configurable resources mechanism that works without X11 
  for command line calls.
  - Improvements in numbered lists functionality: Opened user interface.
  - Preliminary support for 'shapes': The newer Word figures mechanism. 
  The Word 97 Drawing Objects are mapped to 'shapes'.


author: Mark de Does <mark@mdedoes.com> 2.20-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Vertical alignment of table cells.
  - Multi column layout (of sections).
  - Text background and text borders
  - Table of Contents
  - Unicode compliant (So most scripts and fonts are now supported)
  - Use fontconfig: Removed restrictions on the collection of fonts that 
  Ted can use; Use Freetype/Xft for anti aliassed text rendering
  - Can now render nested tabes. (They are not yet supprted in the user 
  interface)
  - Versions 2.18 and 2.19 were skipped.


author: Mark de Does <mark@mdedoes.com> 2.21-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Many improvements in the rendering of embedded images.
  - Removed functionality that is not directly related to word processing 
  and document formatting. (Email, Fax)
  - Added GUI functionality that I forgot while moving to GTK.
  - Can now embed fonts from a true type collection in the printout
  - Moved more ad-hoc dialogs to the format tool as a preparation for a 
  better UI


author: Mark de Does <mark@mdedoes.com> 2.22-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Thorough brush-up of the internals.
  - Undu/Redo/Recovery
  - Many-many annoying bugs fixed.
  - Some steps to support the few missing features such as absolutely 
  positioned objects and shapes.


author: Mark de Does <mark@mdedoes.com> 2.23-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Stability fixes.
  - Many-many annoying bugs fixed.
  - Some steps to support the few missing features such as absolutely 
  positioned objects and shapes.
  - Preparations for bidirectional text support
  - Comply with LSB directory layout.
  - Conformant deb and rpm packages


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-2
changelog:
  - Revert removal of vncserver
    Resolves: bz#1897504
  - Correctly start vncsession as a daemon
    Resolves: bz#1897498


author: Hui Wang <huwang@redhat.com> - 1:9.0.71-1
changelog:
  - Update to 9.0.71
  - Remove osgi-annotations patch
  - Add bnd-annotation dependency which is in bndlib package


author: Hui Wang <huwang@redhat.com> - 1:9.0.76-1
changelog:
  - Update to 9.0.76
  - Resolves: rhbz#2188218 Link bin/tomcat-juli.jar to /usr/share/java
  - Move tomcat-jsp-2.3-api.jar,tomcat-servlet-4.0-api.jar and tomcat-el-api.jar to the subpackages


author: Hui Wang <huwang@redhat.com> - 1:9.0.76-2
changelog:
  - Resolves: rhbz#2210322 - CVE-2023-28709 tomcat: Fix for CVE-2023-24998 was incomplete
  - Install missing poms


author: Patsy Franklin <pfrankli@redhat.com> - 2018d-1
changelog:
  - Rebase to tzdata-2018d:
    - DST for Asia/Gaza and Asia/Hebron has changed 
      from March 31 to March 24.
    - Antarctica/Casey station changed to UTC+8 on March 11.


author: Patsy Franklin <pfrankli@redhat.com> - 2018e-1
changelog:
  - Rebase to tzdata-2018e
    - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
    - In this update, the upstream project now defaults to using
      the "vanguard" data implementation which includes negative DST offsets.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018g-1
changelog:
  - Rebase to tzdata-2018g
    - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
      planned.  This change is effective Octobober 28, 2018.
  - Include changes introduced in tzdata-2018f
    - Volgograd will change from UTC+03 to UTC+04 on 2018-10-28 at 02:00.
    - Fiji will end DST on 2019-01-13 instead of the 2019-01-20 as
      previously predicted.
    - Most of Chile will end DST on the first Saturday in April at 24:00
      and restart DST on the first Saturday in September at 24:00.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018i-1
changelog:
  - Rebase to tzdata-2018i (includes changes from tzdata-2018h)
    - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
    - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
    - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
      transition with the Qyzylorda change.
    - Metlakatla, Alaska will observe PST for this winter only.
    - Predict that Morocco will continue to adjust clocks around Ramadan.
    - Also include predictions for Iran from 2038 through 2090.


author: Patsy Griffin Franklin <patsy@redhat.com> - 2019a-1
changelog:
  - Rebase to tzdata-2019a
    - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
      previously predicted.
    - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
      of Pacific standard time.


author: Patsy Griffin <patsy@redhat.com> - 2019b-1
changelog:
  - Rebase to tzdata-2019b
    - Brazil will no longer observe DST going forward.
    - The 2019 spring transition for Palestine occurred 03-29, not 03-30.


author: Patsy Griffin <patsy@redhat.com> - 2019c-1
changelog:
  - Rebase to tzdata-2019c
    - Fiji will observe DST from 2019-11-10 to 2020-01-12.
    - Norfolk Island will begin observing Australian-style DST on 2019-10-06.


author: Larence R. Rogers <lrr@cert,org> - 5.3.0-1
changelog:
  * Release 5.3.0-1
    1. Directory wildcards are allowed in RAR command line in file names to
        archive. For example:

        rar a backup c:\backup\2015*\*

        Recursion is enabled automatically for such directory wildcards
        even if -r switch is not specified.

     2. New 'R' object for -sc switch defines encoding of console
        RAR messages sent to redirected files and pipes. For example:

        rar lb -scur data > list.txt

        will produce Unicode list.txt with archived file names.

     3. Console RAR "l" and "v" commands display file time in YYYY-MM-DD
        format.

     4. "Test" command also verifies contents of NTFS alternate data streams
        in RAR 3.x - 5.x archives. Previously their contents was checked
        only during extraction command.

     5. Bugs fixed:

        a) console RAR crashed instead of displaying an overwrite prompt
           when attempting to add files to already existing volumes;

        b) console RAR "lt" command did not display seconds in file timestamp.


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-8
changelog:
  - 1640919 - augroup fedora, test case failure: /CoreOS/vim/Regression/bz241308-use-augroup-for-rh-autocmds


author: xunian <xunian@nfschina.com> - 2:8.0.1763-21
changelog:
  - #0371897
  - Fix:CVE-2021-3872,CVE-2021-4068,CVE-2022-0261,CVE-2022-0318,
  - CVE-2022-0359,CVE-2022-0361,CVE-2022-0392,CVE-2022-0413,
  - CVE-2022-2124,CVE-2022-2125,CVE-2022-2126,CVE-2022-2129.


author: Pavel Hrdina <phrdina@redhat.com> - 2.0.0-2
changelog:
  - virt-install: Fix description for --os-variant (rhbz#1649406)
  - virt-install: Add "Guest OS" options group (rhbz#1649406)
  - virt-xml: Accept --os-variant option (rhbz#1649406)
  - tests: Add some tests for virt-xml with KVM (rhbz#1649406)
  - virt-xml: Start using --os-variant (rhbz#1649406)
  - cli: s390x+graphics specified, use video=virtio (bz #1654994) (rhbz#1654994)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.0-1
changelog:
  - Rebased to virt-manager-2.2.0 (rhbz#1721001)
  - The rebase also fixes the following bugs:
      rhbz#1718065, rhbz#1714304, rhbz#1709857, rhbz#1707379, rhbz#1700354
      rhbz#1692489, rhbz#1690687, rhbz#1690685, rhbz#1683609, rhbz#1679018
      rhbz#1677019, rhbz#1671599, rhbz#1667025, rhbz#1666597, rhbz#1663430
      rhbz#1661867, rhbz#1660467, rhbz#1660123, rhbz#1659354, rhbz#1658511
      rhbz#1648939, rhbz#1599139, rhbz#1508147, rhbz#1501608
  - spec: add build dependencies that are now required for build (rhbz#1721001)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.0-2
changelog:
  - xmleditor: Handle gtksourceview3 as well as gtksourceview4 (rhbz#1722820)
  - xmleditor: Fix the gtksource version checking (rhbz#1722820)
  - spec: add gtksourceview3 dependency introduced by upstream (rhbz#1722820)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.1-1
changelog:
  - Rebased to virt-manager-2.2.1 (rhbz#1726535)
  - The rebase also fixes the following bugs:
      rhbz#1727881, rhbz#1724287, rhbz#1727811
  - spec: add gtksourceview3 dependency introduced by upstream (rhbz#1722820)
  - guest: fix warning message when machine type is changed for secure boot (rhbz#1727811)


author: Tomas Popela <tpopela@redhat.com> - 2.4.9-2
changelog:
  - Compile with -fno-strict-aliasing
  - Resolves: rhbz#1174556
  - Update translations
  - Resolves: rhbz#1223643


author: chunchao<chunchao@nfschina.com> - 2.4.11-3.1
changelog:
  - Fix build error on NFS4.0: add python link to python
  - patch: webkitgtk-2.4.11-feature-python3-env.patch


author: Lubomir Rintel <lkundrak@v3.sk> - 1:2.6-11
changelog:
  - hostapd: Avoid key reinstallation in FT handshake (CVE-2017-13082)
  - Fix PTK rekeying to generate a new ANonce
  - Prevent reinstallation of an already in-use group key and extend
    protection of GTK/IGTK reinstallation of WNM-Sleep Mode cases
    (CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081,
    CVE-2017-13087, CVE-2017-13088)
  - Prevent installation of an all-zero TK
  - TDLS: Reject TPK-TK reconfiguration
  - WNM: Ignore WNM-Sleep Mode Response without pending request
  - FT: Do not allow multiple Reassociation Response frames


author: Jiří Klimeš <blueowl@centrum.cz> - 1:2.6-12
changelog:
  - Fix crash when using MACsec without loaded macsec.ko (rh #1497640)
  - Enable Fast BSS Transition for station mode (rh #1372928)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-15
changelog:
  - Disable build of wpa_gui (rh #1542234)
  - Fix build issue with latest kernel headers (rh #1582604)
  - Disable WEXT (rh #1537143)
  - Fix memory leak when macsec MKA/PSK is used (rh #1582511)
  - Fix authentication failure when the MAC is updated externally (rh #1582508)
  - Let the kernel discard EAPOL if packet type is PACKET_OTHERHOST (rh #1582501)


author: Ben Crocker <bcrocker@redhat.com> - 1.20.3-5
changelog:
  - Add Eric Anholt's patch e50c85f4ebf559 from upstream:
  - Fix segfault on probing a non-PCI platform device on a system with PCI
  - NOTE: also pertains on a system with no PCI, e.g. s390x.
    Resolves: #1652013


author: xunian <xunian@nfschina.com> - 1.20.3-10
changelog:
  - Fix CVE-2022-46340.
  - Fix CVE-2022-46341.
  - Fix CVE-2022-46342.
  - Fix CVE-2022-46343.
  - Fix CVE-2022-46344.
  - Fix CVE-2022-4283.


author: Pavel Raiskup <praiskup@redhat.com> - 1.2.11-1
changelog:
  - latest upstream release (rhbz#1409372)
  - cleanup rpmlint
  - revert fix for rhbz#985344
  - requires with %_isa tag
  - drop zlib Z_BLOCK flush patch (rhbz#1417355)


