# changelog

author: Jindrich Novy <jnovy@redhat.com> - 2:2.162.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.162.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.162.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.162.1
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.162.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.162.2
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.163.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.163.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.164.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.164.1
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.164.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.164.2
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.165.1-2
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.165.1
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.167.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.167.0
  - Related: #1934415


author: Jan Friesse <jfriesse@redhat.com> - 3.1.0-2
changelog:
  - Add isa version of corosync-devel
  - Add release to corosync-devel version to match autogenerated
    corosynclib-devel provides


author: XLiang@suse.com
changelog:
  - Update to version 4.3.1+20210702.4e0ee8fb:
    * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
    * Fix: resource: make untrace consistent with trace (bsc#1187396)
    * Dev: sbd: enable SBD_DELAY_START in virtualization environment


author: XLiang@suse.com
changelog:
  - Update to version 4.3.1+20210811.2a30e37e:
    * Dev: ui_resource: Enhancement trace output
    * Fix: doc: Note that resource tracing is only supported by OCF RAs(bsc#1188966)
    * Medium: ra: performance/usability improvement (avoid systemd)
    * Dev: ui_context: Add info when spell-corrections happen
    * Fix: parse: Should still be able to show the empty property if it already exists(bsc#1188290)


author: XLiang@suse.com
changelog:
  - Update to version 4.3.1+20210827.4fb174c4:
    * Fix: hb_report: Using python way to collect ra trace files (bsc#1189641)
    * Fix: bootstrap: adjust host list for parallax to get and copy known_hosts file(bsc#1188971)


author: XLiang@suse.com
changelog:
  - Update to version 4.3.1+20211012.52d4086a:
    * Fix: ui_resource: Parse lifetime option correctly (bsc#1191508)
    * Fix: utils: Improve detect_cloud function and support non-Hyper-V in Azure


author: XLiang@suse.com
changelog:
  - Update to version 4.3.1+20211101.7cafcfec:
    * orderedset.py: fix deprecation on collections.MutableSet
    * Dev: crm report: Consolidate collect functions in collect.py and running them in parallel (jsc#SLE-22499)
    * Dev: crm report: Collect report using multiprocessing correctly (jsc#SLE-22499)
    * Fix: bootstrap: Add /etc/crm/crm.conf and /etc/crm/profiles.yml into /etc/csync2/csync2.cfg (bsc#1190466)
    * Dev: Using python logging in all crmsh modules
    * Dev: log: Using logging as log system in crmsh
    * Fix: bootstrap: Adjust corosync and sbd parameters according to the profile environment detected (bsc#1175896, jsc#SLE-22502)
    * Fix: sbd: adjust sbd systemd TimeoutStartSec together with SBD_DELAY_START (jsc#SLE-22502)
    * Dev: Makefile: add etc/profiles.yml and move crm.conf.in into etc


author: XLiang@suse.com
changelog:
  - Update to version 4.3.1+20211116.ef2bce26:
    * Dev: doc: Consolidate help info for those using argparse
    * Dev: ui_cluster: Make sure node is online when stop service
    * Dev: ui_cluster: Graceful shutdown dlm (jsc#SLE-22497)
    * Dev: ui_cluster: Support multi sub-commands with --all option or specific node (jsc#SLE-22497)


author: XLiang@suse.com
changelog:
  - Update to version 4.3.1+20211206.e34e2fff:
    * Dev: sbd: Adjust timeout related values (jsc#SLE-22492)
    * Dev: ui_cluster: check if qdevice service started when starting cluster if qdevice configured
    * Dev: idmgmt: Avoid leading with number for ID
    * Dev: ui_cluster: Check service is available before enable/disable qdevice
    * Dev: ui_node: Improve node standby/online methods
    * Dev: ui_cluster: Remove node from node list if node is unreachable
    * Dev: Give warning when no-quorum-policy not set as freeze while using DLM
    * Fix: crm: To avoid the potential "permission denied" error under other users (boo#1192754)
    * Fix: ui_resource: Parse node and lifetime correctly (bsc#1192618)


author: XLiang@suse.com
changelog:
  - Update to version 4.3.1+20211210.a149de51:
    * Dev: ui_cluster: Exit stop process when there is no DC (jsc#SLE-22497)
    * Dev: ui_cluster: check dlm controld ra is running when stop cluster (jsc#SLE-22497)
    * Dev: log: In status_long function, add a blank line when exception
    * Revert "Dev: ui_cluster: Make sure node is online when stop service"


author: XLiang@suse.com
changelog:
  - Update to version 4.4.0+20220208.5e6dca1d:
    * Fix: sbd: not overwrite SYSCONFIG_SBD and sbd-disk-metadata if input 'n'(bsc#1194870)
    * Dev: bootstrap: the joining node retries an active cluster
    * Dev: ui_node: Use diff and patch instead of replace cib
    * Fix: bootstrap: Don't change pacemaker.service bootup preference (bsc#1194616)
    * Fix: spec: Add "BuildRequires: python-rpm-macros" to spec file (bsc#1194751)
    * Fix: log: Change the log file owner as hacluster:haclient (bsc#1194619)
    * Dev: crm.conf: Add OCF_1_1_SUPPORT flag to control ocf 1.1 feature
    * Dev: doc: Introduce promotable clone and role Promoted/Unpromoted
    * Fix: crash_test: Adjust help output of 'crm cluster crash_test -h'(bsc#1194615)
    * Dev: utils: Convert Master/Slave to Promoted/Unpromoted if schema support OCF 1.1
    * Dev: xmlutil: Replace Promoted/Unpromoted as Master/Slave when OCF 1.0 schema detected
    * Dev: doc: Replace pingd as ocf:pacemaker:ping
    * Dev: ui_resource: set target-role as Promoted/Unpromoted when doing promote or demote
    * Dev: ra: Support Promoted/Unpromoted
    * Dev: ocfs2: Fix running ocfs2 stage on cluster with diskless-sbd
    * Fix: bootstrap: Change default transport type as udpu(unicast) (bsc#1132375)
    * Dev: bootstrap: Avoid duplicated setting for rsc_defaults
    * Fix: ui_configure: Give a deprecated warning when using "ms" subcommand (bsc#1194125)
    * Fix: xmlutil: Parse promotable clone correctly and also consider compatibility (bsc#1194125)
    * Dev: doc: Rename hb_report as crm report (jsc#SLE-22499)
    * Dev: crm_report: Integrate report log into crmsh logging (jsc#SLE-22499)
    * Fix: bootstrap: Change log info when need to change user login shell (bsc#1194026)
    * Dev: crm_report: Move hb_report directory to crmsh/report (jsc#SLE-22499)
    * Dev: doc: Mention /etc/crm/profiles.yml in man crm
    * Dev: ui_node: Delete node directly using cibadmin if crm_node -R failed
    * Dev: xmlutil: Add class CrmMonXmlParser to parse xml output of crm_mon


author: XLiang@suse.com
changelog:
  - Update to version 4.4.0+20220321.8cf6a9d1:
    * Dev: Parametrize the log dir
    * Dev: ui_cluster: Check if qdevice can contribute vote
    * Dev: qdevice: Improve remove qdevice process
    * Dev: qdevice: Add lock to protect for the same cluster name
    * Fix: qdevice: Add lock to protect init_db_on_qnetd function (bsc#1197323)
    * medium: utils: update detect_cloud pattern for aws
    * Dev: qdevice: Consolidate qdevice related separate functions into qdevice.QDevice class
    * Dev: lock: Make lock.py more generic
    * Dev: qdevice: Add cluster name suffix to qdevice-net-node.crq on qnet
    * Dev: qdevice: remove askpass since it's unnecessary after passwordless configured on qnetd
    * Fix: utils: Only raise exception when return code of systemctl command over ssh larger than 4 (bsc#1196726)
    * Dev: utils: Remove duplicated debug message


author: Andreas Schneider <asn@redhat.com> - 4.14.4-2
changelog:
  - resolves: rhbz#1944657 - Update to version 4.14.4
  - resolves: rhbz#1949445 - Fix CVE-2021-20254
  - resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
  - resolves: rhbz#1908506 - Fix creating the gencache user directory
  - resolves: rhbz#1901029 - Build the vfs_io_uring module


author: Andreas Schneider <asn@redhat.com> - 4.14.4-0
changelog:
  - related: rhbz#1944657 - Update to version 4.14.5
  - resolves: rhbz#1969787 - Fix memory leak in RPC server
  - resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
  - resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
  - resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
  - resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags


author: Andreas Schneider <asn@redhat.com> - 4.14.4-1
changelog:
  - resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
  - resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message


author: Andreas Schneider <asn@redhat.com> - 4.14.4-4
changelog:
  - resolves: rhbz#2021163
    Fix CVE-2016-2124
  - resolves: rhbz#2021167
    Fix CVE-2021-23192
  - resolves: rhbz#2021171
    Fix CVE-2020-25717


author: Andreas Schneider <asn@redhat.com> - 4.14.5-5
changelog:
  - resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
  - related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'


author: chaodong <chaodong@nfschina.com> - 11.0.14-2
changelog:
  - fix environment variables Invalid.
  - fix Name to java.
  - fix install path to /usr/lib64/jvm/java-11.0.14/
  - add  BuildRequires: libXtst-devel libXt-devel libXrender-devel cups-devel freetype-devel alsa-lib-devel fontconfig-devel.


author: chaodong <chaodong@nfschina.com> - 11.0.14-4
changelog:
  - Add BuildRequires autoconf,make,gcc-c++,libXrandr-devel.
  - Remove environment variables CLASSPATH.


author: Karel Zak <kzak@redhat.com> 2.32.1-23
changelog:
  - fix #1826251 - remove MD metadata 0.90 based tests from util-linux CI
  - fix #1812576 - RFE: Bitlocker detection for RHEL 8.3
  - fix #1817726 - add libblkid BLOCK_SIZE
  - fix #1803753 - RHEL-8: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
  - fix #1812118 - mount -a always tries to mount smb3 share subdir despite being already mounted
  - fix #1824727 - util-linux: Include python3-libmount package in the release
  - fix #1829245 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir


author: Karel Zak <kzak@redhat.com> 2.32.1-25
changelog:
  - fix #1884194 - RHEL-8: chrt command does not support the -R option
  - fix #1855759 - mount.8: clarify (no)suid behavior on file capabilities
  - fix #1861670 - lsblk can not show serial information for virtio disk
  - fix #1883783 - lscpu: avoid segfault on PowerPC systems with valid hardware configurations
  - fix #1900498 - libfdisk/libmount: backport two patches for upstream systemd
  - fix #1883056 - lscpu support for Fujitsu A64FX
  - fix #1882740 - lscpu: use SMBIOS Type 4 strings for CPU vendor and model on ARM


author: Karel Zak <kzak@redhat.com> 2.32.1-28
changelog:
  - fix #1906157 - after su from root to a normal user mesg is unable to show current status
  - fix #1917852 - findmnt: add option to list all fs-independent flags
  - fix #1922299 - throws error using /sbin/nologin: invalid option -- 'c'
  - fix #1940607 - lsblk sometimes returns block devices in wrong order with --pairs
  - fix #1919529 - [RFE] RHEL-8: Support option flags with mount(8) --bind
  - fix #1946921 - RHEL8: mount --rbind -o rprivate doesn't do recursive bind mount


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.21-1
changelog:
  - Rebase to 8.0.21
  - Use bundled libzstd and libevent for RHSCL and RHEL-8.0.0
  - Check that we have correct versions in bundled(*) Provides
  - Remove re2 bundled dependency


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.22-1
changelog:
  - Update to MySQL 8.0.22
  - mysql-certs-expired.patch patched by upstream
  - New zlib_decompress binary file in test package


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.0-1
changelog:
  - new version 1.16.0
  - enable ngx_stream_ssl_preread module
  - main package does NOT require all-modules package


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-1
changelog:
  - update to 1.16.1
  - Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-2
changelog:
  - new version 1.18.0
  - Resolves: #1668717 - [RFE] Support loading certificates from hardware token
    (PKCS#11)
  - Increased types_hash_max_size to 4096 in default config
  - Drop location / from default config (rhbz#1564768)
  - Drop default_sever from default config (rhbz#1373822)


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-3
changelog:
  - Resolves: #1651377 - centralizing default index.html on nginx
  - Resolves: #1825683 - Outdated Red Hat branding used in nginx default pages


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-1
changelog:
  - Add crm_simulate --show-attrs and --show-failcounts options
  - Retry getting fence agent meta-data after initial failure
  - Add debug option for more verbose ocf:pacemaker:ping logs
  - Rebase on upstream 2.1.0-rc2 release
  - Support OCF Resource Agent API 1.1 standard
  - Fix crm_mon regression that could cause certain agents to fail at shutdown
  - Allow setting OCF check level for crm_resource --validate and --force-check
  - Resolves: rhbz1686426
  - Resolves: rhbz1797579
  - Resolves: rhbz1843177
  - Resolves: rhbz1935464
  - Resolves: rhbz1936696
  - Resolves: rhbz1948620
  - Resolves: rhbz1955792


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-2
changelog:
  - Rebase on upstream 2.1.0 final release
  - Correct schema for crm_resource XML output
  - Resolves: rhbz1935464
  - Resolves: rhbz1967087


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-3
changelog:
  - crm_resource now supports XML output from resource agent actions
  - Correct output for crm_simulate --show-failcounts
  - Avoid remote node unfencing loop
  - Resolves: rhbz1644628
  - Resolves: rhbz1686426
  - Resolves: rhbz1961857


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-4
changelog:
  - Show better error messages in crm_resource with invalid resource types
  - Avoid selecting wrong device when dynamic-list fencing is used with host map
  - Do not schedule probes of unmanaged resources on pending nodes
  - Fix regressions in crm_attribute and crm_master argument handling
  - Resolves: rhbz1447918
  - Resolves: rhbz1978010
  - Resolves: rhbz1982453
  - Resolves: rhbz1984120


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-6
changelog:
  - Fix watchdog agent version information
  - Ensure transient attributes are cleared when multiple nodes are lost
  - Resolves: rhbz1443666
  - Resolves: rhbz1986998


author: Remi Collet <rcollet@redhat.com> - 7.4.6-1
changelog:
  - update to 7.4.6
  - add ffi extension
  - add /usr/share/php/preload as default ffi.preload configuration
  - run FPM tests
  - set opcache.enable_cli in provided default configuration
  - ensure all shared extensions can be loaded
  - drop wddx, recode and extensions
  - run test suite using 4 concurrent workers


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.3.1-10
changelog:
  - Release bump and rebuild for relengs to be able to ship postfix-pcre,
    postfix-cdb, postfix-sqlite
    Resolves: rhbz#1745321


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.8-2
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1977732


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-1
changelog:
  - Update to 1.11.0
    Resolves: bz#1880985
  - Backport fix to allow Tigervnc use boolean values in config files
    Resolves: bz#1883415


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-2
changelog:
  - Revert removal of vncserver
    Resolves: bz#1897504
  - Correctly start vncsession as a daemon
    Resolves: bz#1897498


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-8.20180224
changelog:
  - fix buffer overflow in terminfo entry hashtable (CVE-2019-17594)
  - handle missing character after backslash in terminfo entry (CVE-2019-17595)


author: Paul Wouters <paul.wouters@aiven.io> - 5.9.4-1
changelog:
  - Resolves: rhbz#2015165 strongswan-5.9.4 is available
  - Resolves: rhbz#2015612 CVE-2021-41990 strongswan: gmp plugin: integer overflow via a crafted certificate with an RSASSA-PSS signature
  - Resolves: rhbz#2015615 CVE-2021-41991 strongswan: integer overflow when replacing certificates in cache
  - Add BuildRequire for tpm2-tss-devel and weak dependency for tpm2-tools


author: Paul Wouters <paul.wouters@aiven.io> - 5.9.4-2
changelog:
  - Resolves rhbz#2018547 'strongswan restart' breaks ipsec started with strongswan-starter
  - Return to using tmpfiles, but extend to cover strongswan-starter service too
  - Cleanup old patches


author: Neal Gompa <ngompa@datto.com> - 5.9.4-4
changelog:
  - Disable TPM/TSS 1.2 support for F36+ / RHEL9+
  - Resolves: rhbz#2033299 Drop TPM/TSS 1.2 support (trousers)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.20-5
changelog:
  - Fix tsig-request verify (CVE-2020-8622)
  - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
  - Correct update-policy type subdomain to match documentation (CVE-2020-8624)
  - Include available test


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.25-1
changelog:
  - Update to 9.11.25
  - Require libcap from devel package
  - Fix crash on NTA recheck failure (#1893761)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.26-2
changelog:
  - Add DNSTAP support (#1854148), new dnstap-read tool
  - Add JSON support in statistics-channel (#1899257)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.26-4
changelog:
  - Possible assertion failure on DNAME processing (CVE-2021-25215)
  - Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)


author: Alejandro Sáez <asm@redhat.com> - 1.16.5-1
changelog:
  - Rebase to 1.16.5
  - Removes rhbz#1955032 patch, it's already included in this release
  - Removes rhbz#1956891 patch, it's already included in this release
  - Related: rhbz#1979677
  - Related: rhbz#1968738
  - Related: rhbz#1972420


author: David Benoit <dbenoit@redhat.com> - 1.16.7-1
changelog:
  - Rebase to Go 1.16.7
  - Resolves: rhbz#1994079
  - Add reject leading zeros patch
  - Resolves: rhbz#1993314


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-33
changelog:
  - Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
    concurrency issues
  - Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
    a client cert to backend server
  - Resolves: #1680118 - unorderly connection close when client attempts
    renegotiation


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-36
changelog:
  - Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
    mod_proxy_wstunnel
  - Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-37
changelog:
  - Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
    to be able to handle certs without matching private key


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-40
changelog:
  - Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
  - Resolves: #1937334 - SSLProtocol with based virtual hosts


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-41
changelog:
  - Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
  - Resolves: #1905613 - mod_ssl does not like valid certificate chain
  - Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
    usertrack
  - Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
  - Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
    dereference in parser
  - Resolves: #1934741 - Apache trademark update - new logo


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-42
changelog:
  - Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
    a crafted request uri-path
  - Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
    mod_session


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-43
changelog:
  - Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
    a crafted request uri-path


author: DJ Delorie <dj@redhat.com> - 0.7.91-27
changelog:
  - Fix aarch64 long parameters (via $r8) support.
  - Make system_call_params test compare more exactly.


author: Jens Petersen <petersen@redhat.com> - 0.8.6-1
changelog:
  - update to 0.8.6 (#1462722)
  - fixes manpage conflict (#1504831)
  - condition the gcc deprecation patch on epel < 7
  - clean up spec file


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-6
changelog:
  - Prevent spawning new daemons if outgoing operation exists (#1739117)
  - Force NT1 protocol version for workgroup support (#1739116)


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-7
changelog:
  - Remove libbluray support (#1747972)
  - CVE-2019-12448: Add query_info_on_read/write functionality (rhbz#1754506)
  - CVE-2019-12447: Use fsuid to ensure correct file ownership (rhbz#1752926)
  - CVE-2019-12449: Ensure correct ownership when moving to file:// uri (rhbz#1753972)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-16
changelog:
  - Add support for read-only sqlite rpmdb (#1938928)
  - Drop compat .decode() method from returned Py3 strings (#1840142)


author: Sérgio Basto <sergio@serjux.com> - 1.20.9-1
changelog:
  - Update to 1.20.9 (#1949336)
  - flex is not required anymore, doxygen is only needed if you call make doc
  - The dpkg-gettext.pl and controllib.pl are long obsolete, can be removed.
  - dpkg hasn't package install-info for a long time.
  - and others reviews


author: Sérgio Basto <sergio@serjux.com> - 1.20.9-4
changelog:
  - add %config(noreplace) to avoid clean up databases on upgrades and to be
    compliant with silverblue


author: <opensource@google.com>
changelog:
  - Change build rule to use a configure line more like '
    
    CFLAGS="${CFLAGS:--O2 -g -mieee}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -mieee}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -mieee -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -mieee -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS; 
    [ "1" = 1 ] && for i in $(find $(dirname ./configure) -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    [ "1" = 1 ] && [ x != "x-Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld" ] && 
        for i in $(find . -name ltmain.sh) ; do 
          /usr/bin/sed -i.backup -e 's~compiler_flags=$~compiler_flags="-Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld"~' $i 
        done ; 
    ./configure --build=sw_64-sunway-linux-gnu --host=sw_64-sunway-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	 \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info'
  - Change install to use DESTDIR instead of prefix for configure
  - Use wildcards for doc/ and lib/ directories


author: Paul Howarth <paul@city-fan.org> - 2.216-1
changelog:
  - Update to 2.216
    - Do not re-fold folded lines
  - Classify buildreqs by usage
  - Drop legacy Group: tag
  - Drop provides/obsoletes for perl-Email-Simple-Creator added in 2010
  - Make %files list more explicit
  - Simplify find command using -delete
  - Don't need to remove empty directories from the buildroot


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.22-13
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  - https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot


author: Paul Howarth <paul@city-fan.org> - 2009041301-27
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Drop redundant buildroot cleaning in %install section
    - Don't need to remove empty directories from the buildroot
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package upstream's documentation


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 2.16-1
changelog:
  - Update to HTML-Formatter-2.16.
  - Reflect upstream having switched to ExtUtils::MakeMaker.
  - Spec cleanup.


author: Tom Callaway <spot@fedoraproject.org> - 12.38-1
changelog:
  - update to 12.38 for CVE-2022-23935
    NOTE: 12.38 is not considered a "Stable" release and is not on CPAN


author: Paul Howarth <paul@city-fan.org> - 5.509-1
changelog:
  - Update to 5.509
    - Makefile.PL failed with no '.' in @INC (CPAN RT#120871)
    - Test t/Ref.t failed on Windows install (CPAN RT#118262)
    - MIME::Parser::parse_data() should check what it gets back (CPAN RT#119166)
    - Allow \r\n to be used as line-end delimiter when outputting MIME message
      (CPAN RT#119568)
  - Drop EL-5 support (should have happened years ago, dependencies not available)
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 3.008-5
changelog:
  - Add bootstrap for EPEL-8
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Drop redundant %{?perl_default_filter}
    - Use %{make_build} and %{make_install}
    - Drop redundant recoding of Mail::Message::Field manpage
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package README.md rather than README


author: Paul Howarth <paul@city-fan.org> - 3.004-3
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Drop redundant use of %{?perl_default_filter}
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package README.md rather than README


author: Paul Howarth <paul@city-fan.org> - 0.38-1
changelog:
  - Update to 0.38
    - Fix test prereqs; pod tests moved to xt/ (CPAN RT#122136, CPAN RT#122137)
    - Adopt new repo structure:
      - Delete MANIFEST and META.yml, and hereafter auto-generate them
      - Modernize .gitignore and MANIFEST.SKIP
      - The code says Perl licence but the LICENCE file says Artistic, so replace
        LICENCE file with LICENSE (so spelled), which says Perl
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 0.99-8
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Explicitly require perl(Geography::Countries)
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package README.md rather than README


author: Petr Pisar <ppisar@redhat.com> - 1.0.20-2
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.5.0-7
changelog:
  - Python 2 binary package renamed to python2-cherrypy
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.5.0-9
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Dan Radez <dradez@redhat.com> - 18.1.2-3
changelog:
  - Update to 18.1.2
  - Replaced Python2 package with Python 3 package
  - python3-cherrypy-18.1.2-2 is already built by package python3-cherrypy
    this release is to migrate python3-cherrypy into python-cherrypy


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.5-2
changelog:
  - Python 2 binary package renamed to python2-logutils
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.2-5
changelog:
  - Subpackage python2-pecan has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 19.0.0-5
changelog:
  - Subpackage python2-pyOpenSSL has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.0-4
changelog:
  - Subpackage python2-zc-lockfile has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Chris Leech <cleech@redhat.com> - 1.0.32-6
changelog:
  - remove fcoe from SUPPORTED_DRIVERS in /etc/sysconfig/fcoe
  - add qedf to SUPPORTED_DRIVERS in /etc/sysconf/fcoe
  - added upstream fix for large fcoe ctrl numbers


author: wuchangsheng <wuchangsheng2@huawei.com> - 1.0.1-40
changelog:
  - add dfx rcv_nxt info
    mbuf private cache line align
    send pkts index bug fix
    free recv pkts in main loop


author: Nikola Forró <nforro@redhat.com> - 8.5.0.0-1
changelog:
  - Upload new tarball
  - statx.2: add STATX_ATTR_DAX
    resolves: #1899552
  - resolv.conf.5: update information about search list and
    attempt to clarify domain/search interaction
    resolves: #1928160


author: Paul Howarth <paul@city-fan.org> - 1:0.17025-1
changelog:
  - Update to 0.17025
    - Fix 'use Error::Simple' overriding the $VERSION (CPAN RT#122713)
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Tomas Orsava <torsava@redhat.com> - 2.7.17-2
changelog:
  - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
  Resolves: rhbz#1856481


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-2
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in httplib.putrequest
  Resolves: rhbz#1883258


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-6
changelog:
  - Security fix for CVE-2020-27619: eval() call on content received via HTTP in the CJK codec tests
  Resolves: rhbz#1889886


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 3.0.0-1
changelog:
  - Update to latest version
  - Drop Python 2 subpackages
  - Stop setting a default backend (allow Matplotlib to choose automatically)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.2-12
changelog:
  - Python 2 binary package renamed to python2-prettytable
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-22
changelog:
  - Rebuild due to new version of FreeRDP
  - Fix an issue when RDP connection shows just black screen
  - Resolves: #1839744


author: Petr Menšík <pemensik@redhat.com> - 2.79-15
changelog:
  - Fix various issues in dnssec validation (CVE-2020-25681)
  - Accept responses only on correct sockets (CVE-2020-25684)
  - Use strong verification on queries (CVE-2020-25685)


author: Andrew Price <anprice@redhat.com> - 3.2.0-2
changelog:
  - fsck.gfs2: Don't check fs formats we don't recognise
  - libgfs2: Fix pointer cast byte order issue
    Resolves: rhbz#1622050


author: Andrew Price <anprice@redhat.com> - 3.2.0-9
changelog:
  - gfs2_jadd: Handle out-of-space issues
  - gfs2_jadd: error handling overhaul
    Resolves: rhbz#1833141
  - gfs2.5: Update some mentions of gfs2_tool
    Resolves: rhbz#1818983


author: Andrew Price <anprice@redhat.com> - 3.2.0-11
changelog:
  - gfs2_jadd: Use fallocate to preallocate journals
  - gfs2_jadd: Don't fsync after each block written
    Resolves: rhbz#1942434


author: Zoltan Fridrich <zfridric@redhat.com> - 2.26-5
changelog:
  - added CAP_PERFMON, CAP_BPF and CAP_CHECKPOINT_RESTORE capabilities
    resolves: rhbz#1946982 rhbz#1921576


author: Paul Howarth <paul@city-fan.org> - 1.5-1
changelog:
  - Update to 1.5
    - Work around global destruction order issue (CPAN RT#23568/68526)
  - This release by SHAY ⇒ update source URL
  - Drop %defattr, redundant since rpm 4.4
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot
  - Classify buildreqs by usage
  - Make %files list more explicit


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.1.ea
changelog:
  - Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
  - Resolves: rhbz#1966233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.2.ea
changelog:
  - Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
  - Fix name of javadoc debug packages in Obsoletes declarations and add version where it was removed.
  - Resolves: rhbz#1966233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b06 (EA)
  - Update release notes for 8u302-b06.
  - Resolves: rhbz#1967812


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b07 (EA)
  - Update release notes for 8u302-b07.
  - Resolves: rhbz#1967812


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b08 (EA)
  - Update release notes for 8u302-b08.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-07-20 @ 1pm PT.
  - Resolves: rhbz#1972395


author: Martin Balao <mbalao@redhat.com> - 1:1.8.0.302.b08-2
changelog:
  - Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
  - Resolves: rhbz#1971679


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-2
changelog:
  - Port FIPS system detection support to OpenJDK 8u
  - Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
  - Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
  - Resolves: rhbz#1971679


author: chunchao <chunchao@nfschina.com> [4.19.113-18.71.nfs]
changelog:
  - Fix: disable loongarch LS_DUP defaule.
  - Fix: change loongarch HAVE_LIVEPATCH to HAVE_LIVEPATCH_FTRACE.


author: chunchao <chunchao@nfschina.com> [4.19.113-18.72.nfs]
changelog:
  - Config sw for VHOST_VSOCK modules:
  - Modify VIRTIO_VSOCKETS=y to VIRTIO_VSOCKETS=m;
  - Modify VIRTIO_VSOCKETS_COMMON=y to VIRTIO_VSOCKETS_COMMON=m.


author: xunian <xunian@nfschina.com> [4.19.113-18.74.nfs]
changelog:
  - Config sw: add CIFS for samba.
  - 	CONFIG_CIFS=m
  -	CONFIG_CIFS_ALLOW_INSECURE_LEGACY=y
  -	CONFIG_CIFS_DEBUG=y
  - Config sw: kernel samepage merging support for ksm.service (CONFIG_KSM=y).


author: zhangjun <zhangjun2023@nfschina.com> [4.19.113-18.75.nfs]
changelog:
  - config sw: add NFT CONFIG for firewalld
  -  	CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_NETDEV=m
  -  	CONFIG_NFT_CHAIN_ROUTE_IPV6=m CONFIG_NFT_CHAIN_NAT_IPV6=m
  -  	CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_FIB_IPV6=m
  -  	CONFIG_NF_DUP_IPV6=m  CONFIG_NF_NAT_IPV6=m
  - config sw: support firewalld log no err


author: fenghui <fenghui@nfschina.com> [4.19.113-18.76.nfs]
changelog:
  - Support: misp openstack and guest network.
  - Config: openstack
  - 	CONFIG_NF_TABLES_INET=y
  -	CONFIG_NF_TPROXY_IPV6=m
  -	CONFIG_NF_TABLES_IPV6=y
  -	CONFIG_NFT_REJECT_IPV6=m
  -	CONFIG_NFT_REJECT_INET=m
  -	CONFIG_NF_REJECT_IPV6=m
  - config: guest network
  -	CONFIG_IP6_NF_RAW=m
  -	CONFIG_NF_NAT_IPV6=m


author: fenghui <fenghui@nfschina.com> [4.19.113-18.77.nfs]
changelog:
  - Support: Export task/process statistics through netlink
  - config:
  - 	CONFIG_TASKSTATS=y
  - 	CONFIG_TASK_DELAY_ACCT=y
  - 	CONFIG_TASK_XACCT=y
  - 	CONFIG_TASK_IO_ACCOUNTING=y


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.3-6
changelog:
  - Subpackage python2-pyroute2 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 1:1.14.3-5
changelog:
  - Switch runtime dependency of the python3-numpy-f2py package from
    python3-devel (that's now buildroot-only) to python3-libs-devel
  Resolves: rhbz#1610863


author: chaodong <chaodong@nfschina.com> - 1:1.14.3-10.1
changelog:
  - Add loongarch64,sw_64 support.
  - numpy-1.14.3-add-loongarch64-support.patch
  - numpy-1.14.3-add-sw-support.patch


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-3
changelog:
  - fix CVE-2020-10957 dovecot: malformed NOOP commands leads to DoS (#1840354)
  - fix CVE-2020-10958 dovecot: command followed by sufficient number of newlines
    leads to use-after-free (#1840357)
  - fix CVE-2020-10967 dovecot: sending mail with empty quoted localpart
    leads to DoS (#1840356)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-4
changelog:
  - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866756)
  - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866761)
  - fix CVE-2020-12674 crash due to assert in RPA implementation (#1866768)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-6
changelog:
  - fix mail storage block count parsing (#1894418)
  - MIME parser crashed when boundaries were wrong (#1888111)


author: Frank Ch. Eigler <fche@redhat.com> - 4.3-7
changelog:
  - Fix rhbz1857749 with rhel8.3 baseos patch
  - Fix rhbz1852021 with more complete rhel8.3 baseos patch


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-3
changelog:
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys
  - rhbz1873492 related: rhel8 kernel_is_locked_down detection


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-8
changelog:
  - CVE fixes for: CVE-2020-14345 (#1872391), CVE-2020-14346 (#1872395),
    CVE-2020-14361 (#1872402), CVE-2020-14362 (#1872409)


author: feifei <feifei@nfs-hlj.com> - 1.20.11-2.1
changelog:
  - add 0002-xorg-server-CVE-2023-0494.patch 
    add 0003-xorg-server-CVE-2022-46342.patch
    add 0004-xorg-server-CVE-2022-46343.patch
    add 0005-xorg-server-CVE-2022-46344.patch
    add 0006-xorg-server-CVE-2022-4283.patch
    add 0007-xorg-server-CVE-2022-46340.patch
    add 0008-xorg-server-CVE-2022-46341.patch


author: Olivier Fourdan <ofourdan@redhat.com> - 21.0.99.902-1
changelog:
  - xwayland 21.0.99.902
  - Remove xdmcp, udev, udev_kms build options
  - Stop overriding the vendor name, same as xorg-x11-server


author: Uri Lublin <uril@redhat.com> - 9.0-5
changelog:
  - More specific key accelerator description for cursor release
    Resolves: rhbz#1548371
  - Report detailed error when file transfer fails
    Resolves: rhbz#1753563
  - Update copyright year in "about ui"
    Resolves: rhbz#1848267
  - Show an error dialog upon vnc-error
    Resolves: rhbz#1448151
  - Fix warning by Coverity
    Resolves: rhbz#1876719


author: Cdos Support Team <support_os@cpu-os.ac.cn> - 1.1.13-m1.3
changelog:
  - 解决没有生成/var/nfs/license.db文件，造成注册日期随系统时间调整而顺延的问题.
  - Added: /etc/xdg/autostart/nfs-license-agent.desktop 
  - Patch02:	nfs-license-add-log-test-0002.patch
  - deleted /lib/systemd/system/license.service


author: Wen Liang <wenliang@redhat.com> - 1:1.32.0-1
changelog:
  - update to 1.32.0 release
  - veth: fix null error when deleting the device (rh #1915278)
  - veth: fix crash when deleting the device profile (rh #1915276)
  - firewall: add new "nftables" firewall-backend (rh #1548825)
  - DNS: fix lookup of hostname via DNS (rh #1970335)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.2-1
changelog:
  - update to 1.32.2 release
  - device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
  - docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
  - cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
  - daemon: performance improvements (rh #1847125)
  - dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
  - Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)


author: Gris Ge <fge@redhat.com> - 1:1.32.4-1
changelog:
  - Upgrade to 1.32.4 with fixes of:
  - nmcli: show DNS SEARCH field in device information. (rh #1852317)
  - device: avoid crash setting VPN config during unrealize. (rh #1912423)
  - core: send ARP announcements when there is carrier. (rh #1956793)
  - core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
  - core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
  - ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
  - cloud-setup: add support for Aliyun cloud. (rh #1823315)


author: Gris Ge <fge@redhat.com> - 1:1.32.6-1
changelog:
  - Upgrade to 1.32.6 release
  - core: fix adding stale local routes when address changes (rh #1979192)
  - dhcp: handle filename/bootfile_name DHCP option and write it to device state
    file for initrd/kickstart (rh #1979387)
  - initrd: add "ib.pkey=" command line option (rh #1805708)
  - core: introduce "keep-configuration" device option to forcefully activate a
    profile on start (rh #1934122)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.32.8-1
changelog:
  - Upgrade to 1.32.8 release
  - firewalld: configure zones on "Reloaded" signal (rh #1982403)
  - ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
  - core: fix wrong MTU for bridge interfaces (rh #1973536)
  - cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.10-1
changelog:
  - update to 1.32.10 release
  - nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
  - IP: fix the order of IP addresses during service restart (rh #1988751)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.32.10-3
changelog:
  - preserve the IPv6 multicast route added by kernel (rh #2004212)
  - cloud-setup: better handle other route configuration (rh #1977984)


author: Rex Dieter <rdieter@fedoraproject.org> - 2.0.14-7
changelog:
  - cleanup cmake usage, move to %build
  - %build: explicitly disable doc generation
  - kill hard-coded rpath
  - -libs: explicit soname so bumps aren't a surprise
  - use %license, %make_build, 'make install/fast'


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-5.20180224
changelog:
  - fix crash in parsing of terminfo use capability (CVE-2018-10754)
  - add gcc-c++ to build requirements


author: Mark Huth <mhuth@redhat.com> - 0.9.7-6
changelog:
  - Resolves: rhbz#1314606 - show progress with addattachment
  - Resolves: rhbz#1314607 - problem with addattachment -s switch


author: Pranita Ghole<pghole@redhat.com> - 0.10.1-1
changelog:
  - Resolves: rhbz#1670001 - redhat-support-tool -o option does not work (soscleaner)
  - Resolves: rhbz#1670369 - redhat-support-lib-python: Traceback on make_report from utils.reporthelper
  - Resolves: rhbz#1670044 - redhat-support-tool proxy does not work on rhel-8


author: Pranita Ghole<pghole@redhat.com> - 0.11.2-1
changelog:
  - Resolves: rhbz#1677257 - redhat-support-lib-python: AttributeError from utils/reporthelper.py no buf


author: Vikas Rathee <vrathee@redhat.com> - 0.9.10-1
changelog:
  - Resolves: rhbz#1342627 - List cases by group.
  - Resolves: rhbz#1379619 - Inform when http_proxy environment variable is used.


author: Pranita Ghole<pghole@redhat.com> - 0.11.2-2
changelog:
  - Resolves: rhbz#1685296 - redhat-support-tool env var http_proxy does not work with user and password
  - Resolves: rhbz#1685295 - [RFE][RHEL8] Include Reason in cases of failed proxy
  - Resolves: rhbz#1684321 - redhat-support-tool config debug <level>` fails with "ERROR: debug is not a valid configuration file option.


author: Pranita Ghole<pghole@redhat.com> - 0.11.3-2
changelog:
  - Resolves: rhbz#1882771 - redhat-support-tool: UnboundLocalError: local variable 'timer' referenced before assignment
  - Resolves: rhbz#1882772 - [RFE] Add functionality to generate and send sosreport after selecting the case.
  - Resolves: rhbz#1882773 - [RFE] Generate and upload sosreport to case from cli


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16
changelog:
  - 2004974 - CVE-2021-3796 vim: use-after-free in nv_replace() in normal.c [rhel-8.5.0]
  - 2004891 - CVE-2021-3778 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c [rhel-8.5.0]


author: zhangjun <zhangjun2023@nfschina.com> - 2:8.0.1763-17
changelog:
  - Fix CVE-2022-2206,CVE-2022-2207,CVE-2022-2210,
  - CVE-2021-3872,CVE-2021-4069,CVE-2022-0261,CVE-2022-0318,
  - CVE-2022-0359,CVE-2022-0361,CVE-2022-0392,CVE-2022-0413,
  - CVE-2022-2124,CVE-2022-2125,CVE-2022-2126,CVE-2022-2129,
  - CVE-2022-1616,CVE-2022-1620,CVE-2021-4192,CVE-2021-4193,
  - CVE-2021-4019,CVE-2021-3984


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2.0-1
changelog:
  - update to 1.2.0
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - include soname in file list
  - use license macro


author: chaodong <chaodong@nfschina.com> - 2.4.37-41.2
changelog:
  - Fix CVE-2021-39275, CVE-2021-34798
  - httpd-2.4.37-CVE-2021-39275.patch
  - httpd-2.4.37-CVE-2021-34798.patch


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-1
changelog:
  - new version 1.11.3
  - Resolves: #1633401 - CVE-2018-11763 mod_http2: httpd:  DoS for HTTP/2
    connections by continuous SETTINGS


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-3
changelog:
  - Resolves: #1744999 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745086 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
    headers leads to denial of service
  - Resolves: #1745154 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request for
    large response leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-1
changelog:
  - new version 1.15.7
  - Resolves: #1814236 - RFE: mod_http2 rebase 
  - Resolves: #1747289 - CVE-2019-10082 httpd:2.4/mod_http2: httpd: 
    read-after-free in h2 connection shutdown
  - Resolves: #1696099 - CVE-2019-0197 httpd:2.4/mod_http2: httpd: 
    mod_http2: possible crash on late upgrade
  - Resolves: #1696094 - CVE-2019-0196 httpd:2.4/mod_http2: httpd:
    mod_http2: read-after-free on a string compare
  - Resolves: #1677591 - CVE-2018-17189 httpd:2.4/mod_http2: httpd: 
    mod_http2: DoS via slow, unneeded request bodies


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-2
changelog:
  - Resolves: #1869073 - CVE-2020-9490 httpd:2.4/mod_http2: httpd: 
    Push diary crash on specifically crafted HTTP/2 header


author: Lubos Uhliarik <luhliari@redhat.com> - 1:2.0.8-8
changelog:
  - Resolves: #1832844 - mod_md does not work with ACME server that does not
    provide keyChange or revokeCert resources


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1
changelog:
  - new version 1.14.1
  - Resolves: #1647257 - CVE-2018-16845 nginx: Denial of service and
    memory disclosure via mp4 module
  - Resolves: #1647262 - CVE-2018-16844 nginx: Excessive CPU usage
    via flaw in HTTP/2 implementation
  - Resolves: #1647263 - CVE-2018-16843 nginx: Excessive memory consumption
    via flaw in HTTP/2 implementation


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-9
changelog:
  - Resolves: #1744811 - CVE-2019-9511 nginx:1.14/nginx: HTTP/2: large amount of
    data request leads to denial of service
  - Resolves: #1744325 - CVE-2019-9513 nginx:1.14/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745094 - CVE-2019-9516 nginx:1.14/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Paul Howarth <paul@city-fan.org> - 1.0.5-17
changelog:
  - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
  - Drop legacy BuildRoot: and Group: tags
  - Drop redundant explicit buildroot cleaning
  - Specify all explicitly-used build requirements
  - Use %license where possible
  - Drop %defattr, redundant since rpm 4.4


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-51
changelog:
  - Stop reloading kdump service on CPU hotplug event for FADump
  - fadump: improve fadump-howto.txt about remote dump target setup


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-52
changelog:
  - Write to `/var/lib/kdump` if $KDUMP_BOOTDIR not writable
  - Iterate /sys/bus/ccwgroup/devices to tell if we should set up rd.znet
  - mkdumprd: display the absolute path of dump location in the check_user_configured_target()


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-53
changelog:
  - check for invalid physical address of /proc/kcore when making ELF dumpfile
  - check for invalid physical address of /proc/kcore when finding max_paddr
  - fix format issue in find_online_znet_device
  - check the existence of /sys/bus/ccwgroup/devices before trying to find online network device
  - kdump-lib.sh: fix a warning in prepare_kdump_bootinfo()


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-54
changelog:
  - kdump/ppc64: rebuild initramfs image after migration
  - Check the existence of /sys/bus/ccwgroup/devices/*/online beforehand
  - kdump.sysconfig.s390: Remove "prot_virt" from kdump kernel cmdline


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.23-1
changelog:
  - Rebase to 10.3.23
  - Make conflicts between corresponding mariadb and mysql packages explicit
  - Get rid of the Conflicts macro, it was intended to mark conflicts with
    *upstream* packages
    Resolves: #1853159


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-1
changelog:
  - Rebase to 10.3.27
  - mariadb-debug_build.patch is no more needed, upstream did the changes:
    https://github.com/MariaDB/server/commit/31eaa2029f3c2a4f8e5609ce8b87682286238d9a#diff-32766783af7cac683980224d63c59929
    https://github.com/MariaDB/server/commit/23c6fb3e6231b8939331e2d9f157092f24ed8f4f#diff-78f3162f137407db5240950beb2bcd7c


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-2
changelog:
  - Disable building of the ed25519 client plugin.
    From now on it will be shipped by 'mariadb-connector-c' package


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-3
changelog:
  - Remove mariadb_rpl.h from includedir
    This file is shipped in mariadb-connector-c package
  - Require matching version of mariadb-connector-c package


author: Peter Robinson <pbrobinson@redhat.com> - 1.3.1-12
changelog:
  - Add the motd.d directories (empty) to silence warnings and to
    provide proper ownership for them (#1847501)


author: Iker Pedrosa <ipedrosa@redhat.com> 1.3.1-13
changelog:
  - pam_wheel: if getlogin fails fallback to PAM_RUSER: fixed malformed patch (#1866866)
  - pam_namespace: polyinstantiation refer to gdm doc (#1861841)


author: zhuyunfei <zhuyunfei@nfschina.com> [4.19.113-18.79.nfs]
changelog:
  - Add libperf-jvmti.so in sw_64
  - Support smzy feature from zhuanyong with ko module
    Include interface:
    smzy_selinux_audit_on、smzy_is_enable、smzy_avc_denied、smzy_avc_has_perm_noaudit

  - Disable 1394 support for control requirement
    config x86_64 :CONFIG_FIREWIRE=n 

  - Add AQTJ patches:
    kernel-4.19.113-ngac-kernel-key-module.patch
    kernel-4.19.113-ngac-kernel-key-pro.patch
    kernel-4.19.113-ngac-kernel-lsm-extend.patch
    kernel-4.19.113-ngac-kernel-privilege-proc.patch
    kernel-4.19.113-ngac-kernel-software-pro.patch
    kernel-4.19.113-ngac-kernel-software-vim-bugfix.patch
    kernel-4.19.113-ngac-kernel-support-multi-privilage.patch
    kernel-4.19.113-ngac-kernel-hook.patch
    kernel-4.19.113-ngac-kernel-add-nfssec-switch.patch
    kernel-4.19.113-ngac-spro-panic-fixbug.patch


author: fenghui <fenghui@nfschina.com> [4.19.113-18.80.nfs]
changelog:
  - Support: mips64 support FCoE Offload functionality over Chelsio \
  		T4-based 10Gb Converged Network Adapters
    Config: CONFIG_SCSI_CHELSIO_FCOE=m

  - Support: mips64 zram support wirteback
    Config: CONFIG_ZRAM_WRITEBACK=y


author: fenghui <fenghui@nfschina.com> [4.19.113-18.81.nfs]
changelog:
  - Support: Add dm-raid.ko to support lvcreate cmd.
  - Config: mips64 CONFIG_DM_RAID=m
  - Config: loongarch CONFIG_DM_RAID=m


author: fenghui <fenghui@nfschina.com> [4.19.113-18.83.nfs]
changelog:
  - Add: Newly added char drivers app-control.ko
  - Del: Delete "linux-firmware >=20150904-56.git6ebf5d57" dependent packages.
         Support for mini installation of JOS


author: Dong Chuanjian <chuanjian@nfschina.com> - 4.0-****.nfs4.1
changelog:
  - 修改"/etc/nfs-release"文件中的版本标识
  - 修改此软件包版本命名规则，去除之前的升级标识，以后有修改在dist信息后升级版本号，添加4.0标识
  - 去除"/etc/os-release"文件中的"BETA"标识


author: Dong Chuanjian <chuanjian@nfschina.com> - 4.0-****.nfs4.7
changelog:
  - add "if $USER==root" for performance.sh
  - add "update-batch-time" for nfs-autoupdate
  - add "RTM4-G310" for VERSION of os-release


author: Jeff Layton <jlayton@redhat.com> - 6.7-5
changelog:
  - more updates, switch to rst for manpages
  - update mount.cifs manpage to describe defaults better (BZ#1474539)


author: Sachin Prabhu <sprabhu@redhat.com> - 6.8-3
changelog:
  - Add manual gating tests
  - docs: cleanup rst formating
  - mount.cifs.rst: document new (no)handlecache mount option
  - manpage: update mount.cifs manpage with info about rdma option
  - checkopts: add python script to cross check mount options
  - mount.cifs.rst: document missing options, correct wrong ones
  - checkopts: report duplicated options in man page
  - mount.cifs.rst: more cleanups
  - mount.cifs.rst: document vers=3 mount option
  - mount.cifs.rst: document vers=3.02 mount option
  - cifs: Allow DNS resolver key to expire
  - mount.cifs: be more verbose and helpful regarding mount errors
  - Update mount.cifs with vers=default mount option and SMBv3.0.2
  - mount.cifs.rst: update vers=3.1.1 option description
  - getcifsacl: Do not go to parse_sec_desc if getxattr fails.
  - getcifsacl: Improve help usage and add -h option.
  - setcifsacl: fix adding ACE when owner sid in unexpected location
  - cifs.upcall: fix a compiler warning
  - mount.cifs Add various missing parms from the help text
  - mount.cifs: add more options to help message
  - mount.cifs: detect GMT format of snapshot version
  - Update man page for mount.cifs to add new options
  - mount.cifs.rst: mention kernel version for snapshots
  - Fix authors and maintainers


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-18
changelog:
  - http: send payload when (proxy) authentication is done (#1918692)
  - curl: Inferior OCSP verification (CVE-2020-8286)
  - libcurl: FTP wildcard stack overflow (CVE-2020-8285)
  - curl: trusting FTP PASV responses (CVE-2020-8284)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-19
changelog:
  - make `curl --head file://` work as expected (#1947493)
  - prevent automatic referer from leaking credentials (CVE-2021-22876)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-21
changelog:
  - fix TELNET stack contents disclosure again (CVE-2021-22925)
  - fix TELNET stack contents disclosure (CVE-2021-22898)
  - fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
  - disable metalink support to fix the following vulnerabilities
      CVE-2021-22923 - metalink download sends credentials
      CVE-2021-22922 - wrong content via metalink not discarded


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-22
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)


author: zhouchang <zhouchang@nfschina.com> - 7.61.1-22.3
changelog:
  - Fix CVE-2019-5436,CVE-2022-27781
  - 1002-curl-7.61.1-CVE-2019-5436.patch
  - 1003-curl-7.61.1-CVE-2022-27781.patch


author: ZhangPing <zhangping@nfs-hlj.com> - 7.6.1-22.5
changelog:
  - fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27776
  - add: 1004-curl-7.61.1-CVE-2022-22576.patch
  - add: 1005-curl-7.61.1-CVE-2022-27774-CVE-2022-27776.patch


author: ZhangPing <zhangping@nfs-hlj.com> - 2.9.1-4.1
changelog:
  - add: freetype-2.9.1-CVE-2022-27404.patch
  - add: freetype-2.9.1-CVE-2022-27405.patch 
  - add: freetype-2.9.1-CVE-2022-27406.patch


author: zhuyunfei <zhuyunfei@nfschina.com> [4.19.113-18.79.nfs]
changelog:
  - Support smzy feature from zhuanyong with ko module
    Include interface:
    smzy_selinux_audit_on、smzy_is_enable、smzy_avc_denied、smzy_avc_has_perm_noaudit

  - Disable 1394 support for control requirement
    config x86_64 :CONFIG_FIREWIRE=n

  - Add AQTJ patches:
    kernel-4.19.113-ngac-kernel-key-module.patch
    kernel-4.19.113-ngac-kernel-key-pro.patch
    kernel-4.19.113-ngac-kernel-lsm-extend.patch
    kernel-4.19.113-ngac-kernel-privilege-proc.patch
    kernel-4.19.113-ngac-kernel-software-pro.patch
    kernel-4.19.113-ngac-kernel-software-vim-bugfix.patch
    kernel-4.19.113-ngac-kernel-support-multi-privilage.patch
    kernel-4.19.113-ngac-kernel-hook.patch
    kernel-4.19.113-ngac-kernel-add-nfssec-switch.patch
    kernel-4.19.113-ngac-spro-panic-fixbug.patch


author: chunchao <chunchao@nfschina.com> [4.19.113-18.86.nfs]
changelog:
  - Fix: fs/btrfs allow btrfs_truncate_block() to fallback to nocow for data
  - upstream commitid: 6d4572a9d71d5fc2affee0258d8582d39859188c
  - Config: set CONFIG_IGB to m


author: yangminglei <minglei@nfschina.com> [4.19.113-18.87.nfs]
changelog:
  - Fix: CVE patches:
          kernel-CVE-2021-0920.patch
          kernel-CVE-2021-34981.patch
          kernel-CVE-2021-45486.patch
          kernel-CVE-2022-1789.patch
          kernel-CVE-2022-2586.patch
          kernel-CVE-2022-2588.patch
          kernel-CVE-2022-2639.patch
          kernel-CVE-2022-3061.patch
          kernel-CVE-2022-3239.patch
          kernel-CVE-2022-3545.patch
          kernel-CVE-2022-3586.patch
          kernel-CVE-2022-3594.patch
          kernel-CVE-2022-4378.patch
          kernel-CVE-2022-39842.patch
          kernel-CVE-2022-42896.patch
          kernel-CVE-2022-43750.patch
          kernel-CVE-2023-0266.patch
          kernel-CVE-2023-26545.patch


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-2
changelog:
  - Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
  - Using safe primes for FIPS DH self-test


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes bugs in s390x AES code.
  - Uses the first detected address family if IPv6 is not available
  - Reverts the changes in https://github.com/openssl/openssl/pull/13305
    as it introduces a regression if server has a DSA key pair, the handshake fails
    when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
    it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
    will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
    known - https://trac.nginx.org/nginx/ticket/2071#comment:1
    As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
    could early callback instead of servername callback.
  - Resolves: rhbz#1978214
  - Related: rhbz#1934534


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-5
changelog:
  - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#2005402


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Resolves: rhbz#2067145


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-7
changelog:
  - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
    Resolves: CVE-2022-2097
  - Update expired certificates used in the testsuite
    Resolves: rhbz#2100554
  - Fix CVE-2022-1292: openssl: c_rehash script allows command injection
    Resolves: rhbz#2090371
  - Fix CVE-2022-2068: the c_rehash script allows command injection
    Resolves: rhbz#2098278


author: feifei <feifei@nfs-hlj.com> - 1:1.1.1k-7.0.5
changelog:
  - add: openssl-1.1.1-CVE-2023-0215.patch
  - add: openssl-1.1.1-CVE-2022-4450.patch
  - add: openssl-1.1.1-CVE-2023-0286.patch


author: Peter Jones <pjones@redhat.com> - 0.112-25
changelog:
  - Preserve .py timestamp during install so .pyc/.pyo files have the same
    timestamp on all arches, preventing rpmdiff from complaining.
    Related: rhbz#1625388


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-3
changelog:
  RHEL 8.2.0 ERRATUM
  - added patch reverting rejecting expired certs by default
    resolves: rhbz#1782353
  - added patch silencing false errors on config.enabled statement
    resolves: rhbz#1659383


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-5
changelog:
  RHEL 8.3.0 ERRATUM
  - added qpid-proton as another source and enabled omamqp1 module
    in a separate sub-package with it statically linked
    resolves: rhbz#1713427
  - extended config.enabled patch to cover rest of the cases
    resolves: rhbz#1659383
  - added patch making json serialization thread-safe
    resolves: rhbz#1789675
  - added another patch for imfile state-files id
    resolves: rhbz#1793569
  - fixed typo in commend-out part of default rsyslog.conf


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-6
changelog:
  RHEL 8.3.0 ERRATUM
  - added patch preventing imfile crash when selinux blocks symlink
    access
    resolves: rhbz#1843994
  - fixed config-enabled patch
    resolves: rhbz#1659383


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-2
changelog:
  RHEL 8.5.0 ERRATUM
  - rebase to 8.2102.0
    resolves: rhbz#1932795
  - Enable openssl
    resolves: rhbz#1891458
  - EKU check for client cert on server side
    resolves: rhbz#1783348
  - Use GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1880434
  - Use librelp with openssl enabled
    resolves: rhbz#1795607
  - Close dir when fsync=on
    resolves: rhbz#1960536


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-3
changelog:
  - Priority field must have valid length
    resolves: rhbz#1866877
  - Allocate more memory on too large groups
    resolves: rhbz#1944718


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-5
changelog:
  - Do not exit when user/group can not be found
    resolves: rhbz#1984489
  - Remove abortOnIDResolution fail


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-5
changelog:
  - xwayland: Hold a pixmap reference in struct xwl_present_event
    Related: #1728684
  - glamor: Fix glamor_poly_fill_rect_gl xRectangle::width/height handling
    Resolves: #1740250


author: Lubomir Rintel <lkundrak@v3.sk> - 1.10.2-1
changelog:
  - Update to 1.10.2 release (rh #1543498)
  - Don't grab cdc_ether devices on Sierra QMI modems (rh #1712031)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 12.10.0-17
changelog:
  - Python 2 binary package renamed to python2-appindicator
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Lubomir Rintel <lkundrak@v3.sk> - 1.8.26-2
changelog:
  - Fixes suggested in review by Matthew Krupcale (#1763285):
  - Add gcc BR
  - Fixed the libnma-gtk4 conditional
  - Made dependencies arch-specific where relevant
  - Dropped obsolete macros
  - Install license file with libnma-gtk4


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: bzhaoop<bzhaojyathousandy@gmail.com> -4:10.5.15-1
changelog:
  - Bump to 10.5.15
  - For resolving CVEs:
  - CVE-2022-24048
  - CVE-2022-24052
  - CVE-2022-24050
  - CVE-2022-24051
  - CVE-2021-46668
  - CVE-2021-46658


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.15-2
changelog:
  - Fix the systemd service issue about the env variable.
  - Apply the patches from old branch.
  - Adaption the cmake version and integrate into the spec file.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.16-1
changelog:
  - Bump to 10.5.16 for resolving CVEs below
  - CVE-2022-27385
  - CVE-2022-27382
  - CVE-2022-27451
  - CVE-2022-27457
  - CVE-2022-27446
  - CVE-2022-27455
  - CVE-2022-27444
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387
  - And we fit the latest packages for the new mariadb release, such as errmsg package.


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-35
changelog:
  - 1825254 - CVE-2020-3898 cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-36
changelog:
  - 1838449 - ipp/socket backends connect to turned off device for eternity (contimeout is not applied)
  - 1689207 - Add failover backend
  - 1833516 - DirtyCleanInterval ignored if there are open client connections


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-39
changelog:
  - 1941437 - cupsd doesn't log job ids when logging into journal
  - 1782216 - Print queue is paused after ipp backend ends with CUPS_BACKEND_STOP
  - 1938384 - CUPS doesn't start if sssd starts after cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-40
changelog:
  - 1955964 - PreserveJobHistory doesn't work with seconds
  - 1927452 - CVE-2020-10001 cups: access to uninitialized buffer in ipp.c [rhel-8]


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-4
changelog:
  - CVE-2021-29458 exiv2: out-of-bounds read in Exiv2::Internal::CrwMap::encode
    Resolves: bz#1953758

  - CVE-2021-29457 exiv2: heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1953772


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-5
changelog:
  - CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1954065

  - CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1955014


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-6
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964182

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964188


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-3
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993282

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993245


author: Jakub Martisko <jamartis@redhat.com> - 1.9-7
changelog:
  - Fix FTBFS bug (gnulib problems)
  - more details: https://lists.gnu.org/r/bug-gnulib/2018-03/msg00000.html
    Resolves 1604303


author: zengyi <zengyi@nfschina.com> [4.19.113-18.89.nfs]
changelog:
  -kernel-CVE-2022-3028.patch
  -kernel-CVE-2022-3524.patch
  -kernel-CVE-2022-3565.patch
  -kernel-CVE-2022-3567.patch
  -kernel-CVE-2022-3621.patch
  -kernel-CVE-2022-3635.patch
  -kernel-CVE-2022-3649.patch
  -kernel-CVE-2022-42895.patch


author: yangminglei <minglei@nfschina.com> [4.19.113-18.90.nfs]
changelog:
  - backport nvme double reset prevention.
  - fix CVE patches:
      kernel-CVE-2022-1184.patch
      kernel-CVE-2022-2977.patch
      kernel-CVE-2022-3169.patch
      kernel-CVE-2023-1281.patch


author: wangxi <wangxi@nfschina.com> [4.19.113-18.91.nfs]
changelog:
  - fix CVE patches:
      kernel-CVE-2022-2663.patch
      kernel-CVE-2022-3303.patch
      kernel-CVE-2022-36280.patch
      kernel-CVE-2022-41848.patch
      kernel-CVE-2022-41850.patch


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.3-3
changelog:
  - Allow for the tablet mode quirk to apply to touchpads (#1664225)
  - Add a quirk for the Asus VivoBook Flip to keep the
    keyboard and touchpad working in tablet mode


author: Nikola Forró <nforro@redhat.com> - 4.0.9-19
changelog:
  - Fix CVE-2020-35521 (#1945539)
  - Fix CVE-2020-35522 (#1945555)
  - Fix CVE-2020-35523 (#1945542)
  - Fix CVE-2020-35524 (#1945546)


author: Steve Dickson <steved@redhat.com> 1.1.4-4
changelog:
  - Enable gating using reverse dependency testing of nfs-utils (bz 1681965)
  - Updated the URL (bz 1638671)
  - Fix EOF detection on non-blocking socket (bz 1641875)


author: Steve Dickson <steved@redhat.com> 1.1.4-5
changelog:
  - blacklist: Add a few more well known ports (bz 1854147)
  - Disallow calling auth_refresh from clnt_call with RPCSEC_GSS (bz 1934866)


author: Petr Pisar <ppisar@redhat.com> - 0.9.11-9
changelog:
  - Fix CVE-2018-15127 (Heap out-of-bounds write in
    rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662997)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 0.9.11-16
changelog:
  - Fix CVE-2019-20839
    Resolves: #1851032
  - Fix CVE-2018-21247
    Resolves: #1852516
  - Fix CVE-2020-14405
    Resolves: #1860527
  - Fix CVE-2020-14397
    Resolves: #1861152


author: zhouchang <zhouchang@nfschina.com> - 1:1.1.1k-7.0.8
changelog:
  - Fix CVE-2023-0464,CVE-2023-0465,CVE-2023-3817
  - add: openssl-1.1.1-CVE-2023-0464.patch
  - add: openssl-1.1.1-CVE-2023-0465.patch
  - add: openssl-1.1.1-CVE-2023-3817.patch


author: Jan Rybar <jrybar@redhat.com> - 0.115-7
changelog:
  - pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
  - Mitigation of regression caused by fix of CVE-2018-19788
  - Resolves: rhbz#1693781
  - Resolves: rhbz#1693814


author: Filip Januš <fjanus@redhat.com> - 10.19-2
changelog:
  - Add missing files into file section of server package
    postgresql-setup v8.6 newly provides postgresql-upgrade


author: Filip Januš <fjanus@redhat.com> - 10.21-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 10.21
  - Release notes: https://www.postgresql.org/docs/release/10.21/


author: Filip Januš <fjanus@redhat.com> - 10.21-2
changelog:
  - Resolves: CVE-2022-1552
  - Release bump due to wrongly reported CVE of libpq
    Build after reverted changes in libpq package


author: chaodong <chaodong@nfschina.com> - 10.21-2.0.1.1
changelog:
  - Disable plperl on loongarch64.
  - Support sw_64; Disable runselftest,spinlocks on sw_64.
  - postgresql-10.21-Support-sw_64.patch


author: Matthias Runge <mrunge@redhat.com> - 2.2.3-1
changelog:
  - fix CVE-2019-12781 Incorrect HTTP detection with reverse-proxy connecting
    via HTTPS (rhbz#1726014)


author: Matthias Runge <mrunge@redhat.com> - 2.2.4-1
changelog:
  - fix CVE-2019-14235 (rhbz#1735784)
  - fix CVE-2019-14234 (rhbz#1735780)
  - fix CVE-2019-14233 (rhbz#1735775)
  - fix CVE-2019-14232 (rhbz#1735771)


author: Miro Hrončok <mhroncok@redhat.com> - 2.2.13-1
changelog:
  - Update to 2.2.13
  - Security fix for CVE-2020-7471 (rhbz#1798516)
  - Security fix for CVE-2020-9402 (rhbz#1810093)
  - Security fix for CVE-2020-13254 (rhbz#1843617)
  - Security fix for CVE-2020-13596 (rhbz#1843627)


author: Lubos Uhliarik <luhliari@redhat.com> - 4.6.4-4
changelog:
  - Resolves: #1779705 - python3-mod_wsgi: Remove the Provides and Obsoletes for
    the name `mod_wsgi`


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-14
changelog:
  - Fixes for CVE-2021-25290, CVE-2021-25292, CVE-2021-25293, CVE-2021-27921
  CVE-2021-27922, and CVE-2021-27923
  Resolves: rhbz#1934685 rhbz#1934699 rhbz#1934705 rhbz#1935384 rhbz#1935396 rhbz#1935401


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-15
changelog:
  - Fixes for CVE-2021-25288, CVE-2021-25287, CVE-2021-28675, CVE-2021-28676,
  CVE-2021-28677 and CVE-2021-28678
  Resolves: rhbz#1958231, rhbz#1958226, rhbz#1958240, rhbz#1958252, rhbz#1958257, rhbz#1958263


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-7
changelog:
  - Add upstream patch to solve build-time warning
  - Move patches to dist-git
  - Resolves: rhbz#1639348


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-12
changelog:
  - Remove KSK-2010 from configuration files
  - Resolves: rhbz#1665502
  - Replace legacy directory /var/run/ with /run
  - Resolves: rhbz#1766463
  - Resolves: rhbz#1805978
  - Fix memory leak when DNS over TLS forwarding is configured
  - Resolves: rhbz#1819870


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-13
changelog:
  - Fix two previous patches and add missing patch lines to %prep
  - Fix amplifying an incoming query into a large number of queries directed to a target
  - Resolves: rhbz#1839178 (CVE-2020-12662)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-14
changelog:
  - Fix unbound-1.7.3-amplifying-an-incoming-query.patch patch
  - Resolves: rhbz#1839178 (CVE-2020-12662)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-15
changelog:
  - Fix SPEC file to not check md5 mtime and size of /var/lib/unbound/root.key
  - Resolves: rhbz#1714175
  - Use system-wide crypto policy setting (PROFILE=SYSTEM) instead of custom setting
  - Resolves: rhbz#1842837
  - Enable additional logging in unbound
  - Resolves: rhbz#1850460
  - security hardening from x41 report
  - Resolves: rhbz#1859933
  - symbolic link traversal when writing PID file
  - Resolves: rhbz#1899058


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-16
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1922448


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-17
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1830625


author: Radovan Sroka <rsroka@redhat.com> - 1.8.25-6
changelog:
  - RHEL 8.1 ERRATUM
  - Fixed The LDAP backend which is not properly parsing sudoOptions,
    resulting in selinux roles not being applied
  Resolves: rhbz#1738326


author: Radovan Sroka <rsroka@redhat.com> - 1.8.28p1-1
changelog:
  - RHEL 8.2 ERRATUM
  - rebase to 1.8.28p1
  Resolves: rhbz#1733961
  - fixed man page for always_set_home
  Resolves: rhbz#1576880
  - sudo does not work with notbefore/after
  Resolves: rhbz#1679508
  - NOTBEFORE showing value of sudoNotAfter Ldap attribute
  Resolves: rhbz#1715516
  - CVE-2019-14287 sudo
  - Privilege escalation via 'Runas' specification with 'ALL' keyword
  Resolves: rhbz#1760697


author: Radovan Sroka <rsroka@redhat.com> - 1.8.29-7
changelog:
  - RHEL 8.4 ERRATUM
  - CVE-2021-3156
  Resolves: rhbz#1917734
  - CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhzb#1916434
  - CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1917038
  - updated upstream url
  Resolves: rhbz#1923825


author: RAdovan Sroka <rsroka@redhat.com> - 1.8.29-7.1
changelog:
  RHEL 8.4.0 ZSTREAM ERRATUM
  - Make sure SIGCHLD is not ignored when sudo is executed
  Resolves: rhbz#2015136


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 1.2.6.3-1
changelog:
  - update to 1.2.6.3
  - add fixes for php >= 8.0 (patches from Patrick Monnerat <patrick@monnerat.net>)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-9.el8
changelog:
  - ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900892]
  - ci-Revert-ssh_util-handle-non-default-AuthorizedKeysFil.patch [bz#1919972]
  - Resolves: bz#1900892
    ([Azure] Update existing user password RHEL8x)
  - Resolves: bz#1919972
    ([RHEL-8.4] ssh keys can be shared across users giving potential root access)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8
changelog:
  - ci-fix-a-typo-in-man-page-cloud-init.1-752.patch [bz#1913127]
  - Resolves: bz#1913127
    (A typo in cloud-init man page)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-2
changelog:
  - ci-rhel-cloud.cfg-remove-ssh_genkeytypes-in-settings.py.patch [bz#1957532]
  - ci-cloud-init.spec.template-update-systemd_postun-param.patch [bz#1952089]
  - Resolves: bz#1957532
    ([cloud-init] From RHEL 82+ cloud-init no longer displays sshd keys fingerprints from instance launched from a backup image)
  - Resolves: bz#1952089
    (cloud-init brew build fails on Fedora 33)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-3
changelog:
  - ci-write-passwords-only-to-serial-console-lock-down-clo.patch [bz#1945891]
  - Resolves: bz#1945891
    (CVE-2021-3429 cloud-init: randomly generated passwords logged in clear-text to world-readable file [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-4
changelog:
  - ci-ssh-util-allow-cloudinit-to-merge-all-ssh-keys-into-.patch [bz#1862967]
  - Resolves: bz#1862967
    ([cloud-init]Customize ssh AuthorizedKeysFile causes login failure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-5
changelog:
  - ci-Add-dhcp-client-as-a-dependency.patch [bz#1977385]
  - Resolves: bz#1977385
    ([Azure][RHEL-8] cloud-init must require dhcp-client on Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-6
changelog:
  - ci-Stop-copying-ssh-system-keys-and-check-folder-permis.patch [bz#1862967]
  - Resolves: bz#1862967
    ([cloud-init]Customize ssh AuthorizedKeysFile causes login failure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-7
changelog:
  - ci-Fix-home-permissions-modified-by-ssh-module-SC-338-9.patch [bz#1995840]
  - Resolves: bz#1995840
    ([cloudinit]  Fix home permissions modified by ssh module)


author: lidongyue <dongyue@nfschina.com> - 7.6.1-22.6
changelog:
  - fix CVE-2023-28320 CVE-2023-28321 CVE-2023-28322
  - add: 1006-curl-7.61.1-CVE-2023-28320.patch
  - add: 1007-curl-7.61.1-CVE-2023-28321.patch
  - add: 1008-curl-7.61.1-CVE-2023-28322.patch


author: zhouchang <zhouchang@nfschina.com> - 2.4.37-41.3
changelog:
  - Fix CVE-2022-26377,CVE-2022-28614,CVE-2022-28615,CVE-2022-29404，CVE-2022-30522，CVE-2022-30556，CVE-2022-31813
  - httpd-2.4.37-CVE-2022-26377.patch
  - httpd-2.4.37-CVE-2022-28614.patch
  - httpd-2.4.37-CVE-2022-28615.patch
  - httpd-2.4.37-CVE-2022-29404.patch
  - httpd-2.4.37-CVE-2022-30522.patch
  - httpd-2.4.37-CVE-2022-30556.patch
  - httpd-2.4.37-CVE-2022-31813.patch


author: lidongyue <dongyue@nfschina.com> - 2.4.37-41.6
changelog:
  - Fix CVE-2023-25690 CVE-2021-33193 CVE-2022-36760 CVE-2023-27522 CVE-2021-36160 CVE-2020-11993
  - httpd-2.4.37-CVE-2023-25690.patch
  - httpd-2.4.37-CVE-2021-33193.patch 
  - httpd-2.4.37-CVE-2022-36760.patch
  - httpd-2.4.37-CVE-2023-27522-CVE-2021-36160.patch
  - httpd-2.4.37-CVE-2020-11993.patch


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Remi Collet <rcollet@redhat.com> - 6.0.9-4
changelog:
  - fix lua scripts can overflow the heap-based Lua stack
    CVE-2021-32626
  - fix integer overflow issue with Streams
    CVE-2021-32627
  - fix integer overflow bug in the ziplist data structure
    CVE-2021-32628
  - fix integer overflow issue with intsets
    CVE-2021-32687
  - fix integer overflow issue with strings
    CVE-2021-41099


author: Jan Macku <jamacku@redhat.com> - 239-47
changelog:
  - systemd-binfmt: Add safeguard in triggers (#1787144)
  - spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
  - spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
  - spec: Disable libiptc support (#1817265)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-48
changelog:
  - cgroup: Also set io.bfq.weight (#1927290)
  - seccomp: allow turning off of seccomp filtering via env var (#1916835)
  - meson: remove strange dep that causes meson to enter infinite loop (#1970860)
  - copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
  - core: Hide "Deactivated successfully" message (#1954802)
  - util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
  - initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
  - initrd: do a debug log if failed to detect rootfs type (#1959339)
  - initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
  - units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
  - units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
  - units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
  - user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
  - shared/install: Preserve escape characters for escaped unit names (#1952686)
  - basic/virt: Detect PowerVM hypervisor (#1937989)
  - man: document differences in clean exit status for Type=oneshot (#1940078)
  - busctl: add a timestamp to the output of the busctl monitor command (#1909214)
  - basic/cap-list: parse/print numerical capabilities (#1946943)
  - shared/mount-util: convert to libmount (#1885143)
  - mount-util: bind_remount: avoid calling statvfs (#1885143)
  - mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
  - test-install-root: create referenced targets (#1835351)
  - install: warn if WantedBy targets don't exist (#1835351)
  - test-install-root: add test for unknown WantedBy= target (#1835351)
  - ceph is a network filesystem (#1952013)
  - sysctl: set kernel.core_pipe_limit=16 (#1949729)
  - core: don't drop timer expired but not yet processed when system date is changed (#1899402)
  - core: Detect initial timer state from serialized data (#1899402)
  - rc-local: order after network-online.target (#1934028)
  - set core ulimit to 0 like on RHEL-7 (#1905582)
  - test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-49
changelog:
  - remove a left-over break (#1970860)
  - basic/unit-name: do not use strdupa() on a path (#1974700)
  - sd-event: change ordering of pending/ratelimited events (#1968528)
  - sd-event: drop unnecessary "else" (#1968528)
  - sd-event: use CMP() macro (#1968528)
  - sd-event: use usec_add() (#1968528)
  - sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
  - sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
  - ci: run unit tests on z-stream branches as well (#1970860)
  - ci: drop forgotten Travis references (#1934504)
  - ci: run unit tests on CentOS 8 Stream as well (#1934504)
  - ci: add missing test dependencies (#1934504)
  - meson: bump timeout for test-udev to 180s (#1934504)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-50
changelog:
  - Added option --check-inhibitors for non-tty usage (#1269726)
  - logind: Introduce RebootWithFlags and others (#1269726)
  - logind: add …WithFlags methods to policy (#1269726)
  - logind: simplify flags handling a bit (#1269726)
  - Update link to RHEL documentation (#1982584)
  - Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
  - shared/seccomp-util: address family filtering is broken on ppc (#1982650)
  - logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
  - logind: fix serialization/deserialization of user's "display session" (#1642460)
  - logind: turn of stdio locking when writing session files too (#1642460)
  - units: set StopWhenUnneeded= for the user slice units too (#1642460)
  - units: improve Description= string a bit (#1642460)
  - logind: improve logging in manager_connect_console() (#1642460)
  - logind: save/restore User object's "stopping" field during restarts (#1642460)
  - logind: correct bad clean-up path (#1642460)
  - logind: fix bad error propagation (#1642460)
  - logind: never elect a session that is stopping as display (#1642460)
  - logind: introduce little helper that checks whether a session is ready (#1642460)
  - logind: propagate session stop errors (#1642460)
  - logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
  - logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
  - logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
  - logind: improve error propagation of user_check_linger_file() (#1642460)
  - logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
  - pam_systemd: simplify code which with we set environment variables (#1642460)
  - logind: validate /run/user/1000 before we set it (#1642460)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-51
changelog:
  - define newly needed constants (#1850986)
  - sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
  - sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
  - sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
  - test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
  - util: introduce ifname_valid_full() (#1850986)
  - rename function (#1850986)
  - udev: support AlternativeName= setting in .link file (#1850986)
  - network: make Name= in [Match] support alternative names of interfaces (#1850986)
  - udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
  - udev: do not fail if kernel does not support alternative names (#1850986)
  - udev: introduce AlternativeNamesPolicy= setting (#1850986)
  - network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
  - random-util: call initialize_srand() after fork() (#1850986)
  - sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
  - udev: sort alternative names (#1850986)
  - netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
  - netlink: do not fail when new interface name is already used as an alternative name (#1850986)
  - udev: do not try to reassign alternative names (#1850986)
  - Fix LGTM build (#1850986)
  - sd-hwdb: allow empty properties (#1930568)
  - Update hwdb (#1930568)


author: zengyi <zengyi@nfschina.com> - 2:8.0.1763-17.3
changelog:
  -vim-8.0-CVE-2023-4735.patch
  -vim-8.0-CVE-2023-4736.patch
  -vim-8.0-CVE-2023-4751.patch
  -vim-8.0-CVE-2023-4781.patch


author: Michal Ruprich <mruprich@redhat.com> - 3.2.5-1
changelog:
  - New version 3.2.5
  - Resolves: #2115430 - remote arbitrary files write inside the directories of connecting peers
  - Fix for CVE-2022-37434


author: Michal Ruprich <mruprich@redhat.com> - 3.2.6-2
changelog:
  - Resolves: #2128682 - rsync fail with "ERROR: rejecting unrequested file-list name..." depend of parameters order


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.5.6-1
changelog:
  - Update to v12.5.6 (#2059133)
  - Build position independent executables
  - Use systemd-rpm-macros
     - See https://docs.fedoraproject.org/en-US/packaging-guidelines/Scriptlets/#_scriptlets


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.2-1
changelog:
  - Update to v12.7.2 (rhbz#2165400)
  - Use SPDX license format
  - Modernize the spec file according to the current packaging guidelines


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.4-1
changelog:
  - Update to v12.7.4 (rhbz#2216900)
  - CVE-2023-33204 - check_overflow() function can work incorrectly that lead to an overflow


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.3-2
changelog:
  - Correct License tag (command line tool is GPLv2+)
  - Adjust Source tag to get a more descriptive tarfile name


author: Daiki Ueno <dueno@redhat.com> - 3.6.14-7
changelog:
  - Increase DH key bits to >= 2048 in self-tests (#1879506)
  - Implement self-tests for KDF and CMAC (#1890870)
  - Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)


author: Daiki Ueno <dueno@redhat.com> - 3.6.16-1
changelog:
  - Update to upstream 3.6.16 release (#1956783)
  - Fix potential use-after-free in key_share handling (#1927597)
  - Fix potential use-after-free in pre_shared_key handling (#1927593)
  - Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
  - Fix cert expiration issue in tests (#1908110)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.7.4-1
changelog:
  - Update to version 0.7.4
  - Enable runtime detection of sse2/avx2/avx512 on intel architectures
  - Fix compiler warning for 32 bit architectures


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.8.0-1
changelog:
  - Update to version 0.8.0
  - Drop patches xxhash-compiler-warning-32-bit.patch (accepted upstream)
    and xxhash-pkgconfig.patch (issue fixed upstream)
  - Fix empty version in .pc file


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.8.1-1
changelog:
  - Update to version 0.8.1
  - Drop patch xxhash-pkgconfig-version.patch (accepted upstream)
  - Fix compilation on RHEL 7 ppc64le (gcc 4.8)
  - The x86 dispatch code now enables sse2 and avx2 separately, it can now use
    sse2 on EPEL 7 without trying to use avx2 which is not supported by gcc 4.8
  - Add documentation package - doxygen mark-up was added


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-9
changelog:
  - do not mistake a regular user process for a namespaced one (#1788696)
  - add HOME_MODE support in login.defs (#1777718)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-12
changelog:
  - lib/sssd: redirect warning message to file (#1749001)
  - useradd: clarify valid usernames/groupnames (#1869432)
  - login.defs: link login specific information to its own package (#1804766)


author: Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
changelog:
  - Added some linker hardening flags to pass annocheck
    Related: rhbz#2031802

    * Tue Dec 14 2021 Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
  - Added gating
    Related: rhbz#2031794


author: Michael Petlan <mpetlan@redhat.com> - 1.2.0-2
changelog:
  - Update to upstream 1.2.0 -- fix opencsd_tag
    Related: rhbz#2041578

    * Fri Jan 21 2022 Michael Petlan <mpetlan@redhat.com> - 1.2.0-1
  - Update to upstream 1.2.0
    Related: rhbz#2041578


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-9
changelog:
  - Add 0060-kpartx-free-loop-device-after-listing-partitions.patch
    * Fixes bz #1925490
  - Add 0061-RH-fix-find_multipaths-in-mpathconf.patch
    * Fixes bz #1921651
  - Resolves: bz #1921651, #1925490


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-11
changelog:
  - Add 0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
    * Fall back to WWID names instead of removing existing device
  - Add 0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
    * make sure to choose a user_friendly_name that isn't in use
    * Fixes bz #1937832
  - Add alias_clash CI test
  - Remove unused multipath.conf
  - Resolves: bz #1937832


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-12
changelog:
  - Add 0064-libmultipath-check-udev_device_get_-return-value-to-.patch
    * Fixes bz #1946940
  - Resolves: bz #1946940


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-13
changelog:
  - Add 0065-libmultipath-cleanup-code-to-strip-wwid-trailing-spa.patch
  - Add 0066-multipathd-add-recheck_wwid-option-to-verify-the-pat.patch
  - Add 0067-libmultipath-avoid-infinite-loop-with-bad-vpd-page-8.patch
  - Add 0068-libmultipath-fix-priorities-in-parse_vpd_pg83.patch
  - Add 0069-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
  - Add 0070-multipathd-improve-getting-parent-udevice-in-rescan_.patch
  - Add 0071-multipathd-don-t-trigger-uevent-for-partitions-on-ww.patch
    * add recheck_wwid option
    * Fixes bz #1907904
  - Resolves: bz #1907904


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-17
changelog:
  - Add 0074-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
    * Fixes bz #1984723
  - Add 0075-multipath-print-warning-if-multipathd-is-not-running.patch
    * Fixes bz #1973592
  - Add 0076-multipathd-don-t-access-path-if-it-was-deleted.patch
    * Found by coverity
  - Resolves: bz #1973592, #1984723


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Patsy Griffin <patsy@redhat.com> - 2022b-1
changelog:
  - Rebase to tzdata-2022b
    - Chile transitions to DST on 2022-09-11, not 2022-09-04
    - 'make install' now defaults LOCALTIME to Factory rather than GMT
    - More zones that are the same since 1970 have been moved to backzone.
    - Include patch for awk workaround.


author: Patsy Griffin <patsy@redhat.com> - 2022c-1
changelog:
  - Rebase to tzdata-2022c - supersedes tzdata-2022b
    - Add a work-around for an awk bug in FreeBSD, macOS, etc.
    - Improve tzselect with respect to intercontinental Zones.


author: Patsy Griffin <patsy@redhat.com> - 2022f-1
changelog:
  - Rebase to tzdata-2022f
    - Mexico will stop observing DST except near the US border.
    - Chihuahua moved to -06 year round starting on 2022-10-30.
    - Fiji no longer observes DST.


author: Patsy Griffin <patsy@redhat.com> - 2022g-1
changelog:
  - Rebase to tzdata-2022g
    - The northern edge of the Mexican state of Chihuahua will
      change time zone to agree with nearby US locations on
      2022-11-30.
    - Added a new Zone America/Ciudad_Juarez that splits from
      America/Ojinaga.


author: Patsy Griffin <patsy@redhat.com> - 2023a-1
changelog:
  - Rebase to tzdata-2023a
    - Egypt reintroduced DST, from April through October.
    - Morocco springs forward April 23, not April 30.
    - Palestine delayed the start of DST this year.


author: yangminglei <minglei@nfschina.com> [4.19.113-18.99.nfs]
changelog:
  - fix CVE-2022-21123, CVE-2022-21125, CVE-2022-21166
  - backport the following patches:
  x86/cpu: Add a steppings field to struct x86_cpu_id
  x86/cpu: Add 'table' argument to cpu_matches()
  x86/speculation: Add Special Register Buffer Data Sampling (SRBDS)
  x86/speculation: Add SRBDS vulnerability and mitigation documentation
  x86/speculation: Add Ivy Bridge to affected list
  cpu/speculation: Add prototype for cpu_show_srbds()
  Documentation: Add documentation for Processor MMIO Stale Data
  x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
  x86/speculation: Add a common function for MD_CLEAR mitigation update
  x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
  x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
  x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
  x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale
  x86/speculation/srbds: Update SRBDS mitigation selection
  x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
  KVM: x86/speculation: Disable Fill buffer clear within guests
  - Add Intel CPU models Lakefield, Alder Lake and Rocket Lake etc.


author: fenghui <fenghui@nfschina.com> [4.19.113-18.102.nfs]
changelog:
  - fix 66286:
  	fix sw cpufreq. Add SW64_CPUFREQ in cpufreq/Makefile.
  	Error deleting SW64_CPUFREQ in loongarch-3C500-support.patch file.


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.0.0
changelog:
  - remove empty conf dir when uninstall keentune-bench
  - fix bug: can not running in alinux2 and centos7
  - change modify codeup address to gitee
  - add keentune to systemd
  - use 'MulanPSLv2' macro
  - update license to MulanPSLv2
  - Initial KeenTune-bench


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com>- 1.0.1
changelog:
  - Supporting of multiple target tuning
  - Remove version limitation of tornado
  - Fix some user experience issues


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.1.0-1
changelog:
  - fix bug: update version to 1.1.0 in setup.py script.
  - refactor tornado module: replace await by threadpool
  - fix other bugs


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.3.0-0
changelog:
  - update config items in bench.conf
  - return error message if benchmark script return an invalid data


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.0.0
changelog:
  - remove empty conf dir when uninstall keentune-brain
  - fix bug: can not running in alinux2 and centos7
  - change modify codeup address to gitee
  - add keentune to systemd
  - fix: wrong license in setup.py
  - use 'MulanPSLv2' macro
  - update license to MulanPSLv2
  - Initial KeenTune-brain


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com>- 1.0.1
changelog:
  - Verify input arguments of command 'param tune'
  - Supporting of multiple target tuning
  - Fix bug which cause keentune hanging after command 'param stop'
  - Add verification of conflicting commands such as 'param dump', 'param delete' when a tuning job is runing.
  - Remove version limitation of tornado
  - Refactor sysctl domain to improve stability of parameter setting
  - Fix some user experience issues


author: Runzhe Wang <15501019889@126.com> - 1.1.0-1
changelog:
  - fix bug: update version to 1.1.0 in setup.py script.
  - Add support for GP (in iTuned) in sensitizing algorithms
  - Add support for lasso in sensitizing algorithms
  - refactor tornado module: replace await by threadpool
  - lazy load domain in keentune-target
  - fix other bugs


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.2.0-2
changelog:
  - Wrong version index in python
  - Control checking range of settable target for 'profile set'
  - add function of all rollback


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.1.0-1
changelog:
  - Add support for GP (in iTuned) in sensitizing algorithms
  - Add support for lasso in sensitizing algorithms
  - refactor tornado module: replace await by threadpool
  - lazy load domain in keentune-target
  - fix other bugs


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.4.0-1
changelog:
  - fix: domain 'my_cnf' actived without mysql sevice
  - fix: fix the problem that cannot be rolled back normally


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.0.0
changelog:
  - add tpce tpch benchmark files
  - fix bug: can not running in alinux2 and centos7
  - change modify codeup address to gitee
  - manage keentuned with systemctl
  - fix: show brain error in the keentuned log
  - fix: profile set supports absolute and relative paths
  - fix: show exact job abort log after the stop command
  - add nginx_conf parameter config file
  - use 'MulanPSLv2' macro
  - update license to MulanPSLv2
  - Init Keentuned.


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.1.0
changelog:
  - remove parameter fs.nr_open
  - Add support for GP (in iTuned) in sensitizing algorithms
  - Add support for lasso in sensitizing algorithms
  - refactor tornado module: replace await by threadpool
  - lazy load domain in keentune-target
  - fix other bugs
  - Add baseline reading before init brain
  - Supporting multiple param json for tuning
  - Fix rollback failure
  - Clean empty dir when uninstall
  - Verify input arguments of command 'param tune'
  - Supporting of multiple target tuning
  - Fix bug which cause keentune hanging after command 'param stop'
  - Add verification of conflicting commands such as 'param dump', 'param delete' when a tuning job is runing.
  - Remove version limitation of tornado
  - Refactor sysctl domain to improve stability of parameter setting
  - Fix some user experience issues


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.2.0
changelog:
  - Add capabilities of target-group and bench-group
  - Fix some issues
  - Add 'keentune version' command


author: Wenchao Liu <wb-lwc921938@alibaba-inc.com> - 1.4.0-0
changelog:
  - add: Support UI Intelligent tuning and Sensitive parameter identification
  - add: Support show recommendation log for expert one click tuning
  - add: Support UI configure KeenTune groups' network environment
  - add: Support UI perform param rollback
  - add: Support UI perform param dump
  - add: Support KeenTune Recovery of all environments
  - add: Remove field '--config' from Intelligent tuning and Sensitive parameter identification
  - fix: Remove daemon self start
  - fix: Unify response code for cli
  - fix: Modify daemon start show log
  - other bugs fix


author: Martin Osvald <mosvald@redhat.com> - 12:4.4.3-4.P1
changelog:
  - New version 4.4.3-P1 (rhbz#2132240)
  - Fix for CVE-2022-2928 (rhbz#2132429)
  - Fix for CVE-2022-2929 (rhbz#2132430)


author: Ondrej Holy <oholy@redhat.com> - 2:2.9.0-1
changelog:
  - Update to 2.9.0 (CVE-2022-39316, CVE-2022-39317, CVE-2022-39318,
  CVE-2022-39319, CVE-2022-39320, CVE-2022-41877, CVE-2022-39347).


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.0-1
changelog:
  - Update to 2.11.0 (CVE-2023-39350, CVE-2023-39351, CVE-2023-39352,
    CVE-2023-39353, CVE-2023-39354, CVE-2023-39356, CVE-2023-40181,
    CVE-2023-40186, CVE-2023-40188, CVE-2023-40567, CVE-2023-40569 and
    CVE-2023-40589).


author: Ondrej Holy <oholy@redhat.com> - 2:2.0.0-47.rc4
changelog:
  - Fix SCARD_INSUFFICIENT_BUFFER error (rhbz#1803054)
  - Do not advertise /usb in help output (rhbz#1761144)


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 6.5-5
changelog:
  - Fix bug in fix-info-dir which prevented the transfiletriggerpostun script
    from working properly.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.5-6
changelog:
  - Fix fail of test because of unescaped left brace with Perl 5.28
    (patch by Jitka Plesnikova)
    Resolves: #1590308


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 6.5-11
changelog:
  - Fix another issue in fix-info-dir which could lead to an infinite loop in odd
    circumstances.
    Resolves: #1614162


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10
changelog:
  - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
    i2alaw_array in alaw (#1673085)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10.1
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985027)


author: Pavel Raiskup <praiskup@redhat.com> 2.15-1
changelog:
  - argparse: handle old-style commands *before* ignoring "--" (awilliam@redhat.com)
  - Update mock.1 (cheese@nosuchhost.net)


author: Pavel Raiskup <praiskup@redhat.com> 2.16-1
changelog:
  - disable system call filtering
  - pass env to podman run (dani@lapiole.org)
  - give user alternative help for missing 'epel-8-*' configs
  - podman, explictily specify stdin as tar source (vreeland.justin@gmail.com)
  - add a new 'ssl_extra_certs' option (patrick@laimbock.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.0-1
changelog:
  - mock v3 contains several Python 2.7 (EL7) incompatibilites
    https://github.com/rpm-software-management/mock/issues/755
  - disable SECCOMP for Podman by default
  - opt in for SECCOMP invented
  - create simple_load_config() for use in 3rd party SW (msuchy@redhat.com)
  - implement --list-chroots command (msuchy@redhat.com)
  - add cachedir to output of hw_info plugin (msuchy@redhat.com)
  - mock: copy /usr/share/pki source CA certificates (dereks@lifeofadishwasher.com)
  - add missing args for --scrub and --short-circuit into bash
    completion (didiksupriadi41@fedoraproject.org)
  - remove el7 specific parts from the spec file (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.1-1
changelog:
  - let rpmbuild know that it should not clean up after itself (msuchy@redhat.com)
  - typo in the subscription error message
  - root_cache: simplify decompressing with BSD tar
  - switch from /bin/gtar to /bin/tar by default


author: Pavel Raiskup <praiskup@redhat.com> 3.2-1
changelog:
  - Fix the docker environment check for cgroupv2 (achal.velani@oracle.com)
  - mock-scm: recommend rpkg-util
  - don't use rpmbuild --noclean option if not supported
  - do only one fork() while reading --list-chroots configs
  - Error() (exceptions) code rewritten and simplified
  - dropped mock SGID from /var/{lib,cache}/mock dirs
  - change license to spdx (msuchy@redhat.com)
  - podman.py: don't let podman warnings taint container id (micho@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.4-1
changelog:
  - make device mapper control device available if supported (neal@gompa.dev)
  - check for target specific qemu-user-static (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.5-1
changelog:
  - check for qemu-user-static raises InvalidArchitecture()
  - forcearch: map armv7hl to the /usr/bin/qemu-arm-static binary
  - more pedantic check for the qemu-*-static binaries


author: Pavel Raiskup <praiskup@redhat.com> 4.0-1
changelog:
  - cleanup the bootstrap image logic so it works if Mock is run in container
  - rebuild: kill orphans when mounted
  - bootstrap: delay the buildroot-in-bootstrap recursive mount
  - use shlex instead of pipes
  - fix bootstrap_* prefixed config_opts options
  - manual page: fix the "how to fill an issue" info
  - support for DNF5 added
  - use -N instead of -n for useradd (msuchy@redhat.com)
  - mock: don't use distutils copy_tree()


author: Pavel Raiskup <praiskup@redhat.com> 4.1-1
changelog:
  - bootstrap: fix certificate copying into the bootstrap chroot
  - don't strictly require any package manager
  - config: properly configure package manager commands
  - unify the fallback-detection for host/bootstrap/bootstrap-image
  - bind_mount plug-in: pre-create dest directory before bind-mounting a file
  - bootstrap: use DNF5 in package manager fallbacks
  - fix --dnf-cmd traceback with the new package_manager logic


author: Nathan Scott <nathans@redhat.com> - 5.3.0-1
changelog:
  - Allow pcp-atop to filter processes on state (BZ 1807046)
  - Dynamically adjust the pmproxy open file limit (BZ 1954711)
  - Rebase to a more recent upstream version of PCP (BZ 1922040)
  - PCP scalability and memory footprint improvements (BZ 1942292)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-4
changelog:
  - Improve pmchart duplicate archive diagnostics (BZ 1615718)
  - Save pmchart users prefered archive locations (BZ 1615742)
  - Remove libvarlink dependency from podman PMDA (BZ 1956608)


author: Nathan Scott <nathans@redhat.com> - 5.3.1-1
changelog:
  - Improved diagnostics from pmie service scripts (BZ 1954576)
  - Drop option configuration file env var setting (BZ 1967174)
  - Add pmie support for thermal throttle detection (BZ 1908212)
  - Annotate a couple of obscure config files in rpm (BZ 1964253)
  - Rebase to a more recent upstream version of PCP (BZ 1922040)


author: Nathan Scott <nathans@redhat.com> - 5.3.1-2
changelog:
  - Fix pmproxy parallel TLS requests bug (BZ 1947989)
  - Backport pmrep archive creation fix (BZ 1974266)


author: Mark Goodwin <mgoodwin@redhat.com> - 5.3.1-3
changelog:
  - Improve pmproxy and libpcp_web scalability (BZ 1975069)
  - Provide a pcp-ss(1) tool in pcp-system-tools (BZ 1879350)


author: guoqing <guoqing@nfschina.com> - 3.28.2-28.14
changelog:
  - Bug 75196  【产品优化】解决随机生成的密码强度可能不足
  - Add gnome-control-center-3.28.2-fix-password-strength-level.patch


author: xupengfei <xupengfei@nfschina.com> - 3.28.2-28.3
changelog:
  - Bug_0370877：通过设置-详细信息-用户新建普通用户时输入全名出现报错
  - Add patch: gnome-control-center-3.28.2-some-changes-about-user-account.patch


author: Jarod Wilson <jarod@redhat.com> - 3.2.1-8
changelog:
  - Remove python2 bits entirely, fix mpi lib dependencies
  - Remove obsolete Provides/Obsoletes for mpich2
  - Resolves: rhbz#1628628


author: Honggang Li <honli@redhat.com> - 3.3.2-8
changelog:
  - Sync with Fedora build
  - Update to latest upstream release 3.3.2
  - Resolves: rhbz#1657316, rhbz#1732982, rhbz#1850080


author: Gopal Tiwari <gtiwari@redhat.com> - 5.56-1
changelog:
  + bluez-5.56-1
  - Fixing (#1965057)
  - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Ryan O'Hara <rohara@redhat.com> - 2.4.7-1
changelog:
  - Update to 2.4.7 (#1966688)
  - Fix domain parts in :scheme and :path fields (CVE-2021-39240, #1998196)
  - Fix spaces in the :method field (CVE-2021-39241, #1998198)
  - Fix mismatch between :authority and Host fields (CVE-2021-39242, #1998200)
  - Fix request smuggling attack or response splitting (CVE-2021-40346, #2000621)


author: Pavel Raiskup <praiskup@redhat.com> - 1.30-1
changelog:
  - rebase to latest upstream release, per release notes
    http://lists.gnu.org/archive/html/info-gnu/2017-12/msg00011.html


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-1
changelog:
  - Rebase to 0.13.71
  - Drop the CVE patches, they are now part of the upstream package
  - Build no longer requires python2
  - Resolves: 1807565


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-7
changelog:
  - Remove the doc/zzipdoc/{options,match}.py scritps from the original tar
  - Replace them with a current github version
  - The original version of the files contains autogenerated header with incompatible license
  - This build thus uses modified tar archive
  Resolves: rhbz#1982241


author: Nick Clifton <nickc@redhat.com> - 2.30-100
changelog:
  - Do not strip the static BFD library.  (For real this time).  (#1924068)
  - Remove support for ARM v8.6 ISA.  (#1875912)


author: Nick Clifton <nickc@redhat.com> - 2.30-101
changelog:
  - Fix excessive memory consumption in the BFD librart when parsing corrupt DWARF information.  (#1947134)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.52.20-4
changelog:
  - Python 2 binary package renamed to python2-newt
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.20-8
changelog:
  - rename newt-python3 subpackage to python3-newt
  - build python3 subpackage unconditionally
  - don't use unversioned python_sitearch macro
  - drop static subpackage
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - fix description of python2-newt


author: Michal Hlavinka <mhlavink@redhat.com> - 3.7.0-1
changelog:
  - pciutils updated to 3.7.0, add support for basic DVSEC and CXL DVSEC (#1856436)
  - add support for RCEC Associated Endpoint (#1856440)


author: chunchao <chunchao@nfschina.com> [4.19.113-18.107.nfs]
changelog:
  - Fix: net/phy: hns3 driver error message about mac speed -1.
  - Upstream patch: c36757eb9dee13681227ad3676d37f14b3a2b2af
  - net: phy: consider AN_RESTART status when reading link status
  - Upstream patch: 729f9d5ee3740196071dc15031ce48f3e7659b9a
  - phy: avoid unnecessary link-up delay in polling mode


author: fenghui <fenghui@nfschina.com> [4.19.113-18.108.nfs]
changelog:
  - Fix:	fix rtc on the SW. add kernel-4.19.113-fix-rtc-on-sw.patch from yangminglei.
    	Config: CONFIG_I2C_DEBUG_CORE=y CONFIG_I2C_DEBUG_BUS=y CONFIG_RTC_DRV_PCF8523=y


author: zhuyunfei <zhuyunfei@nfschina.com> [4.19.113-18.109.nfs]
changelog:
  - Fix bug77288: drivers/base/memory.c: indicate all memory blocks as removable
  - commit id : 51f1a9252159db4fa871381c0d34c97fa94eb500 from anolis cloud-kernel
    commit id : 53cdc1cb29e87ce5a61de5bb393eb08925d14ede from upstream kernel.org


author: Sérgio Basto <sergio@serjux.com> - 0.103.3-7
changelog:
  - (#2006490) follow the Fedora Packaging Guidelines by adding %dir
    %attr(0710,%scanuser,virusgroup) to %files section, it is needed on epel7 on
    initial installation without reboot.


author: Sérgio Basto <sergio@serjux.com> - 0.103.3-8
changelog:
  - (#2006490) second try to fix epel7, revert previous commit and add on
    initial installation (not in updates) run /bin/systemd-tmpfiles --create (...)


author: Sérgio Basto <sergio@serjux.com> - 0.103.3-9
changelog:
  - Get rid of pkgdatadir variable %{_datadir}/%{name} is more informative
  - Get rid og milterlog variable %{_var}/log/clamav-milter.log is more readable
  - we can remove %{_var}/log/clamav-milter.log because journalctl -u clamav-milter
    supersede it
  - Fix substitution of /var/run/clamd/clamd.socket on file clamav-milter.conf
  - Get rid of scanstatedir and milterstatedir variables
  - smartsubst deleted since we notice does not replace anything
  - more cleanups
  - $RPM_BUILD_ROOT  + /builddir/build/BUILDROOT/clamav-0.103.6-1.1.nfs4.sw_64
  - all variavels with {}
  - BR _chmod and chown only in oldfreshclam
  - clean rpath clean


author: Sérgio Basto <sergio@serjux.com> - 0.103.3-9
changelog:
  - Get rid of pkgdatadir variable %{_datadir}/%{name} is more informative
  - Get rid og milterlog variable %{_var}/log/clamav-milter.log is more readable
  - we can remove %{_var}/log/clamav-milter.log because journalctl -u clamav-milter
    supersede it
  - Fix substitution of /var/run/clamd/clamd.socket on file clamav-milter.conf
  - Get rid of scanstatedir and milterstatedir variables
  - smartsubst deleted since we notice does not replace anything
  - more cleanups
  - $RPM_BUILD_ROOT  + /builddir/build/BUILDROOT/clamav-0.103.6-1.1.nfs4.x86_64
  - all variavels with {}
  - BR _chmod and chown only in oldfreshclam
  - clean rpath clean


author: wanggy <guangyun@nfschina.com> [4.19.113-18.111.nfs]
changelog:
  - iommu/vt-d: Fix agaw for a supported 48 bit guest address width
  - from https://gitee.com/anolis/cloud-kernel.git  
  - commit:44778532633e6f49089a628fd785228e8ac6c372


author: chunchao <chunchao@nfschina.com> [4.19.113-18.112.nfs]
changelog:
  - crypto/ccp: Verify access to device registers before initializing
  - upstream commmit id: 03f008c52b76114b83483de2cf15ed36fc34930c


author: chunchao <chunchao@nfschina.com> [4.19.113-18.113.nfs]
changelog:
  - PCI/ACPI: Allow _OSC presence to be optional for PCI
  - upstream commmit id: c238252f86c1833fc0cbee3ce3b4c295d3ab24ef


author: Davide Caratti <dcaratti@redhat.com> - 1:2.9-2
changelog:
  - Fix AP mode PMF disconnection protection bypass (CVE-2019-16275)
  - Fix NULL dereference in d-bus handler when P2P control interface is removed (rh #1752780)
  - enable WIFI_DISPLAY (rh #1755941)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.9-3
changelog:
  - fix p2p_listen unexpectedly stopped after 5 seconds (rh #1693684)
  - allow changing 'bridge' via D-Bus (rh #1888050)
  - expose OWE configurability via D-Bus (rh #1888718)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.9-5
changelog:
  - P2P: Fix a corner case in peer addition based on PD Request (CVE-2021-27803)
  - Fix buffer overflow when processing P2P group information (CVE-2021-0326)


author: Paul Howarth <paul@city-fan.org> - 1.8.0-10
changelog:
  - Explicitly run the test suite in the en_US.UTF-8 locale to work around flaky
    locale settings in mock builders


author: Paul Howarth <paul@city-fan.org> - 1.8.1-1
changelog:
  - Update to 1.8.1
    - Fixed possible integer overflow when reading a specially crafted packet
      (CVE-2019-3855)
    - Fixed possible integer overflow in userauth_keyboard_interactive with a
      number of extremely long prompt strings (CVE-2019-3863)
    - Fixed possible integer overflow if the server sent an extremely large
      number of keyboard prompts (CVE-2019-3856)
    - Fixed possible out of bounds read when processing a specially crafted
      packet (CVE-2019-3861)
    - Fixed possible integer overflow when receiving a specially crafted exit
      signal message channel packet (CVE-2019-3857)
    - Fixed possible out of bounds read when receiving a specially crafted exit
      status message channel packet (CVE-2019-3862)
    - Fixed possible zero byte allocation when reading a specially crafted SFTP
      packet (CVE-2019-3858)
    - Fixed possible out of bounds reads when processing specially crafted SFTP
      packets (CVE-2019-3860)
    - Fixed possible out of bounds reads in _libssh2_packet_require(v)
      (CVE-2019-3859)
  - Fix mis-applied patch in the fix of CVE-2019-3859
    - https://github.com/libssh2/libssh2/issues/325
    - https://github.com/libssh2/libssh2/pull/327


author: Paul Howarth <paul@city-fan.org> - 1.8.2-1
changelog:
  - Update to 1.8.2
    - Fixed the misapplied userauth patch that broke 1.8.1
    - Moved the MAX size declarations from the public header


author: Paul Howarth <paul@city-fan.org> - 1.9.0-1
changelog:
  - Update to 1.9.0
    - Fixed integer overflow leading to out-of-bounds read (CVE-2019-13115)
    - Adds ECDSA keys and host key support when using OpenSSL
    - Adds ED25519 key and host key support when using OpenSSL 1.1.1
    - Adds OpenSSH style key file reading
    - Adds AES CTR mode support when using WinCNG
    - Adds PEM passphrase protected file support for libgcrypt and WinCNG
    - Adds SHA256 hostkey fingerprint
    - Adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
    - Adds explicit zeroing of sensitive data in memory
    - Adds additional bounds checks to network buffer reads
    - Adds the ability to use the server default permissions when creating sftp directories
    - Adds support for building with OpenSSL no engine flag
    - Adds support for building with LibreSSL
    - Increased sftp packet size to 256k
    - Fixed oversized packet handling in sftp
    - Fixed building with OpenSSL 1.1
    - Fixed a possible crash if sftp stat gets an unexpected response
    - Fixed incorrect parsing of the KEX preference string value
    - Fixed conditional RSA and AES-CTR support
    - Fixed a small memory leak during the key exchange process
    - Fixed a possible memory leak of the ssh banner string
    - Fixed various small memory leaks in the backends
    - Fixed possible out of bounds read when parsing public keys from the server
    - Fixed possible out of bounds read when parsing invalid PEM files
    - No longer null terminates the scp remote exec command
    - Now handle errors when Diffie Hellman key pair generation fails
    - Fixed compiling on Windows with the flag STDCALL=ON
    - Improved building instructions
    - Improved unit tests
  - Needs OpenSSL ≥ 1.0.1 now as ECC support is assumed
  - Modernize spec somewhat as EL-6 can no longer be supported


author: Paul Howarth <paul@city-fan.org> - 1.9.0-5
changelog:
  - Switch to https:// upstream URLs
  - Full groff (not just groff-base) needed for the mansyntax check


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.96-2
changelog:
  - Fixed "tainted search query is not properly quoted" for greylisting,
    patch provided by Marcel Härry <mh+fedora@scrit.ch>


author: Matt Domsch <mdomsch@fedoraproject.org> - 1.4.2-5
changelog:
  - Add systemd protections and restart
  - Use systemd RuntimeDirectory instead of tmpfiles where possible
  - Default config file to using local socket


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-9
changelog:
  - CVE-2020-14145 openssh: Observable Discrepancy leading to an information
    leak in the algorithm negotiation (#1882252)
  - Hostbased ssh authentication fails if session ID contains a '/' (#1944125)


author: Kamil Dudka <kdudka@redhat.com> 2.2.52-14
changelog:
  - drop obsolete BuildRoot and Group tags
  - fix spurious acl_check() failure on setfacl --restore (#1451826)


author: Kamil Dudka <kdudka@redhat.com> 2.2.52-15
changelog:
  - setfacl.1: document the meaning of '-' in perms (#1337039)
  - avoid failure of %check when building as root (#1085389)
  - apply patches automatically to ease maintenance


author: Kamil Dudka <kdudka@redhat.com> 2.4.47-19
changelog:
  - fix test-suite failure with perl-5.26.0 (#1473853)
  - apply patches automatically to ease maintenance
  - update URL of the upstream source tarball


author: Kevin Fenzi <kevin@scrye.com> - 1.07.1-1https://bugs.archlinux.org/task/53546
changelog:
  - Update to 1.07.1
  - Fixes a bug that breaks kernel builds ( https://bugs.archlinux.org/task/53546 )


author: Kalev Lember <klember@redhat.com> - 3.12.2-1
changelog:
  - Update to 3.12.2
  - Use desktop-file-validate instead of desktop-file-install
  - Update download URLs


author: Bob Relyea <rrelyea@redhat.com> - 2019.2.32-1
changelog:
  - Update to CKBI 2.32 from NSS 3.44
  -  Removing:
  -   # Certificate "Visa eCommerce Root"
  -   # Certificate "AC Raiz Certicamara S.A."
  -   # Certificate "ComSign CA"
  -   # Certificate "Certplus Root CA G1"
  -   # Certificate "Certplus Root CA G2"
  -   # Certificate "OpenTrust Root CA G1"
  -   # Certificate "OpenTrust Root CA G2"
  -   # Certificate "OpenTrust Root CA G3"
  -  Adding:
  -   # Certificate "GlobalSign Root CA - R6"
  -   # Certificate "OISTE WISeKey Global Root GC CA"
  -   # Certificate "GTS Root R1"
  -   # Certificate "GTS Root R2"
  -   # Certificate "GTS Root R3"
  -   # Certificate "GTS Root R4"
  -   # Certificate "UCA Global G2 Root"
  -   # Certificate "UCA Extended Validation Root"
  -   # Certificate "Certigna Root CA"
  -   # Certificate "emSign Root CA - G1"
  -   # Certificate "emSign ECC Root CA - G3"
  -   # Certificate "emSign Root CA - C1"
  -   # Certificate "emSign ECC Root CA - C3"
  -   # Certificate "Hongkong Post Root CA 3"


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-81
changelog:
  - Update to CKBI 2.41 from NSS 3.53.0
  -    Removing:
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "UTN USERFirst Email Root CA"
  -     # Certificate "Certplus Class 2 Primary CA"
  -     # Certificate "Deutsche Telekom Root CA 2"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "Certinomis - Root CA"
  -    Adding:
  -     # Certificate "Entrust Root Certification Authority - G4"


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.48-80.0
changelog:
  - Update to CKBI 2.48 from NSS 3.66
  -    Removing:
  -     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root CA"
  -     # Certificate "Sonera Class 2 Root CA"
  -     # Certificate "Taiwan GRCA"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Trustis FPS Root CA"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
  -    Adding:
  -     # Certificate "Microsoft ECC Root Certificate Authority 2017"
  -     # Certificate "Microsoft RSA Root Certificate Authority 2017"
  -     # Certificate "e-Szigno Root CA 2017"
  -     # Certificate "certSIGN Root CA G2"
  -     # Certificate "Trustwave Global Certification Authority"
  -     # Certificate "Trustwave Global ECC P256 Certification Authority"
  -     # Certificate "Trustwave Global ECC P384 Certification Authority"
  -     # Certificate "NAVER Global Root Certification Authority"
  -     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
  -     # Certificate "GlobalSign Secure Mail Root R45"
  -     # Certificate "GlobalSign Secure Mail Root E45"
  -     # Certificate "GlobalSign Root R46"
  -     # Certificate "GlobalSign Root E46"
  -     # Certificate "GLOBALTRUST 2020"
  -     # Certificate "ANF Secure Server Root CA"
  -     # Certificate "Certum EC-384 CA"
  -     # Certificate "Certum Trusted Root CA"


author: Kalev Lember <klember@redhat.com> - 1.12.0-1
changelog:
  - Update to 1.12.0
  - Drop manual requires that are automatically handled by pkgconfig dep gen
  - Use license macro for COPYING
  - Tighten -devel subpackage deps with the _isa macro
  - Use make_install macro


author: Till Maas <opensource@till.name> - 10.2-19
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-2
changelog:
  - move pidfile to /var/run/chrony to allow chronyd to remove it on exit
    (#1584585)
  - avoid blocking in getrandom system call (#1592425)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-3
changelog:
  - fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2
    (#1614800)
  - add workaround for late reload of unit file (#1614751)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.5-1
changelog:
  - update to 3.5 (#1685469 #1677218)
  - fix shellcheck warnings in helper scripts (#1711948)
  - update ntp2chrony script


author: Miroslav Lichvar <mlichvar@redhat.com> 4.1-1
changelog:
  - update to 4.1 (#1895003 #1847853 #1929157)
  - add NetworkManager dispatcher script to add servers from DHCP even without
    dhclient (#1933139)
  - restrict permissions of /var/lib/chrony and /var/log/chrony (#1939295)
  - reset chrony-helper state after stopping chronyd (#1971697)
  - add gcc-c++ and make to build requirements
  - move default paths in /var/run to /run


author: xupengfei <xupengfei@nfschina.com> 4.1-1.1
changelog:
  - Bug0370839: 通过设置-详细信息-日期和时间,自动设置日期和时间,自动设置时区勾选后无法自动修改时间
  - %post add sed 's/^\(pool 2\.\)[^\/]*\(\.pool.ntp.org iburst\)/\1centos\2/' /etc/chrony.conf


author: Zhang Dongjun <dongjun@cpu-os.ac.cn> - 4.6.0-4
changelog:
  - nemo trash restore directory with same name translation
    Patch: 0003-nemo-trash-restore-directory-with-same-name-translat.patch


author: zhangping <zhangping@nfs-hlj.com> - 4.6.0-7.1.Jp1
changelog:
  - BUG_59390: 无法展示块设备、字符设备、管道、套接字文件类型
  - Patch: cinnamon-translations-4.6.0-7.1.Jp1-unknown-file-type.patch


author: zhangjun <zhangjun@nfschina.com> - 4.6.0-7.2.Jp1
changelog:
  - BUG_59388: 添加开始菜单中清除最近文档的功能
  - Patch: cinnamon-translations-4.6.0-7.2.Jp1-Add-menu_delete_recent.patch


author: Richard Hughes <richard@hughsie.com> 0.1.26-1
changelog:
  - New upstream version.
  - Install the cd-convert utility
  - Do not link against the unused gio-unix-2.0


author: Kamil Dudka <kdudka@redhat.com> - 8.30-8
changelog:
  - df --local: recognize afs, auristorfs, and smb3 as remote fs (#1798030)
  - fix formatting of sha512sum(1) man page (#1688744)


author: Kamil Dudka <kdudka@redhat.com> - 8.30-9
changelog:
  - split: fix --number=K/N to output correct part of file (#1921246)
  - rm: do not skip files upon failure to remove an empty dir (#1905481)
  - use statx instead of stat when available (#1760300)


author: dash <dash@nfschina.com> - 8.30-12.1.2
changelog:
  - sync: object-reuse-rm-file.patch
  - 增加客体重用，删除文件
  - sync: coreutils-8.30-oreuse-fix-bug.patch 
  - fix object reuse bug, rm -rf command does not take effect
  - sync: coreutils-8.30-oreuse-rm-directory.patch
  - 修改rm -rf 命令删除目录失败问题


author: Marian Csontos <mcsontos@redhat.com> - 2.03.12-3
changelog:
  - Allow extending thin-pool data with writecache on top.
  - Fix removing thin-pool data converted to writeache.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.12-4
changelog:
  - Fix conversion of writecache LVs to thin pool data volume.
  - Add deviceidtype option for lvmdevices.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.12-6
changelog:
  - Fix handling of pmspare by vgsplit, vgmerge and vgremove.
  - Fix detection of active components of external origin volume.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Fix crash due to double-free when destroying the same dls_upnp_t or
    dls_manager_t twice (RH #1251365)
  - Use make_build and make_install macros
  - Update minimum required versions; use pkgconfig(...) for BRs
  - Miscellaneous clean-ups


author: Peter Jones <pjones@redhat.com> - 3-2
changelog:
  - Always provide macros for efi_arch and efi_alt_arch (and their _upper
    variants), and make efi_has_arch and efi_has_alt_arch 0 when they will be
    wrong.  This ensures everything can always expand when we're on a non-efi
    architecture.


author: Peter Jones <pjones@redhat.com> - 15-1
changelog:
  - Update to efibootmgr 15
  - Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  - make --loader default build-time configurable
  - sanitize set_mirror()/get_mirror()
  - Add support for parsing loader options as UCS2
  - GCC 7 fixes
  - Don't use -fshort-wchar since we don't run on EFI machines.
  - Also rebuild for efivar-31-1.fc26 to get symbol versioning right.
    Resolves: rhbz#1468841


author: Peter Jones <pjones@redhat.com> - 35-1
changelog:
  - Update to efivar 35
  - fixes for older compilers
  - efi_get_variable_exists()
  - Lots of stuff to make CI work.
  - use usleep() to avoid hitting the kernel rate limiter on efivarfs
  - better EFI_GUID macro
  - add efi_guid_fwupdate (0abba7dc-e516-4167-bbf5-4d9d1c739416)


author: Peter Jones <pjones@redhat.com> - 36-1
changelog:
  - Update to efivar 36 (and some change)
    Resolves: rhbz#1635019
  - Add NVDIMM support
  - Re-written linux interface parser to handle how devices are
    partitioned better, and for cleaner code, with one file per device
    type.
  - lots of verbosity updates
  - better CI
  - analysis with clang's analyzer as well as coverity
  - Better handling of immutable bits in sysfs
  - LIBEFIVAR_OPS=help
  - lots of code cleanups.
  - Add emmc device support
  - Add SAS port expander support
  - Support for ACPI root nodes that are less common
    (i.e. ACPI Generic Container and Embedded Controller PNP nodes)
  - Make abbreviated device paths if we can't parse a device's info
  - Don't require NVME to have an EUI


author: Mark Wielaard <mjw@redhat.com> - 0.182-1
changelog:
  - Upgrade to upstream 0.182
    - backends: Support for tilegx has been removed.
    - config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
    - debuginfod: More efficient package traversal, tolerate various
      errors during scanning, grooming progress is more visible and
      interruptible, more prometheus metrics.
    - debuginfod-client: Now supports compressed (kernel) ELF images.
    - libdwfl: Add ZSTD compression support.


author: Marek Kasik <mkasik@redhat.com> - 3.28.4-7
changelog:
  - Set "application-id" property for evince's GApplication
  - to "org.gnome.evince.Application" to avoid a critical warning.
  - Resolves: #1842017


author: Owen Taylor <otaylor@redhat.com> - 2.4.2-4
changelog:
  - Make manpage installation agnostic of compression
    https://fedoraproject.org/wiki/Packaging:Guidelines#Manpages


author: Ondrej Vasik <ovasik@redhat.com> - 3.6-1
changelog:
  - own /usr/share/bash-completion{,/completions,/helpers} (#1504616)
  - create and own /usr/lib/debug/.dwz dir to prevent
    dangling symlink (#1508610)


author: Ondrej Vasik <ovasik@redhat.com> - 3.7-1
changelog:
  - own /usr/share/locale and /usr/lib/modules
  - own /usr/lib/sysimage
  - improve filesystem content file to include symlinks and rootdir


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.1.4-7
changelog:
  - Revert previous change of adding 'awk*' symlinks for info pages (bug #1486924)
  - Added patch to correctly fix the info pages issue (bug #1486924)
  - specfile content refactored for better readability
  - Package now provides its ABI version via gawk(abi)
  - Added test for usage of correct gawk(abi) into %check section


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.2.0-1
changelog:
  - Update to latest stable release from upstream [new API version - 2.0]
  - Added latest relevant patches from upstream's gawk-4.2-stable branch


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.2.0-2
changelog:
  - 'noarch' removed from *-devel subpackage
  - added arch requirement for *-devel subpackage
  - updated the build process to use %make_build macro


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.2.1-2
changelog:
  - 5 important patches backported from upstream per their request:
      gawk-4.2.1-000-add-support-for-a-and-A-in-printf.patch
      gawk-4.2.1-001-remove-the-tail-recursion-optimization.patch
      gawk-4.2.1-002-copy-MPZ-MPFR-bits-also-in-r_dupnode.patch
      gawk-4.2.1-003-fix-rebuilding-records-if-using-API-parser.patch
      gawk-4.2.1-004-fix-a-corner-case-with-EPIPE-to-stdout-stderr.patch


author: Yangguanghui <yangguanghui@nfschina.com. -3.32.1-22.3
changelog:
  - Remove gnome-shell-extensions-3.32.1-Sinicization.patch
  - add gnome-shell-extensions-translate-po.patch gnome-shell-extensions-translate-setting.patch，修正汉化


author: sujiyuan <jiyuan@nfschina.com> -3.32.1-22.3.1.Jp1
changelog:
  - Complies-with-code-specifications
  - add gnome-shell-extensions-3.32.1-Shutdown-operation-enters-the-start-menu.patch


author: lidongyue <dongyue@nfschina.com> -3.32.1-22.3.6
changelog:
  - 开始菜单中的锁屏,切换用户,注销,关机添加中文提示tooltips
  - add gnome-shell-extensions-3.32.1-add-chinese-tooltips-to-start-menu-button.patch


author: Kalev Lember <klember@redhat.com> - 3.27.92-1
changelog:
  - Update to 3.27.92
  - Don't set group tags
  - Remove ancient obsoletes
  - Remove gsettings schema scriptlets


author: Zhang Jun <zhangjun2023@nfschina.com> - 3.32.0-16.1.Jp1
changelog:
  - add patch: 0001-gnome-settings-daemon-3.32.0-add_log_alarm_autostart-in-sw64.patch
  - fix bug70927 sw_64 log alarm function


author: wangluqiang <luqiang@nfschina.com> - 3.32.2-40.1
changelog:
  - Patch20005: gnome-shell-notshow-WiredSettings-and-AccountSettings.patch
  - Patch20006: gnome-shell-enabled-extensions.patch
  - Patch20007: gnome-shell-show-WiredSettings.patch


author: xupengfei <xupengfei@nfschina.com> - 3.32.2-40.2
changelog:
  - Bug_0370669: 主目录在应用程序中为文件名称,同时有两个名为'文件'的应用程序,无最大化最小化功能
  - Add patch: gnome-shell-3.32.2-modify-default-favorite-apps.patch


author: xupengfei <xupengfei@nfschina.com> - 3.32.2-40.5
changelog:
  - Bug_0371175: 锁屏界面点击电源中的按钮出现待机后无法唤醒的情况
  - Add patch: gnome-shell-3.32.2-Forbid-suspend-function-in-system-actions.patch


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.3-3
changelog:
  - Support using the '0', '+' and '-' keys from the numeric keypad as
    accelerators
  - Resolves: #837035


author: Milan Crha <mcrha@redhat.com> - 3.28.1-7
changelog:
  - extensions: Incorrectly shows enabled extensions as disabled after enable-all
  - Resolves: #1804123


author: Parag Nemade <pnemade AT redhat DOT com> - 20120715-8
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove removal of buildroot in %install
  - Remove group tag


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-37
changelog:
  - grubby-bls: unset default entry if is the one being removed
    Resolves: rhbz#1668329
  - grubby-bls: error if args or remove-args is used without update-kernel
    Related: rhbz#1690765
  - grubby-bls: make --update-kernel ALL to update kernelopts var in grubenv
    Resolves: rhbz#1690765
  - grubby-bls: fix --add-kernel not working when using the --args option
    Related: rhbz#1690765


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-38
changelog:
  - grubby-bls: don't print rpm-sort error messages
    Resolves: rhbz#1731924
  - grubby-bls: remove -o option and support -c for ppc64le grub config
    Resolves: rhbz#1758598
  - grubby-bls: fix logic to check if the kernelopts var is defined in a BLS
    Resolves: rhbz#1726514
  - grubby-bls: don't update grubenv when generating grub.cfg for ppc64le
    Related: rhbz#1726514


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-39
changelog:
  - grubby-bls: strip only /boot from paths
    Resolves: rhbz#1738238
  - Make grubby to also update GRUB_CMDLINE_LINUX in /etc/default/grub
    Resolves: rhbz#1152027
  - grubby-bls: fix corner case when a kernel param value contains a '='
    Resolves: rhbz#1787584
  - grubby-bls: update man page to match options in current wrapper script
    Resolves: rhbz#1812065
  - grubby-bls: always escape the delimiter character used in sed commands
    Related: rhbz#1787584
  - grubby-bls: add a --no-etc-grub-update option
    Related: rhbz#1152027


author: xupengfei <xupengfei@nfschina.com> - 3.32.0-6.2
changelog:
  - Bug_0370669: 主目录在应用程序中为文件名称,同时有两个名为'文件'的应用程序,无最大化最小化功能
  - Add patch: gsettings-desktop-schemas-3.32.0-appmenu-add-minimize-and-maximize.patch


author: Wim Taymans <wtaymans@redhat.com> - 1.14.0-3
changelog:
  - Remove obsolete liboil BR (#1588303)
  - Only build extras on Fedora
  - bluez is not in extras
  - vdpau is in extras


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-1
changelog:
  - Update to 1.16.1
  - Remove upstreamed patches
  - Remove dependency on removed package
  - Add sctp and closedcaption plugins
  - The vcdsrc plugin was removed
  - Resolves: rhbz#1756299


author: Wim Taymans <wtaymans@redhat.com> - 1.13.1-2
changelog:
  - The gtk plugin was moved from -bad, make a new subpackage for it.
  - the mp3 plugins were moved from -ugly, add BuildRequires.
  - build requires GL now for gtkglsink


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-3
changelog:
  - -gtk: Obsoletes/Provides: gstreamer1-plugins-bad-free-gtk
  - Obsoletes/Provides: gstreamer1-plugin-mpg123


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20140811.1-5
changelog:
  - Add Supplements: tag for langpacks naming guidelines
  - Clean the specfile to follow current packaging guidelines


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.19-13
changelog:
  - Resolves: #1897548 - Rebuild IBus emoji with unicode-emoji-13.0-4 and cldr-emoji-annotation-39-2
  - Rebuild ibusemojigen.h and ibusunicodegen.h
  - Add ibus-1897548-emoji-unicode.patch to lookup Unicode names
  - Add U+32FF to IBusUnicodeData
  - Add ibus-po-1.5.19-20210706.tar.gz


author: Mike FABIAN <mfabian@redhat.com> - 60.2-4
changelog:
  - Add negative-daylight-savings.patch from upstream.
    (see http://bugs.icu-project.org/trac/ticket/13566 and
    http://bugs.icu-project.org/trac/changeset/40954)


author: Parag Nemade <pnemade AT redhat DOT com> - 60.2-7
changelog:
  - Resolves:rh#1602551 - Fix specfile by adding compile options
  - also add BuildRequires for gcc and gcc-c++
  - Correct the upstream URL


author: Mike FABIAN <mfabian@redhat.com> - 60.3-1
changelog:
  - Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和).
  - Resolves: rhbz#1677093


author: Mike FABIAN <mfabian@redhat.com> - 60.3-2
changelog:
  - Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch
  - Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch
  - Resolves: rhbz#1808238


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 6.0.0-10
changelog:
  - Introduce javapackages-extra and javapackages-common subpackages
  - Drop metadata for com.sun:tools and sun.jdk:jconsole
  - Re-enable tests
  - Re-add manpages
  - Drop bootstrap mode


author: Björn Esser <besser82@fedoraproject.org> - 0.13-3
changelog:
  - Add upstream patch for adding size_t json_c_object_sizeof()
  - Enable partial multi-threaded support


author: Robert Scheck <robert@fedoraproject.org> 1.2.76-13
changelog:
  - Replace patch from openSUSE by the Debian one to not only build
    kyotocabinet with GCC >= 6 but also with GCC >= 7 (#1307706 #c15)


author: Rex Dieter <rdieter@fedoraproject.org> - 2.7-4
changelog:
  - %files: less globs, use %license
  - tighten subpkg deps
  - -devel: use %doc
  - use %version in Source URL
  - simplify %setup
  - %check: make check


author: Rex Dieter <rdieter@fedoraproject.org> - 2.9-4
changelog:
  - CVE-2018-16435 lcms2: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile (#1628969)
  - .spec cosmetics, use %make_build %make_install %ldconfig_scriptlets


author: Kalev Lember <klember@redhat.com> - 0.6.9-1
changelog:
  - Update to 0.6.9
  - Use make_install macro
  - Mark COPYING and COPYING.LIB as %license
  - Tighten -devel subpackage deps


author: Nicola Sella <nsella@redhat.com> - 0.55.0-3
changelog:
  - Avoid multilib file conflict in config.h (RhBug:1918818)
  - [modules] Add special handling for src artifacts (RhBug:1809314)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-4
changelog:
  - [context] improve retrieving repository configuration
  - Allow loading incomplete cache and loading ext solv files without its repodata


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-1
changelog:
  - Update to 0.62.0
  - Hardening: add signature check with rpmcliVerifySignatures (RhBug:1932079)
  - Support allow_vendor_change setting in dnf context API
  - Add a new option module_obsoletes
  - Add new API applyObsoletes() function to apply modular obsoletes
  - Do not allow 1 as installonly_limit value (RhBug:1926261)
  - Add a config option to check TLS certificate revocation status (using OCSP stapling), defaults to false (RhBug:1814383)
  - Swdb: Add a method to get the current transaction
  - [context,API] Functions for accessing main/global configuration options
  - [context,API] Function for adding setopt
  - Add getter for modular obsoletes from ModuleMetadata
  - Add ModulePackage.getStaticContext() and getRequires()
  - Fix modular queries with the new solver
  - Fix: Fully set ssl in newHandle function
  - [conf] Add options for working with certificates used with proxy
  - Modify module NSVCA parsing - context definition (RhBug:1926771)
  - [context] Fix: dnf_package_is_installonly (RhBug:1928056)
  - Add getApplicablePackages to advisory and isApplicable to advisorymodule
  - Keep isAdvisoryApplicable to preserve API
  - [context] Support config file option "proxy_auth_method", defaults "any"
  - Support main config file options "installonlypkgs" and "protected_packages". Changes behaviour of microdnf and PackageKit.
  - Properly handle multiple collections in updateinfo.xml (RhBug:1804234)
  - Fix a crash when [media] section in .treeinfo is missing for bootable media (RhBug:1946024)
  - Add new dnf_context_module_install() C API


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-2
changelog:
  - Fix: dnf_context_module_install: memory leaks
  - covscan: remove unused vars, mark private func static, return values
  - DNF does not fail on non UTF-8 file names in a package


author: Dominik Mierzejewski <rpm[AT]greysector.net> 5.0.3-4
changelog:
  - fix FTBFS due to doc files in the wrong place (#1307717)
  - use license macro
  - drop unnecessary defattr declarations


author: Jerry James <loganjerry@gmail.com> - 3.1-23.20170329cvs
changelog:
  - Add gcc BR
  - Build verbosely
  - Drop obsolete --enable-widec configure option
  - Fix "unused direct shared library dependency" warning from rpmlint again
  - Fix man page error due to BSD nroff macro that is not available on Linux
  - Drop explicit R on pkgconfig from the -devel package, autogenerated


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Richard Hughes <richard@hughsie.com> 0.2.10-1
changelog:
  - New upstream version
  - Correctly detect removed devices when rescanning
  - Fix a memory leak when using control tranfers
  - Fix symbol version table up to version 0.2.9


author: Bastien Nocera <bnocera@redhat.com> - 1.2.0-12
changelog:
  + libimobiledevice-1.2.0-12
  - Replace patches with a single mega-patch
  - Fixes usbmuxd for iOS 11 devices


author: Robert Scheck <robert@fedoraproject.org> 1.4.2-3
changelog:
  - Move large documentation into -doc subpackage (#744416)
  - Reworked spec file to build libisofs1 for RHEL >= 6 (#744416)


author: Kalev Lember <klember@redhat.com> - 0.7.7-1
changelog:
  - Update to 0.7.7
  - Remove lib64 rpaths
  - Don't set group tags
  - Use make_install macro
  - Don't manually set deps that pkgconfig dep extractor automatically does
  - Drop old, unused build deps
  - Tighten deps with the _isa macro


author: Bastien Nocera <bnocera@redhat.com> - 1.22.0-6
changelog:
  + libpeas-1.22.0-6
  - Remove python2 loader, all GNOME apps using libpeas were ported to Python3
    when ported to GTK+ 3.x


author: Nils Philippsen <nils@tiptoe.de> - 2.1.2-1
changelog:
  - version 2.1.2
  - tidy up spec file
  - use %license for license file
  - require same arch main from devel package


author: Ales Matej <amatej@redhat.com> - 1.10.6-1
changelog:
  - Update to 1.10.6
  - Imporove handling of xattr to re-download damadged files (RhBug:1690894)
  - Rephrase repository GPG check error message (RhBug:1741442)
  - Add sleep before next try when all mirrors were tried (RhBug:1741931)
  - Raise logging level of error messages (RhBug:1737709)
  - Handle webservers that don't support ranges when downloading zck
  - Define LRO_SUPPORTS_CACHEDIR only with zchunk (RhBug:1726141)
  - Allow to use mirrors multiple times for a target (RhBug:1678588)
  - Allow to try baseurl multiple times (RhBug:1678588)


author: Ales Matej <amatej@redhat.com> - 1.11.0-1
changelog:
  - Update to 1.11.0
   - Retry mirrorlist/metalink downloads several times (RhBug:1741931)
   - Improve variable substitutions in URLs and add ${variable} support


author: Ales Matej <amatej@redhat.com> - 1.11.3-1
changelog:
  - Update to 1.11.3
   - Prefer mirrorlist/metalink over baseurl (RhBug:1775184)
   - Fix calling Python API without holding GIL (RhBug:1788918) 
   - Do not unref LrErr_Exception on exit (RhBug:1778854)


author: Nicola Sella <nsella@redhat.com> - 1.12.0-1
changelog:
  - Update to 1.12.0
  - Decode package URL when using for local filename (RhBug:1817130)
  - Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  - Download sources work when at least one of specified is working (RhBug:1775184)
  - Enable building on OSX


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Fix the key string parsing in url_substitution
  - When zchunk enabled and not using HTTP/S protocol, download the whole file (RhBug:1886706)
  - Add an option LRO_SSLVERIFYSTATUS to check TLS certificate revocation status (using OCSP stapling) (RhBug:1814383)
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for working with certificates used with proxy
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Fix memory leaks


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-5
changelog:
  - Revert "genhomedircon: check usepasswd" (rhbz#1871786)
  - semanage.conf - improve usepasswd=False explanation (rhbz#1871786)
  - semanage.conf - expand list of ignoredirs (rhbz#1871786)


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-5
changelog:
  - cil: Create new keep field for type attribute sets
  - build: follow standard semantics for DESTDIR and PREFIX
  - cil: show an error when cil_expr_to_string() fails


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-6
changelog:
  - Prevent freeing unitialized value in ibendport handling
  - Add support for the SCTP portcon keyword
  - Export sepol_polcap_getnum/name functions


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-3
changelog:
  - cil: Fix out-of-bound read of file context pattern ending with "\"
  - cil: Destroy classperms list when resetting classpermission (#1983517)
  - cil: Destroy classperm list when resetting map perms (#1983521)
  - cil: cil_reset_classperms_set() should not reset classpermission (#1983525)
  - cil: Set class field to NULL when resetting struct cil_classperms
  - cil: More strict verification of constraint leaf expressions
  - cil: Exit with an error if declaration name is a reserved word
  - cil: Allow permission expressions when using map classes
  - cil: Reorder checks for invalid rules when building AST
  - cil: Cleanup build AST helper functions
  - cil: Create new first child helper function for building AST
  - cil: Remove unused field from struct cil_args_resolve
  - cil: Destroy disabled optional blocks after pass is complete
  - cil: Check if name is a macro parameter first
  - cil: fix NULL pointer dereference in __cil_insert_name
  - cil: Report disabling an optional block only at high verbose levels
  - cil: Use AST to track blocks and optionals when resolving
  - cil: Reorder checks for invalid rules when resolving AST
  - cil: Sync checks for invalid rules in booleanifs
  - cil: Check for statements not allowed in optional blocks (#1983530)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.2.8-5
changelog:
  - BR: libgs-devel (f28+)
  - .spec cleanup/cosmetics (drop deprecated tags, use %autosetup/%license, tighten subpkg dep)


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-CVE-2021-3634 libssh: possible heap-based buffer
    overflow when rekeying
  - Resolves: rhbz#1994600


author: Andreas Schneider <asn@redhat.com> - 0.10.3-1
changelog:
  - Update to version 0.10.3
    https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.10.3
    https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.10.2
    https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.10.1
    https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.10.0
  - Removed libssh-0.9.6-openssh-8.8p1-compat.patch
  - resolves: rhbz#2121741


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.16-1
changelog:
  - New upstream release 1.3.16
  - Use RHEL_ALLOW_PYTHON2_FOR_BUILD=1 until libtalloc uses waf3
  - Patch the waf script to explicitly call python2 as "env python" doesn't
    yield py2 anymore


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.18.1
changelog:
  - Resolves: rhbz#1684579 - Rebase libtdb to version 1.3.18 for Samba
  - Resolves: rhbz#1597319 - libtdb uses Python 2 to build
  - Resolves: rhbz#1567138 - libtdb: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.18.2
changelog:
  - Obsolete the python2 packages on upgrade
  - Resolves: rhbz#1567138 - libtdb: Drop Python 2 subpackage from RHEL 8


author: Isaac Boukris <iboukris@redhat.com> - 1.4.2-2
changelog:
  - Resolves: rhbz#1754420 - Rebase libtdb 1.4.2 for samba
  - Related: rhbz#1754420 - Fix sssd tests (tdb)


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.6-23
changelog:
  - bake in versioned requirement on automake (rhbz#1193591)
  - fix testsuite FTBFS against automake 1.16.1
  - bypass -specs=* to gcc (rhbz#985592)


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.6-26
changelog:
  - cleanup post/postun, there are RPM triggers nowadays
  - fix error: line 2642: func__fatal_error: command not found (rhbz#1622611)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.1.6-14
changelog:
  - build with hardening LDFLAGS (#1548717)
  - remove obsolete macro and comments
  - add gcc to build requirements


author: David King <amigadave@amigadave.com> - 1.3.5-1
changelog:
  - Update to 1.3.5 (#1197923)
  - Use license macro for COPYING
  - Tighten subpackage dependencies
  - Use make_install and make_build macros
  - Use pkgconfig for BuildRequires
  - Remove unnecessary Requires from devel subpackage
  - Remove obsolete Obsoletes


author: Lianbo Jiang <lijiang@redhat.com> - B.02.18-22
changelog:
  - Display proper logical name of network device
  - Resolves: rhbz#1724087
  - Add DIMM running speed and Print dimm rank information
  - Resolves: rhbz#1725199


author: Robert Scheck <robert@fedoraproject.org> - 1.03-13
changelog:
  - Added patch by Khem Raj to use static inlines as the external
    inline definition has changed with GCC 5 (to fix ppc64 builds)


author: zhangping <zhangping@nfs-hlj.com> - 4.6.2-39.5.Jp1
changelog:
  - BUG_59390: 无法展示块设备、字符设备、管道、套接字文件类型
  - BUG_59392: 回收站中无文件位置
  - Patch: nemo-4.6.2-39.5.Jp1-unknow-file-type-add-location-in-trash.patch


author: micheng <micheng@nfs-hlj.com> - 4.6.2-39.10.Jp1
changelog:
  - BUG_75374 BUG_75802：/run/utmp无法识别为二进制类型
  - 弃用4.6.2-39.9.Jp1 - nemo-4.6.2-unknome-stl-binary-file-type.patch
  - Patch: nemo-4.6.2-39.10.Jp1-Fix-run-utmp-type-error.patch


author: YangGuangHui <yangguanghui@nfschina.com> - 1.1.0-3.4
changelog:
  - fixed 67877 修复loongarch-231117版本：关闭资源监视器时系统崩溃, 
  - fixed 67873 修复loongarch-231117版本：资源监视器异常，系统服务、进程、文件系统无显示信息，及仪表盘数据统计也都是 
  - Add nfs-stacer-fixed-bug67877.patch


author: yangguanghui <yangguanghui@nfschina.com> - 1.0.0-3.6
changelog:
  - fixed 68504 修复 资源监视器坐标轴没有单位，如果按照百分比理解，则显示出错，top显示CPU使用率单独某一核心都没有超出10%的
  - nfs-stacer-Resources-fixed-cpu.patch


author: Bob Relyea <rrelyea@redhat.com> - 3.67.0-4
changelog:
  - Better fix for the sdb timeout. The issue wasn't a race, it was
    the sqlite timeout waiting to begin a transaction under heavy
    thread usage.


author: Neal Gompa <ngompa@datto.com> - 2:2021.8.22-1
changelog:
  - Rebase to version 2021.8.22 to fix various CVEs (RHBZ#1999869)
  - Clean up old cruft for RHEL < 7
  - Split libraries out to libs subpackage


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-7 + 0.10.3-7
changelog:
  - SFTP sort upon the modification time (#1909988)
  - ssh-keygen printing fingerprint issue with Windows keys (#1901518)
  - PIN is lost when iterating over tokens when adding pkcs11 keys to ssh-agent (#1843372)
  - ssh-agent segfaults during ssh-add -s pkcs11 (#1868996)
  - ssh-copy-id could not resolve ipv6 address ends with colon (#1933517)
  - sshd provides PAM an incorrect error code (#1879503)


author: Dong Chuanjian <chuanjian@nfschina.com> 1.3.1-15.3
changelog:
  - add patch pam-1.3.1-add-sm3.patch
  - 新增SM3算法支持
  - add patch Linux-PAM-1.3.1-fix-sm3.patch
  - 处理SM3算法问题


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.2-412
changelog:
  - perl-devel requires redhat-rpm-config because of hardened compiler profiles
    (bug #1557667)
  - Do not clobber file bytes in :encoding layer (RT#132833)
  - Fix line numbers in multi-line s/// (RT#131930)
  - Fix parsing extended bracketed character classes (RT#132167)
  - Fix a possibly unitialized memory read in the Perl parser (RT#133074)
  - Fix an infinite loop in the regular expression compiler (RT#133185)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.2-413
changelog:
  - Adjust tests to gdbm-1.15 (RT#133295)
  - Fix an integer wrap when allocating memory for an environment variable
    (RT#133204)
  - Fix printing a warning about a wide character when matching a regular
    expression while ISO-8859-1 locale is in effect
  - Fix invoking a check for wide characters while ISO-8859-1 locale is in effect


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-416
changelog:
  - 5.26.3 bump (bug #1655526)
  - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920)
  - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922)
  - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924)
  - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-417
changelog:
  - Fix Time-Local tests to pass after year 2019 (bug #1807120)
  - Run-require perl(Encode) by perl-libs (bug #1903503)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-419
changelog:
  - Fix CVE-2020-10543 (bug #1839273)
  - Fix CVE-2020-10878 (bug #1839276)
  - Fix a file mode of a perl-example.stp example (bug #1913693)


author: Paul Howarth <paul@city-fan.org> - 1:0.236-1
changelog:
  - Update to 0.236
    - Add Travis test configuration
    - Make test for PMC availability more reliable
    - Disable benchmark test rt62341.t as it runs out of memory on many smoker
      systems (CPAN RT#118310)
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1:0.237-1
changelog:
  - Update to 0.237
    - Don't load vars.pm (CPAN RT#132077)
  - Drop legacy Group: tag
  - Drop buildroot cleaning in %install section


author: Wim Taymans <wtaymans@redhat.com> - 0.2.4-1
changelog:
  - Update to 0.2.4
  - Add defines for cursor and bitmap metadata
  - Revert patch that requires too new meson
  - Resolves: #1655028


author: Wim Taymans <wtaymans@redhat.com> - 0.2.5-1
changelog:
  - Update to 0.2.5
  - Revert patch that requires too new meson
  - Add patch to avoid invalid conversion error with C++ compilers
  - Resolves: #1664569


author: Wim Taymans <wtaymans@redhat.com> - 0.3.5-1
changelog:
  - Update to 0.3.5
  - Disable pulse and jack
  - Add patch to work with meson 0.49
  - Add patch to fix neon compilation
  - Resolves: rhbz#1832347


author: Lumír Balhar <lbalhar@redhat.com> - 39.2.0-4
changelog:
  - New subpackage platform-python-setuptools without files from /usr/bin/*
  - python3-setuptools contains only files from /usr/bin/* and depends
    on platform-python-setuptools
  - Resolves: rhbz#1641973


author: zengyi <zengyi@nfschina.com> 1.0.1-12.1.Xp1.nfs
changelog:
  - all priv as default os 
  -add addpolicydefaultallconfigshell.patch to config policydefault.pp and policydefaultall.pp
  -addpolicydefaultallconfigshell.patch


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 0.4.8-4
changelog:
  - specfile cleanup according to Fedora Packaging Guidelines
  - ghostscript parts removed from specfile


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:0.11.0-8
changelog:
  - Python 2 binary package renamed to python2-lockfile
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0-15
changelog:
  - enable vsftpd-based tests
  - run the test-suite for Python 3 only
  - do not disable TLS-SRP test because it is now supported by OpenSSL in Fedora


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0.2-4
changelog:
  - fix populating list of decoded strings (#1792213)
  - fix programming mistakes detected by static analyzers (#1666003)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.6.4-8
changelog:
  - Python 2 binary package renamed to python2-slip
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.6.4-10
changelog:
  - Also rename python-slip-dbus and python-slip-gtk to python2-*
  - Add missing %python_provide macros
  - Use new python2- names in dependencies


author: lilinjie <lilinjie@nfschina.com> - 4.14.3-19.8
changelog:
  - add patch set-python-to-python3.patch
  - rpm-4.14.2-conflict-check.patch
  - rpm-secadm-only-in-normal-mode.patch
  - rpm-sign-ima.patch
  - rpm-4.14.2-sm3sum.patch
  - rpm-modify-rpm.sig-file-path.patch
  - rpm-add-secadm-switch.patch


author: Todd Zullinger <tmz@pobox.com> - 1.10-12
changelog:
  - Properly handle the exception on missing files (bz1574509)
  - Explicitly disable the non-standard-group check


author: Todd Zullinger <tmz@pobox.com> - 1.10-15
changelog:
  - Fix mixed-use-of-spaces-and-tabs warning (in this spec file)
  - Remove el4/el5 configs and /usr/bin symlinks
  - Disable automatic compilation of Python files in /usr/share/rpmlint
  - Fix non-ghost-in-run filter in config


author: Stephen Gallagher <sgallagh@redhat.com> - 0.11-15
changelog:
  - Temporarily disable -Werror=format-security to unbreak the build
  - Build with verbose command-line visible in the logs
  - Resolves: rhbz#1424270


author: xupengfei <xupengfei@nfschina.com> - 1.9-3.1
changelog:
  - Bug_0370709: 桌面点击主目录打开的界面功能与应用程序打开的主目录功能不一致
  - 修改SOURCE目录下的gnome-mimieapp.list文件，修改参数inode/directory为nemo.desktop


author: Bastien Nocera <bnocera@redhat.com> - 1.1-1
changelog:
  + switcheroo-control-1.1-1
  - Update to 1.1
  - Don't throw errors when the machine doesn't have dual-GPU (#1391212)


author: Yunying Sun <yunying.sun@intel.com> - 2.0.0-1
changelog:
  - Update to 2.0.0 release (RHBZ#1508870)
  - Remove patch file 60-tpm-udev.rules, use upstream tpm-udev.rules instead
  - Disable ESAPI to fix build errors caused by dependency to libgcrypt 1.6.0
  - Add scriptlet to fix Rpath errors
  - Update file installation paths and names accordingly


author: Yunying Sun <yunying.sun@intel.com> - 2.0.0-2
changelog:
  - Re-enable ESAPI since gcrypt dependency is not an issue for Fedora
  - Bump release version to 2.0.0-2


author: Jerry Snitselaar <jsnitsel@redhat.com> - 2.3.2-3
changelog:
  - Add tss user if doesn't exist.
  - Update exported symbols map for libtss2-mu
  - esys: Check object handle node before calling compute_session_value
  - esys: fix resource name calculation
  - esys: fix Esys_StartAuthSession called with optional params
  - esys: fix keysize of ECC curve TPM2_ECC_NISTP224
  - esys: fixup compute_encrypted_salt error handling
  - esys: use memcmp in byte array comparison
  - esys: zero out ctx->salt after startAuthSession_finish
  - mu: Remove use of VLAs for Marshalling TPML types
  - return proper error code on memory allocation failure
  - sys: match counter variable type for cmdAuthsArray->count
  - tcti-device: getPollHandles should allow num_handles query
  - tctildr: fix segmentation fault if name_conf is too big
  resolves: rhbz#1879071 rhbz#1855180


author: Jerry Snitselaar <jsnitsel@redhat.com> - 2.3.2-4
changelog:
  - Fix hmac calculation for tpm2_clear command.
  - Remove private implementation of strndup.
  resolves: rhbz#1920825 rhbz#1940861


author: Richard Hughes <rhughes@redhat.com> - 0.99.6-1
changelog:
  - New upstream release
  - Detect joysticks as gaming input devices
  - Fix crash when '@' is present in the device name
  - Grab the model name from device if unavailable from battery


author: Bastien Nocera <bnocera@redhat.com> - 0.99.7-1
changelog:
  + upower-0.99.7-1
  - Update to 0.99.7
  - Add Bluetooth LE battery support
  - Fix critical action after resume from hibernate


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 20170801-2
changelog:
  - urw-base35-fonts-20170801-000-split-urw-fallback.patch added
  - decrease the fontconfig priority/ordering value to 60 (bug #1494850)
  - set same priority value for urw-fallback.conf as for other files (bug #1495199)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> 20170801-3
changelog:
  - *-devel subpackage added
  - typos & syntax fixed for AppStream files
  - NimbusSansNarrow-BdOblique.* renamed to *-BoldOblique
  - *-nimbus-sans-narrow subpackage dropped
  - priority/ordering decreased [60->61]
  - ship *.otf format files as well


author: Attila Lakatos <alakatos@redhat.com> - 0.7.8-4
changelog:
  - RHEL 8.3.0 ERRATUM
  - Spec file clean up
  - Rebase to 0.7.8
  Resolves: rhbz#1738590
  - Added selinux subpackage
  Resolves: rhbz#1683567
  - Added notifier subpackage
  - Installing /etc/usbguard/rules.d/
  Resolves: rhbz#1667395
  - Fixed sigwaitinfo handling
  Resolves: rhbz#1835210


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-5
changelog:
  - RHEL 8.3.0 ERRATUM
  - Use old-fasioned forking style in unit file
  Resolves: rhbz#1846885
  - Allow usbguard to read /proc/cpuinfo
  Resolves: rhbz#1847870
  - Removed notifier's Requires for usbguard-devel
  Resolves: rhbz#1667395
  - Allow usbguard to read /dev/urandom
  Resolves: rhbz#1848618


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-6
changelog:
  - RHEL 8.3.0 ERRATUM
  - Removed execstack from .spec
  - Removed AuthorizedDefault=wired from the usbguard
  Resolves: rhbz#1852539
  - Missing error message on bad configuration
  Resolves: rhbz#1857299
  - /etc/usbguard/usbguard-daemon.conf file does not contain all default options
  Resolves: rhbz#1862907


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-1
changelog:
  - Rebase to 1.0.0
  Resolves: rhbz#1887448
  - Filtering rules by attribute
  Resolves: rhbz#1873953
  - Change device policy of multiple devices using rule instead of ID
  Resolves: rhbz#1852568


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.1-1
changelog:
  - Rebased to virt-manager-2.2.1 (rhbz#1726535)
  - The rebase also fixes the following bugs:
      rhbz#1727881, rhbz#1724287, rhbz#1727811
  - spec: add gtksourceview3 dependency introduced by upstream (rhbz#1722820)
  - guest: fix warning message when machine type is changed for secure boot (rhbz#1727811)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.1-3
changelog:
  - guest: Drop set_capabilities_defaults call from get_uefi_path (rhbz#1753644)
  - devices: video: Simplify model hvm check (rhbz#1753644)
  - domcapabilities: Get video devices (rhbz#1753644)
  - domcapabilities: Add supports_video_bochs() (rhbz#1753644)
  - video: Prefer "bochs" when it's supported. (rhbz#1753644)
  - addhardware: Add "bochs" display to the video list (rhbz#1753644)
  - osdict: Always return the most generic tree (rhbz#1749865)
  - osdict: Choose the most appropriate tree when a profile is set (rhbz#1749865)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.1-4
changelog:
  - virt-install: Use minutes instead of seconds on get_time_string() (rhbz#1777664)
  - details: Fix showing the firmware type in case of firmware auto selection (rhbz#1857069)
  - details: fix detection of firmware auto-selection (rhbz#1857069)
  - domain: Fix VM deletion with firmare='efi' (rhbz#1869135)
  - virt-xml: fix defined_xml_is_unchanged (rhbz#1857504)


author: Zhang Jun <zhangjun2023@nfschina.com> - 4.16.0-3.1.Jp1
changelog:
  - add patch: 0001-xfce4-screensaver-4.16.0-enable-root-lock-screen.patch
  - fix bug76016 enable root to lock screen


author: Zhang Ping <zhangping@nfs-hlj.com> - 4.16.0-2.1.Jp1
changelog:
  - Add Lock Screen button to the logout submenu
  - Patch: xfce4-session-4.16.0-2.1.Jp1-add-lock-screen.patch


author: Zhang Jun <zhangjun2023@nfschina.com> - 4.16.0-2.2.Jp1
changelog:
  - Fix bug70661 update log out name to power
  - Patch: xfce4-session-4.16.0-2.2.Jp1-update-logout-name.patch


author: Hans de Goede <hdegoede@redhat.com> - 1.0.12-4
changelog:
  - Fix the crtc not being turned off, causing the dgpu to not suspend,
    after using a dgpu attached output


author: Simone Caronni <negativo17@gmail.com> - 7.5-12
changelog:
  - Clean up SPEC file, remove obsolete tags, fix all rpmlint warnings.
  - Rework build/install section to be like other xorg packages.
  - Remove all obsolete provides/obsoletes/conflicts.
  - Simplify build requirements.
  - Simplify build, it has not changed since 2008.


author: Adam Jackson <ajax@redhat.com> - 1.0.9-12
changelog:
  - Nerf the python-related BuildRequires. They're only needed for 'make check',
    and cmdtest is not yet a python3 package.


author: xupengfei <xupengfei@nfschina.com> - 2:3.28.1-3.1
changelog:
  - 同步内网patch到同源版本
  - 0018-yelp-3.28.1-Change-default-manual-to-nfs-help.patch
  - 0019-yelp-3.28.1-redirect-opened-uri.patch
  - 0020-yelp-3.28.1-remove-page-and-list-button.patch


author: yangguanghui <yangguanghui@nfschina.com> - 2:3.28.1-3.2
changelog:
  - 去除同步内网patch到同源版本,隐藏开始菜单里面的帮助
  - 0021-yelp-3.28.1-hide-desktop.patch
  - 移除 0018-yelp-3.28.1-Change-default-manual-to-nfs-help.patch
  - 移除 0019-yelp-3.28.1-redirect-opened-uri.patch
  - 移除 0020-yelp-3.28.1-remove-page-and-list-button.patch


author: Orion Poplawski <orion@nwra.com> - 0.19-3
changelog:
  - Use autoreconf -f to remove rpath
  - Use --disable-static to disable static builds
  - Use current make macros


author: fenghui <fenghui@nfschina.com> [4.19.113-18.118.nfs]
changelog:
  - Add: Add hygon security patch
  	0002-bugfix-tpm-revert-patch-newfeature-tpm-ad-sm3-suppor.patch
  	0003-tp0002-bum-use-u32-instead-of-int-for-PCR-index.patch
  	0004-tp0002-bum-add-_head-suffix-to-tcg_efi_specid_event-and-tcg.patch
  	0005-tp0002-bum-dynamically-allocate-the-allocated_banks-array.patch
  	0006-tp0002-bum-rename-and-export-tpm2_digest-and-tpm2_algorithm.patch
  	0007-tp0002-bum-retrieve-digest-size-of-unknown-algorithms-with-.patch
  	0008-tp0002-bum-move-tpm_chip-definition-to-include-linux-tpm.h.patch
  	0009-KE0002-buYS-trusted-explicitly-use-tpm_chip-structure-from-.patch
  	0010-tp0002-bum-pass-an-array-of-tpm_extend_digest-structures-to.patch
  	0011-KE0002-buYS-trusted-allow-module-init-if-TPM-is-inactive-or.patch
  	0012-KE0002-buYS-trusted-correctly-initialize-digests-and-fix-lo.patch
  	0013-cr0002-buypto-rename-sm3-256-to-sm3-in-hash_algo_name.patch
  	0014-tp0002-bum-fix-wrong-return-value-in-tpm_pcr_extend.patch
  	0015-im0002-bua-Switch-to-ima_hash_algo-for-boot-aggregate.patch
  	0016-op0002-buensource-mm-always-have-io_remap_pfn_range-set-pgp.patch
  	0001-op0002-buensource-crypto-AF_ALG-add-sign-verify-API.patch
  	0002-op0002-buensource-crypto-AF_ALG-add-setpubkey-setsockopt-ca.patch
  	0003-op0002-buensource-crypto-AF_ALG-add-asymmetric-cipher.patch
  	0004-ne0002-buwfeature-crypto-CCP-Support-SM2-algorithm-for-hygo.patch
  	0005-ne0002-buwfeature-crypto-CCP-Support-SM3-algorithm-for-hygo.patch
  	0006-ne0002-buwfeature-crypto-CCP-Support-SM4-algorithm-for-hygo.patch
  	0007-ne0002-buwfeature-crypto-CCP-Support-SM4-high-security-modu.patch
  	0008-ne0002-buwfeature-crypto-CCP-Userspace-can-exchange-context.patch
  	0009-bu0002-bugfix-crypto-The-output-data-length-is-not-fixed-fo.patch
  	0010-ne0002-buwfeature-Crypto-ccp-Optimize-the-exchanging-contex.patch
  	0011-bu0002-bugfix-crypto-ccp-It-prompt-ILLEGAL_MEM_ADDR-when-us.patch
  	0012-bu0002-bugfix-crypto-ccp-Only-handle-interrupts-by-completi.patch
  	0013-ne0002-buwfeature-crypto-ccp-Modify-value-of-COMMANDS_PER_Q.patch
  	0014-ne0002-buwfeature-crypto-ccp-Process-multiple-VQ-commands-o.patch
  	0015-bu0002-bugfix-crypto-ccp-It-prompt-failed-when-encrypted-si.patch
  	0016-ne0002-buwfeature-crypto-ccp-Process-multiple-VQ-commands-o.patch
  	0017-bu0002-bugfix-crypto-ccp-Fix-a-problem-that-vq-thread-may-s.patch
  	0018-bu0002-bugfix-crypto-fix-coredump-when-the-data-address-fro.patch
  	0019-hc0002-but-delete-hymccp-moudule-it-will-be-instead-by-hct-.patch
  	0020-Co0002-bummit-Message-Provides-hygon-crypto-technology-ccp-.patch
  	0021-op0002-buensource-x86-KVM-svm-don-t-pretend-to-advance-RIP-.patch
  	0022-op0002-buensource-KVM-SVM-refactor-msr-permission-bitmap-al.patch
  	0023-op0002-buensource-KVM-x86-Refactor-up-kvm_-g-s-et_msr-to-si.patch
  	0024-op0002-buensource-KVM-X86-Move-ignore_msrs-handling-upper-t.patch
  	0025-op0002-buensource-KVM-X86-Do-the-same-ignore_msrs-check-for.patch
  	0026-op0002-buensource-KVM-x86-Return-ENOENT-on-unimplemented-MS.patch
  	0027-op0002-buensource-KVM-x86-Allow-deflecting-unknown-MSR-acce.patch
  	0028-op0002-buensource-KVM-x86-Add-infrastructure-for-MSR-filter.patch
  	0029-op0002-buensource-KVM-x86-Prepare-MSR-bitmaps-for-userspace.patch
  	0030-op0002-buensource-KVM-x86-SVM-Prevent-MSR-passthrough-when-.patch
  	0031-op0002-buensource-KVM-x86-VMX-Prevent-MSR-passthrough-when-.patch
  	0032-op0002-buensource-KVM-VMX-Fix-x2APIC-MSR-intercept-handling.patch
  	0033-op0002-buensource-KVM-x86-Introduce-MSR-filtering.patch
  	0034-op0002-buensource-swiotlb-clear-io_tlb_start-and-io_tlb_end.patch
  	0035-op0002-buensource-swiotlb-Introduce-swiotlb_max_mapping_siz.patch
  	0036-op0002-buensource-swiotlb-Add-is_swiotlb_active-function.patch
  	0037-op0002-buensource-dma-Introduce-dma_max_mapping_size.patch
  	0038-op0002-buensource-virtio-Introduce-virtio_max_dma_size.patch
  	0039-op0002-buensource-virtio_ring-Fix-querying-of-maximum-DMA-m.patch
  	0040-op0002-buensource-virtio-blk-Consider-virtio_max_dma_size-f.patch
  	0041-op0002-buensource-KVM-SVM-Serialize-access-to-the-SEV-ASID-.patch
  	0042-op0002-buensource-KVM-SVM-Guard-against-DEACTIVATE-when-per.patch
  	0043-op0002-buensource-KVM-SVM-Remove-unneeded-WBINVD-and-DF_FLU.patch
  	0044-op0002-buensource-KVM-SVM-Reduce-WBINVD-DF_FLUSH-invocation.patch
  	0045-op0002-buensource-KVM-SVM-Issue-WBINVD-after-deactivating-a.patch
  	0046-op0002-buensource-KVM-SVM-Periodically-schedule-when-unregi.patch
  	0047-op0002-buensource-x86-mem_encrypt-Correct-physical-address-.patch
  	0048-op0002-buensource-KVM-SVM-Add-KVM_SEV-SEND_START-command.patch
  	0049-op0002-buensource-KVM-SVM-Add-KVM_SEND_UPDATE_DATA-command.patch
  	0050-op0002-buensource-KVM-SVM-Add-KVM_SEV_SEND_FINISH-command.patch
  	0051-op0002-buensource-KVM-SVM-Add-support-for-KVM_SEV_SEND_CANC.patch
  	0052-op0002-buensource-KVM-SVM-Add-support-for-KVM_SEV_RECEIVE_S.patch
  	0053-op0002-buensource-KVM-SVM-Add-KVM_SEV_RECEIVE_UPDATE_DATA-c.patch
  	0054-op0002-buensource-KVM-SVM-Add-KVM_SEV_RECEIVE_FINISH-comman.patch
  	0055-op0002-buensource-KVM-SVM-Fix-SEV-SEND_START-session-length.patch
  	0056-op0002-buensource-KVM-SVM-Call-SEV-Guest-Decommission-if-AS.patch
  	0057-op0002-buensource-KVM-X86-Introduce-KVM_HC_MAP_GPA_RANGE-hy.patch
  	0058-op0002-buensource-KVM-SVM-Return-EFAULT-if-copy_to_user-for.patch
  	0059-op0002-buensource-KVM-SVM-fix-missing-sev_decommission-in-s.patch
  	0060-op0002-buensource-KVM-SEV-Pin-guest-memory-for-write-for-RE.patch
  	0061-op0002-buensource-KVM-SEV-Flush-cache-on-non-coherent-syste.patch
  	0062-op0002-buensource-x86-kvm-Add-AMD-SEV-specific-Hypercall3.patch
  	0063-op0002-buensource-mm-x86-Invoke-hypercall-when-page-encrypt.patch
  	0064-op0002-buensource-EFI-Introduce-the-new-AMD-Memory-Encrypti.patch
  	0065-op0002-buensource-x86-kvm-Add-guest-support-for-detecting-a.patch
  	0066-op0002-buensource-x86-kvm-Add-kexec-support-for-SEV-Live-Mi.patch
  	0067-op0002-buensource-anolis-crypto-ccp-Introduce-init-and-free.patch
  	0068-op0002-buensource-anolis-crypto-ccp-Add-support-for-enqueue.patch
  	0069-op0002-buensource-anolis-crypto-ccp-Add-support-for-dequeue.patch
  	0070-op0002-buensource-anolis-crypto-ccp-Add-support-to-switch-t.patch
  	0071-op0002-buensource-anolis-crypto-ccp-Add-support-for-issue-c.patch
  	0072-op0002-buensource-anolis-KVM-SVM-Add-KVM_CSV_COMMAND_BATCH-.patch
  	0073-op0002-buensource-anolis-KVM-SVM-Prepare-memory-pool-to-all.patch
  	0074-op0002-buensource-anolis-KVM-SVM-Add-SEND_UPDATE_DATA-comma.patch
  	0075-op0002-buensource-anolis-KVM-SVM-Add-RECEIVE_UPDATE_DATA-co.patch
  	0076-bu0002-bugfix-HYGON-KVM-SVM-Flush-caches-when-userspace-get.patch
  	0077-bu0002-bugfix-HYGON-x86-mm-Pass-variable-start-to-notify_ra.patch
  	0078-bu0002-bugfix-HYGON-x86-kvm-Correct-number-of-pages-calcula.patch
  	0079-op0002-buensource-crypto-ccp-Add-support-for-SEV-ES-to-the-.patch
  	0080-op0002-buensource-anolis-crypto-ccp-Fix-definition-of-struc.patch
  	0081-op0002-buensource-x86-entry-64-Document-idtentry.patch
  	0082-op0002-buensource-x86-entry-64-Use-the-TSS-sp2-slot-for-SYS.patch
  	0083-op0002-buensource-x86-pti-64-Remove-the-SYSCALL64-entry-tra.patch
  	0084-op0002-buensource-x86-ioremap-Add-an-ioremap_encrypted-help.patch
  	0085-op0002-buensource-iommu-amd-Remap-the-IOMMU-device-table-wi.patch
  	0086-op0002-buensource-kdump-proc-vmcore-Enable-kdumping-encrypt.patch
  	0087-op0002-buensource-fs-proc-vmcore-Enable-dumping-of-encrypte.patch
  	0088-op0002-buensource-x86-kdump-Export-the-SME-mask-to-vmcorein.patch
  	0089-op0002-buensource-x86-boot-Save-several-bytes-in-decompress.patch
  	0090-op0002-buensource-crypto-ccp-fix-the-SEV-probe-in-kexec-boo.patch
  	0091-op0002-buensource-crypto-ccp-Update-driver-messages-to-remo.patch
  	0092-op0002-buensource-x86-entry-Remove-unneeded-need_resched-lo.patch
  	0093-op0002-buensource-x86-irq-64-Remove-a-hardcoded-irq_stack_u.patch
  	0094-op0002-buensource-x86-irq-64-Sanitize-the-top-bottom-confus.patch
  	0095-op0002-buensource-x86-idt-Remove-unused-macro-SISTG.patch
  	0096-op0002-buensource-x86-exceptions-Remove-unused-stack-define.patch
  	0097-op0002-buensource-x86-exceptions-Make-IST-index-zero-based.patch
  	0098-op0002-buensource-x86-cpu_entry_area-Cleanup-setup-function.patch
  	0099-op0002-buensource-x86-exceptions-Add-structs-for-exception-.patch
  	0100-op0002-buensource-x86-cpu_entry_area-Prepare-for-IST-guard-.patch
  	0101-op0002-buensource-x86-cpu_entry_area-Provide-exception-stac.patch
  	0102-op0002-buensource-x86-traps-Use-cpu_entry_area-instead-of-o.patch
  	0103-op0002-buensource-x86-irq-64-Use-cpu-entry-area-instead-of-.patch
  	0104-op0002-buensource-x86-dumpstack-Fix-off-by-one-errors-in-st.patch
  	0105-op0002-buensource-x86-dumpstack-64-Use-cpu_entry_area-inste.patch
  	0106-op0002-buensource-x86-cpu-Prepare-TSS.IST-setup-for-guard-p.patch
  	0107-op0002-buensource-x86-cpu-Remove-orig_ist-array.patch
  	0108-op0002-buensource-x86-exceptions-Disconnect-IST-index-and-s.patch
  	0109-op0002-buensource-x86-exceptions-Enable-IST-guard-pages.patch
  	0110-op0002-buensource-x86-exceptions-Split-debug-IST-stack.patch
  	0111-op0002-buensource-x86-dumpstack-64-Speedup-in_exception_sta.patch
  	0112-op0002-buensource-x86-dumpstack-64-Don-t-evaluate-exception.patch
  	0113-op0002-buensource-x86-kexec-Do-not-map-kexec-area-as-decryp.patch
  	0114-op0002-buensource-x86-kexec-Set-the-C-bit-in-the-identity-m.patch
  	0115-op0002-buensource-x86-boot-Make-the-GDT-8-byte-aligned.patch
  	0116-op0002-buensource-x86-xen-Move-pv-irq-related-functions-und.patch
  	0117-op0002-buensource-x86-entry-64-Simplify-idtentry-a-little.patch
  	0118-op0002-buensource-x86-entry-64-Update-comments-and-sanity-t.patch
  	0119-op0002-buensource-x86-asm-Make-some-functions-local-labels.patch
  	0120-op0002-buensource-linkage-Introduce-new-macros-for-assemble.patch
  	0121-op0002-buensource-x86-asm-Annotate-local-pseudo-functions.patch
  	0122-op0002-buensource-x86-boot-Annotate-data-appropriately.patch
  	0123-op0002-buensource-x86-asm-Use-SYM_INNER_LABEL-instead-of-GL.patch
  	0124-op0002-buensource-x86-insn-eval-Add-support-for-64-bit-kern.patch
  	0125-op0002-buensource-x86-boot-compressed-64-Use-LEA-to-initial.patch
  	0126-op0002-buensource-x86-boot-compressed-64-Use-32-bit-zero-ex.patch
  	0127-op0002-buensource-x86-boot-Remove-KEEP_SEGMENTS-support.patch
  	0128-op0002-buensource-efi-x86-Don-t-depend-on-firmware-GDT-layo.patch
  	0129-op0002-buensource-x86-boot-Reload-GDTR-after-copying-to-the.patch
  	0130-op0002-buensource-x86-boot-GDT-limit-value-should-be-size-1.patch
  	0131-op0002-buensource-x86-boot-Micro-optimize-GDT-loading-instr.patch
  	0132-op0002-buensource-x86-boot-compressed-Fix-reloading-of-GDTR.patch
  	0133-op0002-buensource-x86-boot-Correct-relocation-destination-o.patch
  	0134-op0002-buensource-x86-boot-compressed-Move-.got.plt-entries.patch
  	0135-op0002-buensource-x86-boot-compressed-Force-hidden-visibili.patch
  	0136-op0002-buensource-x86-boot-compressed-Get-rid-of-GOT-fixup-.patch
  	0137-op0002-buensource-x86-boot-compressed-64-Switch-to-__KERNEL.patch
  	0138-op0002-buensource-tracing-Provide-lockdep-less-trace_hardir.patch
  	0139-op0002-buensource-vmlinux.lds.h-Create-section-for-protecti.patch
  	0140-op0002-buensource-lockdep-Prepare-for-noinstr-sections.patch
  	0141-op0002-buensource-x86-traps-Split-trap-numbers-out-in-a-sep.patch
  	0142-op0002-buensource-x86-entry-32-Simplify-common_exception.patch
  	0143-ne0002-buwfeature-HYGON-x86-Move-GET_CR2_INTO-into-common-h.patch
  	0144-op0002-buensource-x86-mm-tracing-Fix-CR2-corruption.patch
  	0145-op0002-buensource-x86-entry-64-Prevent-clobbering-of-saved-.patch
  	0146-op0002-buensource-x86-entry-32-Pass-cr2-to-do_async_page_fa.patch
  	0147-op0002-buensource-x86-entry-64-Reorder-idtentries.patch
  	0148-op0002-buensource-x86-idtentry-Provide-macros-to-define-dec.patch
  	0149-op0002-buensource-x86-entry-common-Provide-idtentry_enter-e.patch
  	0150-op0002-buensource-x86-idtentry-Provide-IDTENTRY_ERRORCODE.patch
  	0151-op0002-buensource-x86-idtentry-Provide-IDTENTRY_RAW.patch
  	0152-op0002-buensource-x86-idtentry-Provide-IDTENTRY_IST.patch
  	0153-op0002-buensource-x86-idtentry-Provide-IDTRENTRY_NOIST-vari.patch
  	0154-op0002-buensource-x86-idtentry-Provide-IDTENTRY_DF.patch
  	0155-op0002-buensource-KVM-SVM-fix-svn_pin_memory-s-use-of-get_u.patch
  	0156-op0002-buensource-x86-cpufeatures-Add-SEV-ES-CPU-feature.patch
  	0157-op0002-buensource-x86-traps-Move-pf-error-codes-to-asm-trap.patch
  	0158-op0002-buensource-x86-insn-Make-inat-tables.c-suitable-for-.patch
  	0159-op0002-buensource-x86-umip-Factor-out-instruction-fetch.patch
  	0160-op0002-buensource-KVM-SVM-Add-GHCB-definitions.patch
  	0161-op0002-buensource-x86-umip-Factor-out-instruction-decoding.patch
  	0162-op0002-buensource-x86-insn-Add-insn_get_modrm_reg_off.patch
  	0163-op0002-buensource-KVM-SVM-Add-GHCB-Accessor-functions.patch
  	0164-op0002-buensource-KVM-SVM-Use-__packed-shorthand.patch
  	0165-op0002-buensource-x86-insn-Add-insn_has_rep_prefix-helper.patch
  	0166-op0002-buensource-x86-boot-compressed-64-Disable-red-zone-u.patch
  	0167-op0002-buensource-x86-boot-compressed-64-Add-IDT-Infrastruc.patch
  	0168-op0002-buensource-x86-boot-compressed-64-Rename-kaslr_64.c-.patch
  	0169-op0002-buensource-x86-boot-compressed-64-Add-page-fault-han.patch
  	0170-op0002-buensource-x86-boot-compressed-64-Always-switch-to-o.patch
  	0171-op0002-buensource-x86-boot-64-Initialize-5-level-paging-var.patch
  	0172-op0002-buensource-x86-boot-compressed-64-Don-t-pre-map-memo.patch
  	0173-op0002-buensource-x86-boot-compressed-64-Change-add_identit.patch
  	0174-op0002-buensource-x86-boot-compressed-64-Add-stage1-VC-hand.patch
  	0175-op0002-buensource-x86-boot-compressed-64-Call-set_sev_encry.patch
  	0176-op0002-buensource-x86-boot-compressed-64-Check-return-value.patch
  	0177-op0002-buensource-x86-boot-compressed-64-Add-set_page_en-de.patch
  	0178-op0002-buensource-x86-boot-compressed-64-Setup-a-GHCB-based.patch
  	0179-op0002-buensource-x86-boot-compressed-64-Unmap-GHCB-page-be.patch
  	0180-op0002-buensource-x86-sev-es-Add-support-for-handling-IOIO-.patch
  	0181-op0002-buensource-x86-fpu-Move-xgetbv-xsetbv-into-a-separat.patch
  	0182-op0002-buensource-x86-sev-es-Add-CPUID-handling-to-VC-handl.patch
  	0183-op0002-buensource-x86-idt-Split-idt_data-setup-out-of-set_i.patch
  	0184-op0002-buensource-x86-head-64-Install-startup-GDT.patch
  	0185-op0002-buensource-x86-head-64-Load-GDT-after-switch-to-virt.patch
  	0186-op0002-buensource-x86-head-64-Load-segment-registers-earlie.patch
  	0187-op0002-buensource-x86-head-64-Switch-to-initial-stack-earli.patch
  	0188-op0002-buensource-x86-head-64-Install-a-CPU-bringup-IDT.patch
  	0189-op0002-buensource-x86-idt-Make-IDT-init-functions-static-in.patch
  	0190-op0002-buensource-x86-head-64-Move-early-exception-dispatch.patch
  	0191-op0002-buensource-x86-sev-es-Add-SEV-ES-Feature-Detection.patch
  	0192-op0002-buensource-x86-sev-es-Print-SEV-ES-info-into-the-ker.patch
  	0193-op0002-buensource-anolis-x86-mm-Print-CSV-info-into-the-ker.patch
  	0194-op0002-buensource-x86-sev-es-Compile-early-handler-code-int.patch
  	0195-op0002-buensource-x86-sev-es-Setup-an-early-VC-handler.patch
  	0196-op0002-buensource-x86-sev-es-Setup-GHCB-based-boot-VC-handl.patch
  	0197-op0002-buensource-x86-sev-es-Setup-per-CPU-GHCBs-for-the-ru.patch
  	0198-op0002-buensource-x86-sev-es-Allocate-and-map-an-IST-stack-.patch
  	0199-op0002-buensource-x86-sev-es-Adjust-VC-IST-Stack-on-enterin.patch
  	0200-op0002-buensource-x86-dumpstack-64-Add-noinstr-version-of-g.patch
  	0201-op0002-buensource-x86-entry-64-Add-entry-code-for-VC-handle.patch
  	0202-op0002-buensource-x86-sev-es-Add-a-Runtime-VC-Exception-Han.patch
  	0203-op0002-buensource-x86-sev-es-Wire-up-existing-VC-exit-code-.patch
  	0204-op0002-buensource-x86-sev-es-Handle-instruction-fetches-fro.patch
  	0205-op0002-buensource-x86-sev-es-Handle-MMIO-events.patch
  	0206-op0002-buensource-x86-sev-es-Handle-MMIO-String-Instruction.patch
  	0207-op0002-buensource-x86-sev-es-Handle-MSR-events.patch
  	0208-op0002-buensource-x86-sev-es-Handle-DR7-read-write-events.patch
  	0209-op0002-buensource-x86-sev-es-Handle-WBINVD-Events.patch
  	0210-op0002-buensource-x86-sev-es-Handle-RDTSC-P-Events.patch
  	0211-op0002-buensource-x86-sev-es-Handle-RDPMC-Events.patch
  	0212-op0002-buensource-x86-sev-es-Handle-INVD-Events.patch
  	0213-op0002-buensource-x86-sev-es-Handle-MONITOR-MONITORX-Events.patch
  	0214-op0002-buensource-x86-sev-es-Handle-MWAIT-MWAITX-Events.patch
  	0215-op0002-buensource-x86-sev-es-Handle-VMMCALL-Events.patch
  	0216-op0002-buensource-x86-sev-es-Handle-AC-Events.patch
  	0217-op0002-buensource-x86-sev-es-Handle-DB-Events.patch
  	0218-op0002-buensource-x86-paravirt-Allow-hypervisor-specific-VM.patch
  	0219-op0002-buensource-x86-kvm-Add-KVM-specific-VMMCALL-handling.patch
  	0220-op0002-buensource-x86-vmware-Add-VMware-specific-handling-f.patch
  	0221-op0002-buensource-x86-realmode-Add-SEV-ES-specific-trampoli.patch
  	0222-op0002-buensource-x86-realmode-Setup-AP-jump-table.patch
  	0223-op0002-buensource-x86-smpboot-Load-TSS-and-getcpu-GDT-entry.patch
  	0224-op0002-buensource-x86-head-64-Don-t-call-verify_cpu-on-star.patch
  	0225-op0002-buensource-x86-sev-es-Support-CPU-offline-online.patch
  	0226-op0002-buensource-x86-sev-es-Handle-NMI-State.patch
  	0227-op0002-buensource-x86-efi-Add-GHCB-mappings-when-SEV-ES-is-.patch
  	0228-op0002-buensource-x86-sev-es-Check-required-CPU-features-fo.patch
  	0229-op0002-buensource-x86-sev-es-Use-GHCB-accessor-for-setting-.patch
  	0230-op0002-buensource-x86-head-64-Disable-stack-protection-for-.patch
  	0231-op0002-buensource-x86-boot-64-Explicitly-map-boot_params-an.patch
  	0232-op0002-buensource-x86-boot-compressed-64-Introduce-sev_stat.patch
  	0233-op0002-buensource-x86-boot-compressed-64-Sanity-check-CPUID.patch
  	0234-op0002-buensource-x86-boot-compressed-64-Check-SEV-encrypti.patch
  	0235-op0002-buensource-x86-head-64-Check-SEV-encryption-before-s.patch
  	0236-op0002-buensource-x86-sev-es-Do-not-support-MMIO-to-from-en.patch
  	0237-op0002-buensource-x86-boot-Remove-unused-finalize_identity_.patch
  	0238-op0002-buensource-x86-uprobes-Do-not-use-prefixes.nbytes-wh.patch
  	0239-op0002-buensource-x86-insn-eval-Use-new-for_each_insn_prefi.patch
  	0240-op0002-buensource-x86-sev-es-Use-new-for_each_insn_prefix-m.patch
  	0241-op0002-buensource-x86-swiotlb-Adjust-SWIOTLB-bounce-buffer-.patch
  	0242-op0002-buensource-x86-cpu-Add-VM-page-flush-MSR-availablili.patch
  	0243-op0002-buensource-KVM-SVM-Remove-the-call-to-sev_platform_s.patch
  	0244-op0002-buensource-KVM-SVM-Add-support-for-SEV-ES-capability.patch
  	0245-op0002-buensource-KVM-SVM-Add-GHCB-accessor-functions-for-r.patch
  	0246-op0002-buensource-KVM-SVM-Add-support-for-the-SEV-ES-VMSA.patch
  	0247-op0002-buensource-KVM-x86-Mark-GPRs-dirty-when-written.patch
  	0248-op0002-buensource-KVM-x86-remove-bogus-GP-injection.patch
  	0249-op0002-buensource-KVM-x86-use-kvm_complete_insn_gp-in-emula.patch
  	0250-op0002-buensource-KVM-x86-introduce-complete_emulated_msr-c.patch
  	0251-op0002-buensource-KVM-SVM-Add-required-changes-to-support-i.patch
  	0252-op0002-buensource-KVM-SVM-Prevent-debugging-under-SEV-ES.patch
  	0253-op0002-buensource-KVM-SVM-Workaround-errata-1096-insn_len-m.patch
  	0254-op0002-buensource-kvm-vmx-fix-coccinelle-warnings.patch
  	0255-op0002-buensource-KVM-SVM-Fix-detection-of-AMD-Errata-1096.patch
  	0256-op0002-buensource-KVM-x86-Add-kvm_x86_ops-hook-to-short-cir.patch
  	0257-op0002-buensource-KVM-SVM-Do-not-allow-instruction-emulatio.patch
  	0258-op0002-buensource-KVM-SVM-Cannot-re-initialize-the-VMCB-aft.patch
  	0259-op0002-buensource-KVM-SVM-Prepare-for-SEV-ES-exit-handling-.patch
  	0260-op0002-buensource-KVM-Introduce-a-new-guest-mapping-API.patch
  	0261-op0002-buensource-kvm-fix-compilation-on-aarch64.patch
  	0262-op0002-buensource-kvm-fix-compilation-on-s390.patch
  	0263-op0002-buensource-kvm-fix-compile-on-s390-part-2.patch
  	0264-op0002-buensource-KVM-Properly-check-if-page-is-valid-in-kv.patch
  	0265-op0002-buensource-KVM-SVM-Add-initial-support-for-a-VMGEXIT.patch
  	0266-op0002-buensource-KVM-SVM-Add-support-for-SEV-ES-GHCB-MSR-p.patch
  	0267-op0002-buensource-KVM-SVM-Add-support-for-SEV-ES-GHCB-MSR-p.patch
  	0268-op0002-buensource-KVM-SVM-Add-support-for-SEV-ES-GHCB-MSR-p.patch
  	0269-op0002-buensource-KVM-SVM-Create-trace-events-for-VMGEXIT-p.patch
  	0270-op0002-buensource-KVM-SVM-Create-trace-events-for-VMGEXIT-M.patch
  	0271-op0002-buensource-KVM-SVM-Support-MMIO-for-an-SEV-ES-guest.patch
  	0272-op0002-buensource-KVM-SVM-Support-string-IO-operations-for-.patch
  	0273-op0002-buensource-KVM-SVM-Add-support-for-EFER-write-traps-.patch
  	0274-op0002-buensource-KVM-SVM-Add-support-for-CR0-write-traps-f.patch
  	0275-op0002-buensource-KVM-SVM-Add-support-for-CR4-write-traps-f.patch
  	0276-op0002-buensource-KVM-SVM-Add-support-for-CR8-write-traps-f.patch
  	0277-op0002-buensource-KVM-x86-Update-__get_sregs-__set_sregs-to.patch
  	0278-op0002-buensource-KVM-SVM-Do-not-report-support-for-SMM-for.patch
  	0279-op0002-buensource-KVM-SVM-Guest-FPU-state-save-restore-not-.patch
  	0280-op0002-buensource-KVM-SVM-Add-NMI-support-for-an-SEV-ES-gue.patch
  	0281-op0002-buensource-KVM-SVM-Set-the-encryption-mask-for-the-S.patch
  	0282-op0002-buensource-KVM-SVM-Update-ASID-allocation-to-support.patch
  	0283-op0002-buensource-KVM-SVM-Provide-support-for-SEV-ES-vCPU-c.patch
  	0284-op0002-buensource-KVM-SVM-Provide-support-for-SEV-ES-vCPU-l.patch
  	0285-op0002-buensource-KVM-SVM-Provide-an-updated-VMRUN-invocati.patch
  	0286-op0002-buensource-KVM-SVM-Provide-support-to-launch-and-run.patch
  	0287-op0002-buensource-KVM-SVM-Add-AP_JUMP_TABLE-support-in-prep.patch
  	0288-op0002-buensource-KVM-SVM-Fix-offset-computation-bug-in-__s.patch
  	0289-op0002-buensource-KVM-SVM-fix-32-bit-compilation.patch
  	0290-op0002-buensource-x86-sev-es-Fix-SEV-ES-OUT-IN-immediate-op.patch
  	0291-op0002-buensource-KVM-SVM-Add-support-for-booting-APs-in-an.patch
  	0292-op0002-buensource-KVM-SVM-Mark-SEV-launch-secret-pages-as-d.patch
  	0293-op0002-buensource-x86-sev-es-Handle-string-port-IO-to-kerne.patch
  	0294-op0002-buensource-x86-sev-Fix-nonistr-violation.patch
  	0295-op0002-buensource-KVM-SVM-Unconditionally-sync-GPRs-to-GHCB.patch
  	0296-op0002-buensource-KVM-x86-Revert-KVM-x86-Mark-GPRs-dirty-wh.patch
  	0297-op0002-buensource-anolis-KVM-SVM-Add-KVM_SEV_SEND_UPDATE_VM.patch
  	0298-op0002-buensource-anolis-KVM-SVM-Add-KVM_SEV_RECEIVE_UPDATE.patch
  	0299-op0002-buensource-anolis-KVM-SVM-Keep-track-EFER-even-thoug.patch
  	0300-op0002-buensource-anolis-KVM-x86-Restore-control-registers-.patch
  	0301-op0002-buensource-anolis-KVM-SVM-Export-MSR_AMD64_SEV_ES_GH.patch
  	0302-op0002-buensource-x86-sev-es-Do-not-unroll-string-I-O-for-S.patch
  	0303-op0002-buensource-x86-sev-es-Remove-subtraction-of-res-vari.patch
  	0304-op0002-buensource-x86-sev-es-Introduce-ip_within_syscall_ga.patch
  	0305-op0002-buensource-x86-sev-es-Check-regs-sp-is-trusted-befor.patch
  	0306-op0002-buensource-x86-sev-es-Use-__copy_from_user_inatomic.patch
  	0307-op0002-buensource-crypto-ccp-Add-SEV_INIT_EX-support.patch
  	0308-op0002-buensource-x86-sev-es-Split-vc_decode_insn.patch
  	0309-op0002-buensource-x86-boot-compressed-64-Cleanup-exception-.patch
  	0310-op0002-buensource-x86-sev-Do-not-require-Hypervisor-CPUID-b.patch
  	0311-op0002-buensource-x86-boot-compressed-64-Reload-CS-in-start.patch
  	0312-op0002-buensource-x86-boot-compressed-64-Setup-IDT-in-start.patch
  	0313-op0002-buensource-x86-boot-compressed-64-Add-32-bit-boot-VC.patch
  	0314-op0002-buensource-x86-boot-compressed-64-Add-CPUID-sanity-c.patch
  	0315-op0002-buensource-x86-boot-compressed-64-Check-SEV-encrypti.patch
  	0316-op0002-buensource-x86-sev-es-Replace-open-coded-hlt-loops-w.patch
  	0317-op0002-buensource-x86-sev-es-Optimize-__sev_es_ist_enter-fo.patch
  	0318-op0002-buensource-KVM-SVM-Use-online_vcpus-not-created_vcpu.patch
  	0319-op0002-buensource-KVM-SVM-Do-not-set-sev-es_active-until-KV.patch
  	0320-op0002-buensource-KVM-SVM-Do-not-allow-SEV-SEV-ES-initializ.patch
  	0321-op0002-buensource-KVM-SVM-Make-sure-GHCB-is-mapped-before-u.patch
  	0322-op0002-buensource-x86-sev-Drop-redundant-and-potentially-mi.patch
  	0323-op0002-buensource-KVM-SVM-Free-sev_asid_bitmap-during-init-.patch
  	0324-op0002-buensource-KVM-SVM-Skip-SEV-cache-flush-if-no-ASIDs-.patch
  	0325-op0002-buensource-KVM-SVM-Move-GHCB-unmapping-to-fix-RCU-wa.patch
  	0326-op0002-buensource-x86-sev-es-Rename-sev-es.-ch-to-sev.-ch.patch
  	0327-op0002-buensource-x86-sev-Move-GHCB-MSR-protocol-and-NAE-de.patch
  	0328-op0002-buensource-x86-sev-es-Move-sev_es_put_ghcb-in-prep-f.patch
  	0329-op0002-buensource-x86-sev-es-Invalidate-the-GHCB-after-comp.patch
  	0330-op0002-buensource-x86-sev-es-Don-t-return-NULL-from-sev_es_.patch
  	0331-op0002-buensource-x86-sev-es-Forward-page-faults-which-happ.patch
  	0332-op0002-buensource-x86-sev-es-Use-__put_user-__get_user-for-.patch
  	0333-op0002-buensource-x86-sev-Check-SME-SEV-support-in-CPUID-fi.patch
  	0334-op0002-buensource-x86-sev-Fix-error-message-in-runtime-VC-h.patch
  	0335-op0002-buensource-x86-insn-eval-Make-0-a-valid-RIP-for-insn.patch
  	0336-op0002-buensource-x86-insn-Extend-error-reporting-from-insn.patch
  	0337-op0002-buensource-x86-sev-Propagate-GP-if-getting-linear-in.patch
  	0338-op0002-buensource-x86-sev-Make-sure-IRQs-are-disabled-while.patch
  	0339-op0002-buensource-x86-sev-Split-up-runtime-VC-handler-for-c.patch
  	0340-op0002-buensource-x86-sev-Add-defines-for-GHCB-version-2-MS.patch
  	0341-op0002-buensource-x86-sev-Use-SEV-prefix-for-messages-from-.patch
  	0342-op0002-buensource-KVM-SEV-Acquire-vcpu-mutex-when-updating-.patch
  	0343-op0002-buensource-x86-sev-Return-an-error-on-a-returned-non.patch
  	0344-op0002-buensource-KVM-SEV-ES-fix-length-of-string-I-O.patch
  	0345-op0002-buensource-KVM-SEV-ES-Set-guest_state_protected-afte.patch
  	0346-op0002-buensource-KVM-SEV-ES-reduce-ghcb_sa_len-to-32-bits.patch
  	0347-op0002-buensource-x86-sev-Carve-out-HV-call-s-return-value-.patch
  	0348-op0002-buensource-x86-sev-Include-fpu-xcr.h.patch
  	0349-op0002-buensource-x86-sev-Fix-stack-type-check-in-vc_switch.patch
  	0350-op0002-buensource-x86-sev-Allow-VC-exceptions-on-the-VC2-st.patch
  	0351-op0002-buensource-KVM-SEV-ES-rename-guest_ins_data-to-sev_p.patch
  	0352-op0002-buensource-KVM-x86-leave-vcpu-arch.pio.count-alone-i.patch
  	0353-op0002-buensource-KVM-SEV-ES-clean-up-kvm_sev_es_ins-outs.patch
  	0354-op0002-buensource-KVM-x86-split-the-two-parts-of-emulator_p.patch
  	0355-op0002-buensource-KVM-x86-remove-unnecessary-arguments-from.patch
  	0356-op0002-buensource-KVM-SEV-ES-keep-INS-functions-together.patch
  	0357-op0002-buensource-KVM-SEV-ES-go-over-the-sev_pio_data-buffe.patch
  	0358-op0002-buensource-x86-sev-Expose-sev_es_ghcb_hv_call-for-us.patch
  	0359-op0002-buensource-KVM-SEV-ES-fix-another-issue-with-string-.patch
  	0360-op0002-buensource-x86-sev-Fix-SEV-ES-INS-OUTS-instructions-.patch
  	0361-op0002-buensource-anolis-KVM-x86-Introduce-control_-pre-pos.patch
  	0362-op0002-buensource-anolis-KVM-SVM-Add-support-for-rebooting-.patch
  	0363-op0002-buensource-anolis-KVM-SVM-Force-flush-caches-before-.patch
  	0364-op0002-buensource-efi-Save-location-of-EFI-confidential-com.patch
  	0365-op0002-buensource-virt-Add-efi_secret-module-to-expose-conf.patch
  	0366-op0002-buensource-efi-Register-efi_secret-platform-device-i.patch
  	0367-op0002-buensource-docs-security-Add-secrets-coco-documentat.patch
  	0368-op0002-buensource-KVM-SEV-WARN-if-SEV-ES-is-marked-active-b.patch
  	0369-op0002-buensource-KVM-SEV-Return-appropriate-error-codes-if.patch
  	0370-op0002-buensource-KVM-SEV-Fall-back-to-vmalloc-for-SEV-ES-s.patch
  	0371-op0002-buensource-KVM-SVM-Do-not-terminate-SEV-ES-guests-on.patch
  	0372-op0002-buensource-dma-direct-always-leak-memory-that-can-t-.patch
  	0373-op0002-buensource-crypto-ccp-Add-SEV_INIT-rc-error-logging-.patch
  	0374-op0002-buensource-swiotlb-do-not-zero-buffer-in-set_memory_.patch
  	0375-op0002-buensource-KVM-SVM-Don-t-intercept-GP-for-SEV-guests.patch
  	0376-op0002-buensource-KVM-SVM-Explicitly-require-DECODEASSISTS-.patch
  	0377-op0002-buensource-KVM-SVM-Never-reject-emulation-due-to-SMA.patch
  	0378-op0002-buensource-KVM-x86-Pass-emulation-type-to-can_emulat.patch
  	0379-op0002-buensource-KVM-SVM-WARN-if-KVM-attempts-emulation-on.patch
  	0380-op0002-buensource-KVM-SVM-Inject-UD-on-attempted-emulation-.patch
  	0381-op0002-buensource-KVM-SVM-Don-t-apply-SEV-SMAP-workaround-o.patch
  	0382-op0002-buensource-KVM-SVM-Don-t-kill-SEV-guest-if-SMAP-erra.patch
  	0383-op0002-buensource-KVM-SVM-Exit-to-userspace-on-ENOMEM-EFAUL.patch
  	0384-op0002-buensource-KVM-SEV-Add-cond_resched-to-loop-in-sev_c.patch
  	0385-op0002-buensource-x86-sev-es-Replace-open-coded-hlt-loop-wi.patch
  	0386-op0002-buensource-KVM-SEV-Add-KVM_EXIT_SHUTDOWN-metadata-fo.patch
  	0387-op0002-buensource-KVM-SVM-Simplify-and-harden-helper-to-flu.patch
  	0388-op0002-buensource-x86-sev-Annotate-stack-change-in-the-VC-h.patch
  	0389-op0002-buensource-x86-sev-Mark-the-code-returning-to-user-s.patch
  	0390-op0002-buensource-dma-direct-don-t-over-decrypt-memory.patch
  	0391-op0002-buensource-anolis-mm-early_ioremap.c-Always-build-ea.patch
  	0392-op0002-buensource-anolis-x86-setup-Preserve-_ENC-flag-when-.patch
  	0393-op0002-buensource-anolis-crypto-ccp-Print-Hygon-CSV-API-ver.patch
  	0394-bu0002-bugfix-HYGON-crypto-ccp-Check-the-firmware-version-w.patch
  	0395-op0002-buensource-anolis-KVM-SVM-Print-Hygon-CSV-support-in.patch
  	0396-op0002-buensource-anolis-KVM-SVM-Fix-the-available-ASID-ran.patch
  	0397-op0002-buensource-anolis-x86-csv2-Keep-in-atomic-context-wh.patch
  	0398-op0002-buensource-KVM-SVM-Fix-off-by-one-indexing-when-null.patch
  	0399-op0002-buensource-x86-sev-Remove-duplicated-assignment-to-v.patch
  	0400-op0002-buensource-x86-head-64-Re-enable-stack-protection.patch
  	0401-op0002-buensource-KVM-SVM-Zero-out-the-VMCB-array-used-to-t.patch
  	0402-op0002-buensource-x86-efi-Restore-Firmware-IDT-before-calli.patch
  	0403-op0002-buensource-x86-entry-64-Move-non-entry-code-into-.te.patch
  	0404-op0002-buensource-KVM-SVM-fix-error-return-code-in-svm_crea.patch
  	0405-op0002-buensource-KVM-x86-Fix-NULL-dereference-at-kvm_msr_i.patch
  	0406-op0002-buensource-KVM-x86-Exit-to-userspace-if-emulation-pr.patch
  	0407-op0002-buensource-KVM-x86-Add-proper-ReST-tables-for-usersp.patch
  	0408-op0002-buensource-KVM-VMX-Ignore-userspace-MSR-filters-for-.patch
  	0409-op0002-buensource-KVM-VMX-Forbid-userspace-MSR-filters-for-.patch
  	0410-op0002-buensource-KVM-x86-Protect-userspace-MSR-filter-with.patch
  	0411-op0002-buensource-doc-kvm-Fix-wrong-entry-for-KVM_CAP_X86_M.patch
  	0412-op0002-buensource-KVM-nVMX-Handle-dynamic-MSR-intercept-tog.patch
  	0413-op0002-buensource-KVM-x86-Add-compat-handler-for-KVM_X86_SE.patch
  	0414-op0002-buensource-swiotlb-using-SIZE_MAX-needs-limits.h-inc.patch
  	0415-op0002-buensource-Documentation-DMA-API-fix-a-function-name.patch
  	0416-op0002-buensource-dma-mapping-add-a-dma_addressing_limited-.patch
  	0417-op0002-buensource-dma-direct-only-limit-the-mapping-size-if.patch
  	0418-op0002-buensource-dma-mapping-use-dma_get_mask-in-dma_addre.patch
  	0419-op0002-buensource-docs-virt-kvm-close-inline-string-literal.patch
  	0420-op0002-buensource-vfio-pci-Use-io_remap_pfn_range-for-PCI-I.patch
  	0421-op0002-buensource-KVM-SVM-Use-kzalloc-for-sev-ioctl-interfa.patch
  	0422-op0002-buensource-KVM-SVM-Fix-potential-overflow-in-SEV-s-s.patch
  	0423-op0002-buensource-crypto-ccp-shutdown-SEV-firmware-on-kexec.patch
  	0424-op0002-buensource-crypto-ccp-Flush-the-SEV-ES-TMR-memory-be.patch
  	0425-op0002-buensource-x86-asm-Replace-__force_order-with-a-memo.patch
  	0426-op0002-buensource-x86-debug-Fix-stack-recursion-caused-by-w.patch
  	0427-op0002-buensource-x86-xen-avoid-warning-in-Xen-pv-guest-wit.patch
  	0428-op0002-buensource-x86-sev-es-Correctly-track-IRQ-states-in-.patch
  	0429-op0002-buensource-KVM-X86-Fix-failure-to-boost-kernel-lock-.patch
  	0430-op0002-buensource-KVM-x86-Assume-a-64-bit-hypercall-for-gue.patch
  	0431-bu0002-bugfix-HYGON-KVM-x86-Avoid-warning-when-CSV2-guest-i.patch
  	0432-op0002-buensource-KVM-x86-Always-set-kvm_run-if_flag.patch
  	0433-op0002-buensource-KVM-SVM-Add-register-operand-to-vmsave-ca.patch
  	0434-op0002-buensource-crypto-ccp-Fix-the-INIT_EX-data-file-open.patch
  	0435-op0002-buensource-crypto-ccp-Fail-the-PSP-initialization-wh.patch
  	0436-op0002-buensource-KVM-x86-Don-t-WARN-if-userspace-mucks-wit.patch
  	0437-op0002-buensource-x86-unwind-fp-Fix-FP-unwinding-in-ret_fro.patch
  	0438-op0002-buensource-KVM-VMX-Heed-the-msr-argument-in-msr_writ.patch
  	0439-op0002-buensource-crypto-ccp-During-shutdown-check-SEV-data.patch
  	0440-op0002-buensource-x86-xen-Fix-noinstr-fail-in-exc_xen_unkno.patch
  	0441-ne0002-buwfeature-HYGON-x86-cpu-Show-Hygon-csv-csv2-feature.patch
  	0442-op0002-buensource-swiotlb-Remove-call-to-sme_active.patch
  	0443-op0002-buensource-x86-speculation-Rename-RETPOLINE_AMD-to-R.patch
  	0444-op0002-buensource-anolis-x86-cpufeatures-Add-CPUID_8C86_000.patch
  	0445-op0002-buensource-anolis-x86-cpufeatures-Add-CSV3-CPU-featu.patch
  	0446-bu0002-bugfix-HYGON-vfio-pci-Disable-VFIO-pci-reset-for-hyg.patch
  	0447-op0002-buensource-anolis-crypto-ccp-Add-CCP-PSP-PCI-interfa.patch
  	0448-op0002-buensource-KVM-x86-Move-HF_NMI_MASK-and-HF_IRET_MASK.patch
  	0449-op0002-buensource-KVM-SVM-Don-t-defer-NMI-unblocking-until-.patch
  	0450-op0002-buensource-x86-sev-Make-enc_dec_hypercall-accept-a-s.patch
  	0451-bu0002-bugfix-HYGON-x86-csv2-Fix-VC-VC2-stack-cea-mapping.patch
  	0452-op0002-buensource-crypto-ccp-Clear-PSP-interrupt-status-reg.patch
  	0453-op0002-buensource-Fix-unsynchronized-access-to-sev-members-.patch
  	0454-bu0002-bugfix-HYGON-KVM-SVM-Unmap-ghcb-pages-if-they-re-sti.patch
  	0455-ne0002-buwfeature-HYGON-crypto-ccp-Add-CCP-PSP-PCI-interfac.patch
  	0456-op0002-buensource-mm-cma-add-PF-flag-to-force-non-cma-alloc.patch
  	0457-op0002-buensource-mm-update-get_user_pages_longterm-to-migr.patch
  	0458-bu0002-bugfix-KVM-SVM-Pin-SEV-guest-memory-out-of-CMA-area.patch
  	0459-ne0002-buwfeature-crypto-ccp-Define-CSV-key-management-comm.patch
  	0460-op0002-butimization-HYGON-mm-cma-Add-API-to-enable-concurre.patch
  	0461-ne0002-buwfeature-x86-csv-Manage-CSV-guest-s-private-memory.patch
  	0462-ne0002-buwfeature-crypto-ccp-Add-SET_SMR-SET_SMCR-commands-.patch
  	0463-ne0002-buwfeature-KVM-Define-CSV-key-management-command-id.patch
  	0464-ne0002-buwfeature-KVM-SVM-CSV-Add-KVM_CSV_INIT-command.patch
  	0465-ne0002-buwfeature-KVM-SVM-CSV-Add-KVM_CSV_LAUNCH_ENCRYPT_DA.patch
  	0466-ne0002-buwfeature-KVM-SVM-CSV-Add-KVM_CSV_LAUNCH_ENCRYPT_VM.patch
  	0467-ne0002-buwfeature-KVM-SVM-CSV-Manage-CSV-guest-s-nested-pag.patch
  	0468-ne0002-buwfeature-x86-boot-compressed-64-Add-CSV-guest-dete.patch
  	0469-ne0002-buwfeature-x86-boot-compressed-64-Init-CSV-secure-ca.patch
  	0470-ne0002-buwfeature-x86-boot-compressed-64-Add-CSV-update-pag.patch
  	0471-ne0002-buwfeature-x86-kernel-Add-CSV-early-update-enc-dec-r.patch
  	0472-ne0002-buwfeature-x86-kernel-Set-bss-decrypted-memory-as-sh.patch
  	0473-ne0002-buwfeature-x86-Update-memory-shared-private-attribut.patch
  	0474-ne0002-buwfeature-x86-Add-support-for-changing-the-memory-a.patch
  	0475-ne0002-buwfeature-x86-mm-Print-CSV-info-into-kernel-log.patch
  	0476-op0002-buensource-mm-thp-compaction-cma-allow-THP-migration.patch
  	0477-op0002-buensource-mm-page_alloc-cma-conditionally-prefer-cm.patch
  	0478-op0002-buensource-mm-apply-per-task-gfp-constraints-in-fast.patch
  	0479-op0002-buensource-mm-compaction-let-isolate_migratepages_-r.patch
  	0480-op0002-buensource-mm-make-alloc_contig_range-handle-free-hu.patch
  	0481-op0002-buensource-mm-make-alloc_contig_range-handle-in-use-.patch
  	0482-bu0002-bugfix-HYGON-mm-release-hugetlb-pages-to-buddy-alloc.patch
  	0483-op0002-buensource-mm-page_alloc-move-draining-pcplists-to-p.patch
  	0484-op0002-buensource-mm-page_alloc-avoid-expensive-reclaim-whe.patch
  	0485-ne0002-buwfeature-HYGON-crypto-ccp-Define-CSV-migration-com.patch
  	0486-ne0002-buwfeature-HYGON-KVM-SVM-CSV-Add-KVM_CSV_SEND_ENCRYP.patch
  	0487-ne0002-buwfeature-HYGON-KVM-SVM-CSV-Add-KVM_CSV_SEND_ENCRYP.patch
  	0488-ne0002-buwfeature-HYGON-KVM-SVM-CSV-Add-KVM_CSV_RECEIVE_ENC.patch
  	0489-ne0002-buwfeature-HYGON-KVM-SVM-CSV-Add-KVM_CSV_RECEIVE_ENC.patch
  	0490-ne0002-buwfeature-crypto-ccp-Add-psp-interrupt-x86-register.patch
  	0001-bu0002-bugfix-fix-bug-that-SM2-encryption-of-long-data-caus.patch
  	0002-bu0002-bugfix-fix-driver-corruption-due-to-incorrent-variab.patch
  	0003-ne0002-buwfeature-Support-psp-virtualization.patch
  	0004-ne0002-buwfeature-Support-tkm-virtualization.patch
  	0005-ne0002-buwfeature-support-tkm-key-isolation-for-kernel-4.19.patch
  	0006-op0002-butimize-Allow-VM-without-a-configured-vid-to-use-TK.patch
  	0001-bu0002-bugfix-fix-csv-migration-issue.patch


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-1
changelog:
  - use rpm built-in filtering of provides (rhbz#830153)
  - remove strain debug fprintf() (rhbz#831567)


author: Tomas Mraz <tmraz@redhat.com> 1.2.0-1
changelog:
  - add maxsequence check for too long monotonic character sequence.
  - clarified alternative licensing to GPLv2+.
  - add local_users_only option to skip the pwquality checks for
    non-locals. (thanks to Stef Walter)


author: Tomas Mraz <tmraz@redhat.com> 1.2.1-1
changelog:
  - properly free pwquality settings
  - add extern "C" to public header
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.2.2-1
changelog:
  - manual page fixes
  - make it possible to set the maxsequence configuration value
  - updated translations from Transifex


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-1
changelog:
  - fix problem with parsing the pam_pwquality options
    patch by Vladimir Sorokin.
  - updated translations from Transifex
  - treat empty user or password as NULL
  - move the library to /usr


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-5
changelog:
  - fix brittle configuration settings (#1259633)
  - fix abort when generating large passwords on some architectures


author: Michal Fabik <mfabik@redhat.com> 2.9.5-7
changelog:
  - bugzilla: change the default bugzilla group
  - tests: Disable strcpm'ing a freed pointer
  - Add autogen.sh
  - Resolves #1660449


author: Martin Kutlak <mkutlak@redhat.com> - 2.9.5-10
changelog:
  - reportclient: Search for required packages recursively
  - reportclient: Find and download required debuginfo packages
  - report-client: Find debuginfos in own method
  - Resolves: rhbz#1783897


author: Michal Židek <mzidek@redhat.com> - 2.9.5-12
changelog:
  - Resolves: rhbz#1835388 - abrt-addon-ccpp causes failures during openscap scans on CCE-27119-7
  - This is just libreport side (abrt also needs to be patched)


author: zhoujie <zhoujie@nfschina.com> - 2.9.5-15.1
changelog:
  - Disable centos sub package
  - Disable centos sub package
  - Don't requires subscription for Anolis OS
  - Recover sub packages to fix abrt-cli requires


author: Wim Taymans <wtaymans@redhat.com> - 1.23.8-3
changelog:
  - Remove pointless Enhances:
  - Fix splelling mistake
  - change package name from libs-devel to devel and add Obsolete:
  - see rhbz#1394147


author: Tomas Hoger <thoger@redhat.com> - 16.02-7
changelog:
  - Add conditional for building with(out) GUI support.  Keep GUI enabled for
    Fedora and EPEL builds, but disabled for RHEL.
  - Add missing dependency - 7zG requires 7z.so, so p7zip-gui needs to require
    p7zip-plugins.


author: Sérgio Basto <sergio@serjux.com> - 16.02-9
changelog:
  - Security fix for CVE-2017-17969 (from Debian)
  - Add 05-hardening-flags.patch, 09-man-update.patch, 10-drop-fm-doc.patch
    and 14-Fix-g++-warning.patch patches from Debian, very small changes
    better documentation, compile flags and compile warning.


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.6-2
changelog:
  - disable introspection in anticipation of pygobject3
  - https://bugzilla.redhat.com/show_bug.cgi?id=731851
  - pygobject2 now becomes legacy for static binding support (e.g. PyGTK)


author: Colin Walters <walters@redhat.com> - 2.28.6-8
changelog:
  - Add various missing BuildRequires, switch to pkgconfig() syntax
  - Backport upstream patch which fixes a crasher in some applications


author: Nils Philippsen <nils@redhat.com> - 1.3.4-1
changelog:
  - don't ask libuser to create a home directory over an existing one (#908852,
    patch by Miloslav Trmač)
  - correct check if SELinux is enabled


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.19.2-6
changelog:
  - Drop old trigger scriplet
  - Reenable package notes and strip LDFLAGS from krb5-config (rhbz#2048909)


author: Julien Rische <jrische@redhat.com> - 1.19.2-10
changelog:
  - Use p11-kit as default PKCS11 module
  - Resolves: rhbz#2073274
  - Try harder to avoid password change replay errors
  - Resolves: rhbz#2072059


author: Julien Rische <jrische@redhat.com> - 1.19.2-11
changelog:
  - Allow libkrad UDP/TCP connection to localhost in FIPS mode
  - Resolves: rhbz#2082189
  - Read GSS configuration files with mtime 0


author: Andreas Schneider <asn@redhat.com> - 1.19.2-12
changelog:
  - Use baserelease to set the release number
  - Do not define netlib, but use autoconf detection for res_* functions
  - Add missing BR for resolv_wrapper to run t_discover_uri.py


author: Isaac Boukris <iboukris@redhat.com> - 2.2.0-1
changelog:
  - Resolves: rhbz#1878114 - Rebase libldb to the version required by Samba
  - Resolves: rhbz#1794349 - Build libldb with lmdb support


author: Andreas Schneider <asn@redhat.com> - 2.3.0-1
changelog:
  - resolves: rhbz#1945021 - Update to version 2.3.0
  - resolves: rhbz#1897082 - Fix libldb tests on aarch64


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-1
changelog:
  - Resolves: rhbz#1684577 - Rebase libtalloc to version 2.1.16 for Samba
  - Resolves: rhbz#1597315 - libtalloc uses Python 2 to build
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-2
changelog:
  - Remove python2 libraries on upgrade
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-3
changelog:
  - Also obsolete python2-libtalloc-debuginfo
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.37-1
changelog:
  - New upstream release 0.9.37
  - Use RHEL_ALLOW_PYTHON2_FOR_BUILD=1 for build
  - Use %{__python2}, not "python", as the Python2 interpreter


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.39-1
changelog:
  - Resolves: #1684580 - Rebase libtevent to version 0.9.36 for Samba
  - Resolves: #1597318 - libtevent uses Python 2 to build
  - Resolves: #1567139 - libtevent: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com>
changelog:
  - Remove the python2 subpackages on upgrade
  - Resolves: #1567139 - libtevent: Drop Python 2 subpackage from RHEL 8


author: Isaac Boukris <iboukris@redhat.com> - 0.10.0-2
changelog:
  - Resolves: #1754421 - Upgrade tevent to 0.10.0 version for samba
  - Related: #1754421 - Fix sssd tests (tevent)


author: tingfu <tingfu@nfs-hlj.com> - 8.0p1-10.8 + 0.10.3-7.4
changelog:
  - fix CVE-2023-48795 CVE-2023-38408 CVE-2020-15778
  - add openssh-8.0p1-CVE-2023-48795.patch and openssh-8.0p1-CVE-2023-38408.patch and openssh-8.0p1-CVE-2020-15778.patch


author: dash <dash@nfschina.com> [4.19.113-18.119.nfs]
changelog:
  - add AQTJ devctl functions
  - 0001-add-aqtj-devctl-call-code.patch
  - 0002-add-aqtj-devctl-core-code.patch
  - 0003-usb-endpoint-judge.patch
  - 0004-use-bus-find-device.patch
  - 0005-recover-usb-endpoint.patch
  - 0006-aqtj-add-fs-perm-chk.patch
  - kernel-4.19.113-fix-cdrom-readonly-and-disable-can-burn-error.patch
  - 0001-fix-devt-coredump.patch
  - 0008-fix-null-pointer.patch
  - aqtj-vm_devctl.patch


author: wenyu <wenyu1@nfschina.com> [4.19.113-18.120.nfs]
changelog:
  - init for nfssec
  - 0001-port-kernel-change.patch
  - 0002-add-nfssec-security-mode.patch
  - 0003-add-lsm-hooks-for-nfssec.patch


author: wangkerong <kerong@nfschina.com> [4.19.113-18.123.nfs]
changelog:
  - fix
  - CVE-2021-46909   CVE-2021-46915   CVE-2021-46921   CVE-2021-46924   
  - CVE-2021-46928   CVE-2021-46929   CVE-2021-46932   CVE-2021-46933   
  - CVE-2021-46934   CVE-2021-46935   CVE-2021-46936   CVE-2021-46938   
  - CVE-2021-46939   CVE-2021-46953   CVE-2021-46955   CVE-2021-46960   
  - CVE-2021-46988   CVE-2021-46989   CVE-2021-46991   CVE-2021-46992   
  - CVE-2021-46998   CVE-2021-46999   CVE-2021-47006   CVE-2021-47010   
  - CVE-2021-47013   CVE-2021-47015   CVE-2021-47024   CVE-2021-47034   
  - CVE-2021-47061   CVE-2023-52477   CVE-2023-52478   CVE-2023-52500   
  - CVE-2023-52502   CVE-2023-52504   CVE-2023-52509   CVE-2023-52507   
  - CVE-2023-52510   CVE-2023-52515   CVE-2023-52525   CVE-2023-52527   
  - CVE-2023-52528   CVE-2023-52530   CVE-2023-52566   CVE-2023-52567   
  - CVE-2023-52574   CVE-2023-52577   CVE-2021-47114   CVE-2021-47117   
  - CVE-2021-47118   CVE-2021-47121   CVE-2021-47122   CVE-2024-26624   
  - CVE-2024-26625   CVE-2023-52583   CVE-2023-52587   CVE-2023-52594   
  - CVE-2023-52597   CVE-2023-52598   CVE-2023-52599   CVE-2023-52600   
  - CVE-2023-52602   CVE-2023-52603   CVE-2023-52604   CVE-2023-52605   
  - CVE-2023-52606   CVE-2023-52607   CVE-2021-47082   CVE-2021-47084   
  - CVE-2021-47085   CVE-2021-47100   CVE-2021-47103   CVE-2022-48629   
  - CVE-2021-47115


author: fenghui <fenghui@nfschina.com> [4.19.113-18.125.nfs]
changelog:
  - Supports Hygon 4 CPU. v2 v3
  - 	Hygon_000_x86_hygon_family18h_addon_20230103.patch
  - 	Hygon_001_backport_dependent_upstream_patches_202303.patch
  - 	Hygon_002_x86_add_hygon_family18h_model4h_202303.patch
  - 	Hygon_003_x86_add_hygon_family18h_model5h_202303.patch
  - 	Hygon_004_x86_add_hygon_family18h_model6h_202303.patch
  - 	004-EDAC-amd64-Revert-hi_addr_offset-for-Hygon-famil.patch
  - 	005-EDAC-amd64-Fix-intlv_num_chan-for-Hygon-family-1.patch
  - 	006-x86-amd_nb-Get-DF-ID-from-F5-device-for-Hygon-fa.patch
  - 	007-EDAC-amd64-Adjust-UMC-channel-for-Hygon-family-1.patch
  - 	008-ALSA-hda-Add-Hygon-HD-Audio-support.patch
  - 	009-ALSA-hda-Fix-single-byte-write-failure-issue-for.patch
  - 	010-perf-x86-uncore-Add-L3-PMU-support-for-Hygon-fam.patch
  - 	011-Add-support-for-Hygon-family-18h-model-4h-5h-6h-.patch


author: wangkerong <kerong@nfschina.com> [4.19.113-18.126.nfs]
changelog:
  - fix 
  - CVE-2024-26668 CVE-2024-26671 CVE-2024-26675 CVE-2024-26679 
  - CVE-2023-52639 CVE-2024-26685 CVE-2024-26686 CVE-2024-26687 
  - CVE-2024-26696 CVE-2024-26697 CVE-2024-26704 CVE-2024-26715 
  - CVE-2024-26720 CVE-2024-26722 CVE-2024-26726 CVE-2024-26733 
  - CVE-2024-26735 CVE-2024-26736 CVE-2024-26743 CVE-2024-26744 
  - CVE-2024-26751 CVE-2024-26752 CVE-2024-26754 CVE-2024-26759 
  - CVE-2024-26763 CVE-2024-26764 CVE-2024-26766 CVE-2024-26772 
  - CVE-2024-26773 CVE-2024-26775 CVE-2024-26777 CVE-2024-26778 
  - CVE-2024-26779 CVE-2024-26791 CVE-2024-26793 CVE-2024-26801 
  - CVE-2024-26804 CVE-2024-26805 CVE-2024-26810 CVE-2021-47182 
  - CVE-2021-47181 CVE-2021-47184 CVE-2021-47189 CVE-2021-47194 
  - CVE-2021-47203 CVE-2021-47206 CVE-2021-47207 CVE-2021-47210 
  - CVE-2021-47216 CVE-2021-47217 CVE-2024-26816 CVE-2024-26817 
  - CVE-2023-52644 CVE-2024-26878


author: zhangbinchen <zhangbinchen@openanolis.org> - 2.9.5-15.0.1
changelog:
  - Disable centos sub package
  - Don't requires subscription for Anolis OS
  - Remove unused sub packages
  - cherry-pick [1acfc44 00b6684 2f29df5]


author: shangyb <yibin@nfschina.com> - 2:2.11.2-2
changelog:
  - fix CVE-2024-32039、CVE-2024-32040、CVE-2024-32041、CVE-2024-32458、
    CVE-2024-32459、CVE-2024-32460、CVE-2024-32658、CVE-2024-32659、CVE-2024-32660


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-7
changelog:
  - Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
  - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
  - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-8
changelog:
  - Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
  - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.0-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
  - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
  - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
  - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
  - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
  - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
  - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
  - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
  - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
  - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
  - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
  - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
  - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
  - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
  - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
  - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
  - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
  - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
  - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
  - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
  - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
  - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
  - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
  - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
  - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
  - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
  - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
  - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
  - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-2
changelog:
  - Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
  - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
  - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
  - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
  - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
  - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
  - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2
changelog:
  - Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
  - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2.1
changelog:
  - Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]


author: tingfu <tingfu@nfs-hlj.com> - 8.0p1-10.8 + 0.10.3-7.4
changelog:
  - update CVE-2023-48795 
  - add openssh-8.0p1-CVE-2023-48795-add.patch 
  - fix CVE-2023-48795 ssh command issue


author: liuda <liuda@nfschina.com> - 1:1.1.1k-7.0.11
changelog:
  - Fix CVE-2024-2511
  - add: openssl-1.1.1-1-CVE-2024-2511.patch
  - add: openssl-1.1.1-2-CVE-2024-2511.patch


author: Zhang Dongjun <dongjun@cpu-os.ac.cn> - 1.0.4.nfs.16
changelog:
  - bug#0357410: RTM1.7 设备管理器中主板、光驱没有显示硬件品牌Logo
  - Patch: device-manager-1.0-For4.0-Add-suma-cancon-logo.patch


author: Xunian Tang <xunian@nfschina.com> - 1.0.4.nfs.17
changelog:
  - 从svs2.4移植:device-manager-1.0-For4.0-MdySystem-to-MainServer.patch
  - Fix 0357667:H620-G30S3,设备管理器下电脑概览中电脑描述错误,应Main Server Chassis.


author: xunian <xunian@nfschina.com> [4.19.113-18.130.nfs]
changelog:
  - Support PHYTIUM 5000C;
  - Update PHYTIUM codes ver12.
  - Fix: pcieplug for PHYTIUM 5000C;
  - Fix: reconfig for x86_64 compile.


author: wangkerong <kerong@nfschina.com> [4.19.113-18.138.nfs]
changelog:
  - fix CVE
  - CVE-2024-26894 CVE-2024-26898 CVE-2024-26901 CVE-2024-26903 
  - CVE-2023-52646 CVE-2022-48636 CVE-2022-48651 CVE-2022-48659 
  - CVE-2023-52650 CVE-2023-52651 CVE-2024-26931 CVE-2024-26934 
  - CVE-2024-26955 CVE-2024-26956 CVE-2024-26957 CVE-2024-26965 
  - CVE-2024-26966 CVE-2024-26969 CVE-2024-26973 CVE-2024-26976 
  - CVE-2024-26981 CVE-2024-26984 CVE-2024-26993 CVE-2024-26999 
  - CVE-2024-27000 CVE-2024-27008 CVE-2024-27013 CVE-2024-27024 
  - CVE-2024-27028 CVE-2024-27046 CVE-2024-27059 CVE-2024-27074 
  - CVE-2022-48671 CVE-2024-27075 CVE-2024-27077 CVE-2024-27078 
  - CVE-2024-27388 CVE-2022-48672 CVE-2022-48687 CVE-2022-48688 
  - CVE-2022-48693 CVE-2022-48697 CVE-2022-48701 CVE-2022-48702 
  - CVE-2022-48704 CVE-2024-26663 CVE-2024-26654


author: Carl George <carlwgeorge@fedoraproject.org> - 1.2.26-1
changelog:
  - Update to version 1.2.26
  - CVE-2023-49084, CVE-2023-49085, CVE-2023-49086, CVE-2023-49088, CVE-2023-50250, CVE-2023-51448


author: Carl George <carlwgeorge@fedoraproject.org> - 1.2.27-1
changelog:
  - Update to version 1.2.27
  - CVE-2024-25641, CVE-2024-29894, CVE-2024-31443, CVE-2024-31444, CVE-2024-31445, CVE-2024-31458, CVE-2024-31459, CVE-2024-31460, CVE-2024-34340


author: Remi Collet <remi@remirepo.net> - 8.0-3
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php81
  - add patch for PHP 8.1 from
    https://github.com/websupport-sk/pecl-memcache/pull/88


author: Remi Collet <remi@remirepo.net> - 8.0-6
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php82
  - add patch for PHP 8.2 from
    https://github.com/websupport-sk/pecl-memcache/pull/104


author: Thomas Woerner <twoerner@redhat.com> - 8.10-7
changelog:
  - removed fakeroot requirement and all qa_robot scripts (RHBZ#1615605)
  - Fixed missing build requires for python3-devel


author: Michal Domonkos <mdomonko@redhat.com> - 8.10-8
changelog:
  - spectool: ignore query string in URL (RHBZ#1826299)
  - Fix TypeError in rpmdev-rmdevelrpms and rpmdev-checksig (RHBZ#1851499)


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.3-0
changelog:
  - related: rhbz#2077468 - Rebase Samba to 4.16.3
  - resolves: rhbz#2106672 - The pcap background queue process should not be stopped
  - resolves: rhbz#2106263 - Fix crash in rpcd_classic
  - resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name


author: Andreas Schneider <asn@redhat.com> - 4.17.2-1
changelog:
  - resolves: rhbz#2132051 - Update to version 4.17.2
  - resolves: rhbz#2126174 - Fix CVE-2022-1615
  - resolves: rhbz#2108487 - ctdb: Add dependency to samba-winbind-clients


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.2-2
changelog:
  - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
  - related: rhbz#2132051


author: Pavel Filipenský <pfilipenn@redhat.com> - 4.17.4-0
changelog:
  - related: rhbz#2132051 - Update to version 4.17.4
  - resolves: rhbz#2154370 - Fix CVE-2022-38023
  - resolves: rhbz#2142331 - Fix %U include directive for share listing (netshareenum)
  - resolves: rhbz#2148943 - Fix Winbind to retrieve user groups from Active Directory


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-9.el8
changelog:
  - edk2-OvmfPkg-QemuVideoDxe-unbreak-secondary-vga-and-bochs.patch [bz#1806359]
  - Resolves: bz#1806359
    (bochs-display cannot show graphic wihout driver attach)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-1.el8
changelog:
  - Rebase to edk2-stable202005 [bz#1817035]
  - Resolves: bz#1817035
    ((edk2-rebase-rhel-8.3) - rebase edk2 to upstream tag edk2-stable202005 for RHEL-8.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-2.el8
changelog:
  - edk2-OvmfPkg-QemuKernelLoaderFsDxe-suppress-error-on-no-k.patch [bz#1844682]
  - edk2-OvmfPkg-GenericQemuLoadImageLib-log-Not-Found-at-INF.patch [bz#1844682]
  - edk2-SecurityPkg-Tcg2Dxe-suppress-error-on-no-swtpm-in-si.patch [bz#1844682]
  - Resolves: bz#1844682
    (silent build of edk2-aarch64 logs DEBUG_ERROR messages that don't actually report serious errors)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-3.el8
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-pause-in-WaitForSemaphore-.patch [bz#1861718]
  - Resolves: bz#1861718
    (Very slow boot when overcommitting CPU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-4.el8
changelog:
  - edk2-OvmfPkg-SmmControl2Dxe-negotiate-ICH9_LPC_SMI_F_CPU_.patch [bz#1849177]
  - edk2-OvmfPkg-CpuHotplugSmm-fix-CPU-hotplug-race-just-befo.patch [bz#1849177]
  - edk2-OvmfPkg-CpuHotplugSmm-fix-CPU-hotplug-race-just-afte.patch [bz#1849177]
  - edk2-CryptoPkg-OpensslLib-Upgrade-OpenSSL-to-1.1.1g.patch [bz#1893806]
  - edk2-redhat-bump-OpenSSL-dist-git-submodule-to-1.1.1g-RHE.patch [bz#1893806]
  - Resolves: bz#1849177
    (OVMF: negotiate "SMI on VCPU hotplug" with QEMU)
  - Resolves: bz#1893806
    (attempt advancing RHEL8 edk2's OpenSSL submodule to RHEL8 OpenSSL 1.1.1g (or later))


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-5.el8
changelog:
  - edk2-MdeModulePkg-LzmaCustomDecompressLib-catch-4GB-uncom.patch [bz#1892318]
  - edk2-redhat-add-OVMF-binary-that-will-support-SEV-ES.patch [bz#1956837]
  - Resolves: bz#1892318
    (edk2: possible heap corruption with LzmaUefiDecompressGetInfo [rhel-8])
  - Resolves: bz#1956837
    (Additional build of edk2 without SMM (dual build / sub-package) for SEV-ES)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-1
changelog:
  - Rebase to edk2-stable202105 [bz#1938238]
  - Resolves: bz#1938238
    ((edk2-rebase-rhel-8.5) - rebase edk2 to edk2-stable202105 for RHEL-8.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-2
changelog:
  - edk2-NetworkPkg-IScsiDxe-wrap-IScsiCHAP-source-files-to-8.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-simplify-ISCSI_CHAP_AUTH_DATA.In.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-clean-up-ISCSI_CHAP_AUTH_DATA.Ou.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-clean-up-library-class-dependenc.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-potential-integer-overflow-i.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-assert-that-IScsiBinToHex-always.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-reformat-IScsiHexToBin-leading-c.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-hex-parsing.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-buffer-overflo.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-check-IScsiHexToBin-return-value.patch [bz#1956408]
  - Resolves: bz#1956408
    (edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe [rhel-8.5.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-3
changelog:
  - edk2-MdeModulePkg-PartitionDxe-Ignore-PMBR-BootIndicator-.patch [bz#1988762]
  - Resolves: bz#1988762
    (edk2 does not ignore PMBR protective record BootIndicator as required by UEFI spec)


author: shangyb <yibin@nfschina.com> [4.19.113-18.155.nfs]
changelog:
  - fix CVEs
    CVE-2024-38618 CVE-2024-38621 CVE-2024-38627 CVE-2024-38633 CVE-2024-38634
    CVE-2024-38637 CVE-2024-38659 CVE-2024-38780 CVE-2024-39292 CVE-2024-38661
    CVE-2024-39276 CVE-2024-39301 CVE-2021-47576 CVE-2021-47579 CVE-2021-47583
    CVE-2021-47587 CVE-2021-47588 CVE-2021-47589 CVE-2021-47598 CVE-2021-47600
    CVE-2021-47602 CVE-2021-47603 CVE-2021-47606 CVE-2021-47609 CVE-2021-47611
    CVE-2021-47612 CVE-2024-38549 CVE-2024-38552 CVE-2024-31076 CVE-2024-36286
    CVE-2024-37353 CVE-2024-38612 CVE-2024-38613 CVE-2022-48732 CVE-2022-48736
    CVE-2022-48737 CVE-2022-48738 CVE-2022-48742 CVE-2022-48743 CVE-2022-48754
    CVE-2022-48756 CVE-2022-48757 CVE-2022-48758 CVE-2022-48759 CVE-2022-48760
    CVE-2024-38558 CVE-2024-38559 CVE-2024-38560 CVE-2024-38565 CVE-2024-38567
    CVE-2024-38578 CVE-2024-38579 CVE-2024-38589 CVE-2024-38596 CVE-2024-38599
    CVE-2024-38601 CVE-2021-4439  CVE-2021-47619 CVE-2022-48715 CVE-2022-48717
    CVE-2022-48722 CVE-2024-39475 CVE-2024-39480 CVE-2023-52628


author: Hangbin Liu <haliu@redhat.com> - 1.7-1
changelog:
  - Update to 1.7
  - libndp: apply filter to raw socket to only accept ND messages
  - libndp: move ndp_sock_{open,close}() after msg parsing functions
  - ndptool: Fix compilation on musl libc


author: Hangbin Liu <haliu@redhat.com> - 1.7-2
changelog:
  - ndptool: add -T target support (rhbz 1666194)
  - ndptool: fix target parameter typo (rhbz 1666194)
  - libndp: close sockfd after using to avoid handle leak (rhbz 1666194)
  - libndp: fix nd_msg typo when setting target address (rhbz 1666194)


author: Hangbin Liu <haliu@redhat.com> - 1.7-3
changelog:
  - ndptool: add -D dest support (rhbz 1697595)
  - ndptool: fix potential memory leak caused by strdup (rhbz 1697595)


author: Kaleb S. KEITHLEY <kkeithle@redhat.com>
changelog:
  - remove unneeded ldconfig in scriptlets
  -  reported by Igor Gnatenko in Fedora
  -   https://src.fedoraproject.org/rpms/glusterfs/pull-request/5


author: Stephen Augustus <saugustus@vmware.com> - 1.15.1
changelog:
  - Source cri-tools from https://github.com/kubernetes-sigs/cri-tools
    instead of https://github.com/kubernetes-incubator/cri-tools


author: Stephen Augustus <saugustus@vmware.com> - 1.15.1
changelog:
  - Bump minimum versions of all kubernetes dependencies
  - Remove conditional logic for unsupported versions of Kubernetes


author: Stephen Augustus <saugustus@vmware.com> - 1.18.4
changelog:
  - Source CNI plugins from https://storage.googleapis.com/k8s-artifacts-cni/release
    instead of https://dl.k8s.io/network-plugins


author: Stephen Augustus <saugustus@vmware.com> - 1.18.4
changelog:
  - Source cri-tools from https://storage.googleapis.com/k8s-artifacts-cri-tools/release
    instead of https://github.com/kubernetes-sigs/cri-tools


author: Paul Wouters <pwouters@redhat.com> - 1.7.4.1-1
changelog:
  - Resolves: rhbz#1805132 socat does not recognize IP addresses of the SAN extensions in ssl mode
  - Resolves: rhbz#1870279 Transfer via socat fails with openssl enabled
  - Resolves: rhbz#1914989 Socat udp4-recvfrom cause endless loop error when target is not vaild


