# changelog

author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-2
changelog:
  - Update to jdk-17.0.6.0+10
  - Update release notes to 17.0.6.0+10
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
  - Related: rhbz#2153010


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.6.0.10-3
changelog:
  - Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat
  - Related: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-3
changelog:
  - Update FIPS support to bring in latest changes
  - * OJ1357: Fix issue on FIPS with a SecurityManager in place
  - Related: rhbz#2147473


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.7.0.7-1
changelog:
  - Update to jdk-17.0.7.0+7
  - Update release notes to 17.0.7.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Update FIPS support against 17.0.7+6 and bring in latest changes:
  - * RH2134669: Add missing attributes when registering services in FIPS mode.
  - * test/jdk/sun/security/pkcs11/fips/VerifyMissingAttributes.java: fixed jtreg main class
  - * RH1940064: Enable XML Signature provider in FIPS mode
  - * RH2173781: Avoid calling C_GetInfo() too early, before cryptoki is initialized
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2186835
  - Resolves: rhbz#2186827
  - Resolves: rhbz#2186831


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.3.ea
changelog:
  - Update to jdk-17.0.6+9
  - Update release notes to 17.0.6+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150195


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.6.0.9-0.4.ea
changelog:
  - Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat
  - Related: rhbz#2150195


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-6
changelog:
  - Include the java-17-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2189326


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.7.0.7-2
changelog:
  - Update to jdk-17.0.7.0+7
  - Update release notes to 17.0.7.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Update FIPS support against 17.0.7+6 and bring in latest changes:
  - * RH2134669: Add missing attributes when registering services in FIPS mode.
  - * test/jdk/sun/security/pkcs11/fips/VerifyMissingAttributes.java: fixed jtreg main class
  - * RH1940064: Enable XML Signature provider in FIPS mode
  - * RH2173781: Avoid calling C_GetInfo() too early, before cryptoki is initialized
  - Fix trailing '.' in tarball name
  - Use portablerelease in vendor version to avoid inclusion of dist tag
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2186803
  - Resolves: rhbz#2186810
  - Resolves: rhbz#2186806


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.7.0.7-4
changelog:
  - Following JDK-8005165, class data sharing can be enabled on all JIT architectures
  - Related: rhbz#2203412


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-17.0.8+1 (EA)
  - Update release notes to 17.0.8+1
  - Switch to EA mode
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 17.0.8+1
  - Bump bundled LCMS version to 2.15 as in jdk-17.0.8+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-17.0.8+1
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Related: rhbz#2217716


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.0.6-0.1.ea
changelog:
  - Update to jdk-17.0.8+6 (EA)
  - Sync the copy of the portable specfile with the latest update
  - Resolves: rhbz#2217716


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 1:17.0.8.0.7-2.0.1
changelog:
  - OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
  - OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
  - OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
  - harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
  - OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
  - OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044)
  - OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)
  - Add Oracle vendor bug URL [Orabug: 34340155]


author: Jiri Vanek <jvanek@redhat.com> - 1:20.0.0.0.36-1
changelog:
  - Dropped JDK-8295447, JDK-8296239 & JDK-8299439 patches now upstream
  - Adapted rh1750419-redhat_alt_java.patch
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:20.0.0.0.36-1
changelog:
  - Update to jdk-20.0.2+9
  - Update release notes to 20.0.2+9
  - Update system crypto policy & FIPS patch from new fips-20u tree
  - Update generate_tarball.sh ICEDTEA_VERSION
  - Update CLDR reference data following update to 42 (Rocky Mountain-Normalzeit => Rocky-Mountain-Normalzeit)
  - Related: RHEL-12997


author: Petra Alice Mikova <pmikova@redhat.com> - 1:21.0.0.0.35-1
changelog:
  - Replace smoke test files used in the staticlibs test, as fdlibm was removed by JDK-8303798
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-1
changelog:
  - Update to jdk-21.0.0+35
  - Update system crypto policy & FIPS patch from new fips-21u tree
  - Update generate_tarball.sh to sync with upstream vanilla script inc. no more ECC removal
  - Drop fakefeaturever now it is no longer needed
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Use upstream release URL for OpenJDK source
  - Re-enable tzdata tests now we are on the latest JDK and things are back in sync
  - Install jaxp.properties introduced by JDK-8303530
  - Install lible.so introduced by JDK-8306983
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-2
changelog:
  - Update documentation (README.md)
  - Replace alt-java patch with a binary separate from the JDK
  - Drop stale patches that are of little use any more:
  - * nss.cfg has been disabled since early PKCS11 work and long superseded by FIPS work
  - * No accessibility subpackage to warrant RH1648242 & RH1648644 patches any more
  - * No use of system libjpeg turbo to warrant RH649512 patch any more
  - Replace RH1684077 pcsc-lite-libs patch with better JDK-8009550 fix being upstreamed
  - Adapt alt-java test to new binary where there is always a set_speculation function
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-1
changelog:
  - Update to jdk-21.0.1.0+12 (GA)
  - Update release notes to 21.0.1.0+12
  - Sync the copy of the portable specfile with the latest update
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise bundled versions with 21u sources (FreeType, LCMS, HarfBuzz, libpng)
  - Sync generate_tarball.sh with 11u & 17u version
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Fix upstream release URL for OpenJDK source
  - Following JDK-8005165, class data sharing can be enabled on all JIT architectures
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Synchronise runtime and buildtime tzdata requirements
  - Remove ghosts for binaries not in java-21-openjdk (pack200, rmid, unpack200)
  - Add missing jfr, jpackage and jwebserver alternative ghosts
  - Move jcmd to the headless package
  - Revert alt-java binary location to being within the JDK tree
  - Resolves: RHEL-12997
  - Resolves: RHEL-14954
  - Resolves: RHEL-14962
  - Resolves: RHEL-14958
  - Related: RHEL-14946
  - Resolves: RHEL-14959
  - Resolves: RHEL-14948


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-2
changelog:
  - Switch to using portable binaries built on RHEL 7
  - Sync the copy of the portable specfile with the RHEL 7 version
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103210


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101799
  - Resolves: RHEL-103210


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101799


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102278


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118773
  - Resolves: RHEL-119450


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118773
  - Related: RHEL-119450


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-1
changelog:
  - Update to jdk-21.0.10+7 (GA)
  - Update release notes to 21.0.10+7
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-142858
  - Resolves: RHEL-139526
  - Resolves: RHEL-131450
  - Resolves: RHEL-131463
  - Resolves: RHEL-142860
  - Resolves: RHEL-142819
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-2
changelog:
  - Switch to using portable binaries built on RHEL 7
  - Sync the copy of the portable specfile with the RHEL 7 version
  - Related: RHEL-12995


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-3
changelog:
  - Include JDK-8311630 patch to implement Foreign Function & Memory preview API on s390x
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-16378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-1
changelog:
  - Update to jdk-21.0.2+13 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Bump libpng version to 1.6.40 following JDK-8316030
  - Bump HarfBuzz version to 8.2.2 following JDK-8313643
  - Drop local JDK-8311630 patch which is now upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20984


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-2
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Define portablesuffix according to whether pkgos is defined or not
  - Related: RHEL-30944


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.3+1 (EA)
  - Update release notes to 21.0.3+1
  - Switch to EA mode
  - Require tzdata 2023d due to upstream inclusion of JDK-8322725
  - Bump FreeType version to 2.13.2 following JDK-8316028
  - Related: RHEL-30944


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Install alt-java man page from the misc tarball as it is no longer in the JDK image
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck
  - Related: RHEL-30944


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Fix -ea logic to add dash
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-30944


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254
  - Resolves: RHEL-30944


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32405


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-2
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Define portablesuffix according to whether pkgos is defined or not
  - Related: RHEL-30943


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.3+1 (EA)
  - Update release notes to 21.0.3+1
  - Switch to EA mode
  - Require tzdata 2023d due to upstream inclusion of JDK-8322725
  - Bump FreeType version to 2.13.2 following JDK-8316028
  - Related: RHEL-30943


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Install alt-java man page from the misc tarball as it is no longer in the JDK image
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck
  - Related: RHEL-30943


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Fix -ea logic to add dash
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-30943


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254
  - Resolves: RHEL-30943


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32406


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.4+1 (EA)
  - Update release notes to 21.0.4+1
  - Switch to EA mode
  - Bump LCMS 2 version to 2.16.0 following JDK-8321489
  - Add zlib build requirement or bundled version (1.3.1), depending on system_libs setting
  - Restore NEWS file so portable can be rebuilt
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-45358
  - Resolves: RHEL-46027


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Limit Java only tests to one architecture using jdk_test_arch
  - Actually require tzdata 2024a now it is available in the buildroot
  - Resolves: RHEL-45358
  - Resolves: RHEL-47398


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47009


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-2
changelog:
  - Update to jdk-21.0.5+10 (GA)
  - Update release notes to 21.0.5+10
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Handle debugedit being a separate package installed in /usr on RHEL/CentOS 10
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Sync with RHEL 7 portable build:
    - Use ExclusiveArch over ExcludeArch
    - pkgos definition needs to be early enough to be used in portablesuffix
  - Make build scripts executable
  - Sync the copy of the portable specfile with the latest update
  - Revert JDK-8327501 & JDK-8328366 backport until more mature.
  - Resolves: RHEL-58798
  - Resolves: RHEL-17186
  - Resolves: RHEL-61346
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-3
changelog:
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Related: RHEL-61346


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-61346


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-3
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74404


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73549


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-1
changelog:
  - Update to jdk-21.0.7+6 (GA)
  - Update release notes to 21.0.7+6
  - Rebase FIPS support against 21.0.7+5
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86981
  - Resolves: RHEL-86632


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-2
changelog:
  - Add local version of JDK-8351500 for early interim release before 21.0.8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-90306


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101799


author: - Jiri Vanek <jvanek@redhat.com> - 0.32.92-1
changelog:
  - first update ever
  - to newest wrapper 32.92 with faith to fix some issues
  - added build requirments of gtk3-devel, at-spi2-atk-devel and at-spi2-core-devel
  - introduced libver macro to avoid duplicated entry


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.18.1-1
changelog:
  - Update to upstream version 3.18.1
  - Remove workaround for rpm bug, can be removed in F-18
  - Update to current packaging guidelines


author: gil cattaneo <puntogil@libero.it> 1.0.0-1
changelog:
  - update to 1.0.0.Final
  - fix BR list and use BR mvn()-like
  - introduce license macro
  - remove some rpmlint problems
  - remove duplicate files


author: gil cattaneo <puntogil@libero.it> 3.1.4-6
changelog:
  - fix FTBFS rhbz#1307647
  - fix BR list and use BR mvn()-like
  - introduce license macro
  - fix some rpmlint problem


author: Mat Booth <mat.booth@redhat.com> - 9.4.20-1
changelog:
  - Update to latest upstream release
  - Obsolete left-over packages that would have broken deps when built in minimal mode


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - Remove maven-surefire-provider-junit5 dependency as it doesn't exist in RHEL 8.
  - Correct some typos.
  - Unable to build until criu-devel is available in RHEL 8.
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972024


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.6.2-2
changelog:
  - Properly name-space bundled json_simple.
    See upstream: https://github.com/rhuss/jolokia/issues/398


author: Tomas Halman <thalman@redhat.com> - 1.6-11
changelog:
  - Fix CVE-2025-48060 AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)
  - Resolves: RHEL-92987


author: Sam Booth <sam.booth@oracle.com> - 1.6-7.0.1
changelog:
  - Update to 1.6 upstream git commit b6be13d [Orabug: 36061610]
  - pull additional patches from Decimal literal number PR #1752 [Orabug: 36061610]
  - forward port upstream patches [Orabug: 36061610]


author: Björn Esser <besser82@fedoraproject.org> - 0.13-3
changelog:
  - Add upstream patch for adding size_t json_c_object_sizeof()
  - Enable partial multi-threaded support


author: Anna Khaitovich <akhaitov@redhat.com> - 0.13.1-0.3
changelog:
  - Don't package empty /usr/share/doc/json-c
  - Resolves: rhbz#1741076
  - Do not use --enable-rdrand
  - Resolves: rhbz#1806532


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.6.0-5
changelog:
  - Bugzilla #1747987 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.6.0-5
changelog:
  - Red Hat Bugzilla #1747987 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.6.2-6
changelog:
  - NativeProxy never calls releaseNativeResources - Memory Leak
    Additional patch to fix SSLSocket resource freeing
    Bugzilla #1822402


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.7.2-1
changelog:
  - Rebase to upstream stable release JSS v4.7.2
  - Red Hat Bugzilla #1822246 - Fix SSLSocket NULL pointer deference after close


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.7.3-1
changelog:
  - Rebase to upstream stable release JSS v4.7.3
  - Red Hat Bugzilla #1873235 - Fix SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT in pki ca-user-cert-add


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.8.1-1
changelog:
  - Rebase to upstream JSS v4.8.1
  - Red Hat Bugilla #1908541 - jss broke SCEP - missing PasswordChallenge class
  - Red Hat Bugilla #1489256 - [RFE] jss should support RSA with OAEP padding


author: Akira TAGOH <tagoh@redhat.com> - 1:7.200-2.1
changelog:
  - Backport fontconfig files from Fedora
  - Sub-packaging per family names as usually do in Fdora.
    Resolves: rhbz#1777843


author: Severin Gehwolf <sgehwolf@redhat.com> - 5.2.0-3
changelog:
  - Add explicit requirement on javapackages-tools since junit5 script
    uses java-functions. See RHBZ#1600426.


author: Mat Booth <mat.booth@redhat.com> - 5.3.1-1
changelog:
  - Update to latest upstream release
  - Conditionally build the console modules
  - Remove stuff for discontinued gradle plugin


author: Mat Booth <mat.booth@redhat.com> - 5.4.0-1
changelog:
  - Update to latest upstream release
  - License switched to EPL only now the surefire provider was moved to the
    Apache Surefire project


author: David Kubat <david.kubat@oracle.com> - 003-7.20211021gitcb5edde.0.1
changelog:
  - Install fails when selecting disk encryption and disabling kdump in anaconda gui [Orabug: 34113245]


author: Ryan O'Hara <rohara@redhat.com> - 2.0.10-6
changelog:
  - Fix segfault when smtp alerts configured (#1693706)
  - Fix double free when smtp_helo_name copied from local_name (#1693706)


author: Christine Caulfield <ccaulfie@redhat.com> - 2.1.5-11
changelog:
  - ipvs: Allow real servers to be specified with a weight of 0
    Resolves: RHEL-7699
  - vrrp: Fix using VMACs with unicast peers
    Resolves: RHEL-7694
  - lvs: if lost misc check child register checker again
    Resolves: RHEL-66742


author: Peter Jones <pjones@redhat.com> - 109-1
changelog:
  - Add Requires: efi-srpm-macros for %{efi}
  - brp-mangle-shebangs: add %{__brp_mangle_shebangs_exclude_file} and
    %{__brp_mangle_shebangs_exclude_from_file} to allow you to specify files
    containing the shebangs to be ignore and files to be ignored regexps,
    respectively, so that they can be generated during the package build.


author: Eugene Syromiatnikov <esyr@redhat.com> - 113-1
changelog:
  - Fix generation for kernel module symbol version dependencies for the case
    when module depends on the symbol with the same name as one present in kernel
    but a different version (#1622016)


author: Eugene Syromiatnikov <esyr@redhat.com> - 114-1
changelog:
  - Add support for compressed kernel modules to find-provides,
    find-provides.ksyms, find-requires, find-requires.ksyms, firmware.prov
    (#1622019)


author: Eugene Syromiatnikov <esyr@redhat.com> - 115-1
changelog:
  - Revert back to usage of join in find-requires.ksym:mod_requires()
    as generated "Requires:" and "Provides:" lists have different format
    and unsuitable for processing with comm (#1622016)


author: Eugene Syromiatnikov <esyr@redhat.com> - 116-1
changelog:
  - Forward-port RHEL-specific kmodtool/macros.kmp changes from RHEL 7,
    update kmodtool script for RHEL 8 (#1658414, #1666162)


author: Alan Steinberg <alan.steinberg@oracle.com> - 120-1.0.1
changelog:
  - Quote var and replace backtick in support-kernel-uek-build.patch (Andrey Andreyev)
  - Added support-kernel-uek-build.patch [Orabug: 16268899]


author: EL Errata <el-errata_ww@oracle.com> - 122-1.0.1.el8
changelog:
  - kmodtool in OL8 is broken - syntax error [Orabug: 30827490]
  - Quote var and replace backtick in support-kernel-uek-build.patch (Andrey Andreyev)
  - Added support-kernel-uek-build.patch [Orabug: 16268899]


author: Florian Festi <ffesti@redhat.com> - 123-1
changelog:
  - Update kmod.prov for better performance (#1794491)
  - Backport performance improvements for brp-mangle-shebangs (#1794779)


author: John Kacur <jkacur@redhat.com> - 2.7-8
changelog:
  - Install kernelshark manpage with kernelshark subpackage, not with trace-cmd
  Resolves: rhbz#1678252


author: John Dennis <jdennis@redhat.com> - 0.6-1
changelog:
  - Resolves: rhbz#1427720, if --mellon-root is not supplied and defaults to /
    you end up with double slashes in entityId and endpoints
  - add --tls-verify option to control python-requests behavor when
    using tls to connect. With this option you can use a self-signed
    cert or point to a CA bundle.
  - Fix warnings and checks when using client originate method
    'registration' with 'anonymous' authentication.


author: John Dennis <jdennis@redhat.com> - 0.8-1
changelog:
  - Upgrade to upstream 0,8, includes:
  - CVE-2017-15112 unsafe use of -p/--admin-password on command line
  - CVE-2017-15111 unsafe /tmp log file in --log-file option in keycloak_cli.py


author: Jakub Hrozek <jhrozek@redhat.com> - 1.0-2
changelog:
  - Backport upstream patches to adds the --oidc-logout-uri option
    and fix OIDC-related man page issues
  - Related: rhbz#1553890 - [RFE] Add mod_auth_openidc support


author: Eugene Syromiatnikov <esyr@redhat.com> 1.10.0_dup8.1-1
changelog:
  - 9158390ccae759c2c0221de6e0c9541375a480f6
  - bnxt_en kernel module for Driver Update Program
  - Resolves: #bz1802054


author: Robert Scheck <robert@fedoraproject.org> 1.2.76-13
changelog:
  - Replace patch from openSUSE by the Debian one to not only build
    kyotocabinet with GCC >= 6 but also with GCC >= 7 (#1307706 #c15)


author: Richard Hughes <richard@hughsie.com> - 1.0-6
changelog:
  - Explode the metainfo files into the subpackages so they get added to the
    distro-specific AppStream metadata.
  - This allows us to add and remove languages in GNOME Software.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.0.37-3
changelog:
  - Python 2 binary package renamed to python2-langtable
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Mike FABIAN <mfabian@redhat.com> - 0.0.38-1
changelog:
  - Add some new translations from CLDR
  - Add agr, bi, hif, kab, mfe, miq, mjw, shn, sm, to, tpi_PG, yuw, AS, MU, SC, TO, VU, WS


author: Pete Walter <pwalter@fedoraproject.org> - 0.0.38-5
changelog:
  - Conditionally add back Python 2 subpackage on Fedora
  - Rename Python 3 subpackage to python3-langtable to follow guidelines
  - Resolves: rhbz#1559099


author: Tomas Orsava <torsava@redhat.com> - 2.6.0-5
changelog:
  - Require the Python interpreter directly instead of using the package name
  - Resolves: rhbz#1633617


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-7
changelog:
  - Resolves: rhbz#1634268 - ECP signature check fails with
                             LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when
                             assertion signed instead of response


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-8
changelog:
  - Resolves: rhbz#1730018 - lasso includes "Destination" attribute in SAML
                             AuthnRequest populated with SP
                             AssertionConsumerServiceURL when ECP workflow
                             is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-9
changelog:
  - Resolves: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (coming
                             from lasso)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-10
changelog:
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-11
changelog:
  - Bump release to force the package through OSCI as the previous
    build reached CI just in time for an outage
  - Related: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (comingfrom lasso)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-12
changelog:
  - Fix a dead code issue in the signature wrapping patch
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]


author: Tomas Halman <thalman@redhat.com> - 2.6.0-14
changelog:
  - Fixing CVE-2025-47151
    Resolves: RHEL-126687 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.5.1-8
changelog:
  - Python 2 binary package renamed to python2-lasso
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: John Dennis <jdennis@redhat.com> - 2.5.1-12
changelog:
  - Resolves: rhbz#1542126, rhbz#1556016
  - xmlsec removed SOAP support, reimplement missing xmlSecSoap* in Lasso


author: <jdennis@redhat.com> - 2.6.0-1
changelog:
  - Upgrade to latest upstream
  - Build using Python3, add python3 subpackage
  - Resolves: rhbz#1592416 Enable perl subpackage


author: <jdennis@redhat.com> - 2.6.0-2
changelog:
  - fix language bindings package names to comply with guidelines,
    instead of lasso-lang use lang-lasso
  - fix conditional logic used to build on rhel
  - Resolves: rhbz#1589856 Drop python2 subpackage from RHEL8


author: Rex Dieter <rdieter@fedoraproject.org> - 2.7-4
changelog:
  - %files: less globs, use %license
  - tighten subpkg deps
  - -devel: use %doc
  - use %version in Source URL
  - simplify %setup
  - %check: make check


author: Petr Menšík <pemensik@redhat.com> - 1.7.0-14
changelog:
  - Add only extra flags to default RPM LDFLAGS
  - Fix multilib conflict of ldns-config (#1463423)
  - Make primary python3 in primary build, python2 in optional


author: Michal Bocek <mbocek@redhat.com> - 0.11.0-1
changelog:
  - Rebase to v0.11.0
  - Bump leapp-framework capability to 1.3
  - Preserve verbose/debug options during the whole upgrade workflow
  - Print the informative error block to the STDOUT instead of STDERR
  - Add new reporting tags: `PUBLIC_CLOUD` and `RHUI`
  - Add the possibility to skip actor discovery to improve performance of tests when an actor context is injected directly
  - Introduce the `deprecated` and `suppress_deprecation` decorators to support the deprecation process
  - Store dialog answers in the leapp.db
  - Update and improve man pages
  - Raising a missing exception with tests failing under py3
  - Adde the --actor-config option to `snactor run` to specify a workflow configuration model that should be consumed by actors
  - The `call` function has been improved to be working on MacOS
  - Known issue: the `suppress_deprecation` decorator causes a traceback in certain cases


author: Dominik Rehak <drehak@redhat.com> - 0.11.1-1
changelog:
  - Rebase to v0.11.1
  - Fix conversion of deprecation messages to reports
  - Fix various issues regarding suppressing of deprecation
  - Remove pytest residuals in spec file
  - Update documentation and manpages
  - Resolves: #1887913


author: Dominik Rehak <drehak@redhat.com> - 0.12.0-1
changelog:
  - Rebase to v0.12.0
  - Bump leapp-framework capability to 1.4
  - Add JSON schema of leapp reports for validation
  - Add a stable report identifier for each generated report
  - Resolves: #1915508


author: Petr Stodulka <pstodulk@redhat.com> - 0.12.1-1
changelog:
  - Rebase to v0.12.1
  - Added rerun command for experimental purposes to be able to re-run manually
    the last phase when needed (experimental)
  - Resolves: #1952885


author: Petr Stodulka <pstodulk@redhat.com> - 0.13.0-10
changelog:
  - Rebase to v0.13.0
  - Bump the provided leapp-framework capability to 2.0
  - The commands for the leapp tool (e.g. preupgrade, upgrade) are now
    defined in the leapp-repository component
  - The leapp tool scans the available CLI commands dynamically
  - First build for the IPU 8 -> 9
  - Resolves: #1997075


author: Petr Stodulka <pstodulk@redhat.com> - 0.14.0-1
changelog:
  - Rebase to v0.14.0
  - Bump leapp-framework to 2.2
  - Bump leapp-framework-dependencies to 5
  - Add depency on python3 (distribution python)
  - Added possibility to specify the report format version
  - Check the answerfile upon loading and prevent creation of invalid answerfile
  - Dialogs: print the reason field for question in the answerfile
  - Fix the JSON serialization in Dialogs on Python3
  - Introduced new functions in the leapp standard library
  - Updated man page
  - Resolves: rhbz#1997075


author: Petr Stodulka <pstodulk@redhat.com> - 0.15.0-1
changelog:
  - Rebase to v0.15.0
  - Bump leapp-framework to 3.1
  - Deprecate `reporting.(Tags|Flags)` replaced by `reporting.Groups`
  - Fix crashes when processing invalid FQDNs
  - Fix the error msg when a leapp CLI command does not exist
  - Introduce new report JSON schema v1.2.0 (default: 1.1.0)
  - Resolves: rhbz#2090992, rhbz#2106065


author: Petr Stodulka <pstodulk@redhat.com> - 0.15.1-1
changelog:
  - Rebase to v0.15.1
  - Change DAC for /var/lib/leapp to 0700 to make it accessible for root only
  - Propagate error messages from leapp actors to the main leapp process
  - Prevent unicode errors when printing error messages
  - Resolves: rhbz#2162710


author: Joseph Oliver <joseph.oliver@oracle.com> - 0.15.1-1.0.1
changelog:
  - Update Red Hat references in manual to Oracle references
  - 1000-Manual-Ref-Update.patch [Orabug: 35304131]


author: Petr Stodulka <pstodulk@redhat.com> - 0.15.1-2
changelog:
  - Bump leapp-framework to 4.0
  - Improve the report summary output to make it more visible
  - Fix processing data in remediation instructions with non-ascii characters
  - Fix creation of Dialog for Component without choices
  - Store tracebacks from actors in leapp.db
  - Resolves: #2223312


author: Petr Stodulka <pstodulk@redhat.com> - 0.16.0-1
changelog:
  - Rebase to v0.16.0
  - Bump leapp-framework to 5.0
  - Improve the report overview to include also information about errors
  - Distinguish errors from valid reports in the generated txt report file
  - Resolves: #2223312


author: Petr Stodulka <pstodulk@redhat.com> - 0.16.0-1
changelog:
  - Rebase to v0.16.0
  - Improve the performance of the leapp execution for "pre first reboot" phases
  - Introduce upgrades for RHEL 8 to RHEL 9
  - Enabled upgrade paths:
    - RHEL 8.6 -> 9.0
    - RHEL with SAP 8.6 -> 9.0
  - Requires leapp-framework >= 2.2
  - Bump leapp-framework-dependencies to 5
  - Add actors for MariaDB and PostgreSQL
  - Add detection of enabled DNF plugins
  - Add scan & checks for VDO devices
  - Bind the /run/lock dir into the container in the upgrade initramfs env
  - Check Firewalld configuration
  - Check SSSD configuration for changes in RHEL 9
  - Check deprecated network settings
  - Check ifcfg files for change in RHEL 9
  - Check the existence of the custom network-scripts
  - Filter out PES data unrelated for the particular IPU path
  - Fix generating of instructions/data for the leapp DNF plugin during
  - Fix generating the target initramfs when additional files and dracut modules are requested to be added
  - Fix getting device attribute through udev on Python 3
  - Fix parsing of sysctl output during the scan of the system
  - Fix scanning "/etc/default/grub" with empty lines
  - Fix scanning information about mounted devices
  - Fix the execution order for the dnf dry run actor
  - Handle SELinux during the in-place upgrade
  - Handle live kernel patching during
  - Improve and generalize checking of device drivers
  - Inhibit the upgrade when ipa-server is detected
  - Introduce DNFWorkarounds to register scripts to be executed before DNF run
  - Introduce handling of DNF modularity during the upgrade
  - Introduce the --report-schema option to control the version of the generated report format
  - Introduce the --target option to specify the version of the target system
  - Provide the LEAPP_IPU_IN_PROGRESS environment variable for actors during in-place upgrade
  - Resolves: #1997076


author: Petr Stodulka <pstodulk@redhat.com> - 0.16.0-4
changelog:
  - Extend the check of deprecated or removed PCI drivers
  - Do not instruct DNF to install rubygem-irb during the in-place upgrade
    to prevent conflict between files
  - Resolves: #1997076


author: Petr Stodulka <pstodulk@redhat.com> - 0.17.0-1
changelog:
  - Rebase to v0.17.0
  - Support upgrade path RHEL 8.7 -> 9.0 and RHEL SAP 8.6 -> 9.0
  - Provide and require leapp-repository-dependencies 7
  - Provide `leapp-command(<CMD>)` for each CLI command provided by leapp-repository
  - Require dracut, kmod, procps-ng on RHEL 8+
  - Require leapp-framework >= 3.1
  - Add actors covering removal of NIS components on RHEL 9
  - Add checks for obsolete .NET versions
  - Allow specifying the report schema v1.2.0
  - Check and handle upgrades with custom crypto policies
  - Check and migrate OpenSSH configuration
  - Check and migrate multipath configuration
  - Check minimum memory requirements
  - Do not create the upgrade bootloader entry when the dnf dry-run actor stops the upgrade
  - Enable Base and SAP in-place upgrades on Azure
  - Enable in-place upgrade in case LUKS volumes are Ceph OSDs
  - Enable in-place upgrades in Azure RHEL 8 base images using RHUI
  - Enable in-place upgrades on  IBM z16 machines
  - Enable the CRB repository for the upgrade only if enabled on the source system
  - Fix cloud provider detection on AWS
  - Fix detection of the latest kernel
  - Fix issues caused by leapp artifacts from previous in-place upgrades
  - Fix issues with false positive switch to emergency console during the upgrade
  - Fix swap page size on aarch64
  - Fix the VDO scanner to skip partitions unrelated to VDO and adjust error messages
  - Fix the false positive NFS storage detection on NFS servers and improve the report msg
  - Fix the issues on systems with the LANGUAGE environment variable
  - Fix the root directory scan to deal with non-utf8 filenames
  - Handle upgrades of SAP systems on AWS
  - Inform about necessary migrations related to bacula-director when installed on the system
  - Inhibit the upgrade when /var/lib/leapp being mounted in a non-persistent fashion to prevent failures
  - Inhibit the upgrade when /var/lib/leapp mounted with the noexec option to prevent failures
  - Inhibit upgrade when NVIDIA driver is detected
  - Make the application of custom selinux rules more reliable and do not override changes done by RPM scriptlets
  - Migrate the OpenSSL configuration
  - PESEventScanner actor has been fully refactored
  - Report changes around SCP and SFTP
  - Skip comment lines when parsing the GRUB configuration file
  - Stop propagating the “debug” and ”enforcing=0” kernel cmdline options into the target kernel cmdline options
  - Mass refactoring to be compatible with leapp v0.15.0
  - Resolves: rhbz#2090995, rhbz#2040470, rhbz#2092005, rhbz#2093220, rhbz#2095704, rhbz#2096159, rhbz#2100108, rhbz#2100110, rhbz#2103282, rhbz#2106904, rhbz#2110627


author: Petr Stodulka <pstodulk@redhat.com> - 0.17.0-2
changelog:
  - Update VDO checks to enable user to decide the system state on check failures
    and undetermined block devices
  - The VDO dialog and related VDO reports have been properly updated
  - Resolves: rhbz#2096159


author: Petr Stodulka <pstodulk@redhat.com> - 0.17.0-3
changelog:
  - Adding back instruction to not install rubygem-irb during the in-place upgrade
    to prevent conflict between files
  - Resolves: rhbz#2090995


author: Mark Will <mark.will@oracle.com> - 0.17.0-3.0.1
changelog:
  - Add Oracle Patches
  - 1000-Add-Oracle-Linux-Support.patch [Orabug: 32187416]
  - 1001-Add-InstalledOracleSignedRPM-Message.patch [Orabug: 32076068]
  - 1002-Add-UEK-Kernel-Support.patch [Orabug: 32187416]
  - 1003-Rename-Upstream-Specific-Actors.patch [Orabug: 32076068]
  - 1004-UEKR6-Overlayfs-fix.patch [Orabug: 32187481]
  - 1005-Replace-Upstream-Bugzilla-URLs.patch [Orabug: 32076068]
  - 1006-Replace-Upstream-Refs.patch [Orabug: 32076068]
  - 1007-BTRFS-Support-UEK-only.patch [Orabug: 32187404]
  - 1008-Remove-Upstream-SM.patch [Orabug: 32076068]
  - 1009-Add-OL9-Upgrade-Repositories.patch [Orabug: 32214409]
  - 1010-Fix-SCTP-crash-on-arm.patch [Orabug: 32248761]
  - 1011-Keep-Default-Boot-Kernel.patch [Orabug: 32251187]
  - 1012-Add-Oracle-DNF-Plugin.patch [Orabug: 32076068]
  - 1013-BTRFS-RAID-Upgrade-Initramfs-fix.patch [Orabug: 32295600]
  - 1014-Set-All-Installed-Kernel-Parameters.patch [Orabug: 32251187]
  - 1015-Etc-Sysconfig-Kernel-fix.patch [Orabug: 32251187]
  - 1016-BTRFS-RAID-inhibit.patch [Orabug: 32295600]
  - 1018-Check-OSMS-Inhibit-Actor.patch [JIRA: OLDIS-3436]
  - 1020-Fix-License-Reboot-Issue.patch [Orabug: 32612983]
  - 1021-Support-OCI-Vars.patch [Orabug: 32826595]
  - 1022-Fix-Cloud-Init-Cache-After-Upgrade.patch [Orabug: 32857588]
  - 1023-Detect-and-Inhibit-OCI-BM-Shapes.patch [Orabug: 32858440]
  - 1024-EFI-Grubenv-Fix.patch [Orabug: 32858036]
  - 1026-Oracle-UEKR6-RDMA-Check.patch [Orabug: 33124455]
  - 1028-Oracle-OLM-Check.patch [OraBug: 33252470]
  - 1029-Post-Enable-Repos.patch [Orabug: 33210937]
  - 1031-Oracle-KVM-Check.patch [OraBug: 33599932]
  - 1032-KVM-Persistentnetnames-Fix.patch [Orabug: 33639916]
  - 1034-Remove-Upstream-SM-Args.patch [Orabug: 32076068]
  - 1035-Add-Oracle-Repos-parameters.patch [JIRA: OLDIS-5135]
  - 1036-OCI-vars-substitution.patch [Orabug: 32826595] 
  - 1037-Oracle-UEKR7-Check.patch [OraBug: 34211484]
  - 1038-Check-vdo-fix.patch [Orabug: 34288152]
  - 1039-Fix-Upgrade-Emergency-Shell-Issue.patch [Orabug: 34279930]
  - 1040-OSWatcher-To-PCP-Actor.patch [Orabug: 34417308]
  - 1041-bug34685865-remove-upstream-refs.patch [Orabug: 34685865]
  - 1042-bug34498434-remove-upstream-refs.patch [Orabug: 34498434]
  - 1043-bug34299313-update-remediation-example.patch [Orabug: 34299313]
  - 1044-bug34685557-update-deprecated-tags-flags.patch [Orabug: 34685557]
  - 1045-bug34746134-Add-OL9-UEKR7-aarch64-Repomap.patch [Orabug: 34746134]
  - Update package maps for gcc-toolset-11 [Orabug: 34730810]


author: Petr Stodulka <pstodulk@redhat.com> - 0.18.0-1
changelog:
  - Rebase to v0.18.0
  - Introduce new upgrade path RHEL 8.8 -> 9.2
  - Requires cpio
  - Requires python3-gobject-base, NetworkManager-libnm
  - Bump leapp-repository-dependencies to 9
  - Add breadcrumbs results to RHSM facts
  - Add leapp RHUI packages to an allowlist to drop confusing reports
  - Added checks for RHEL SAP IPU 8.6 -> 9.0
  - Check RPM signatures during the upgrade
  - Check only mounted XFS partitions
  - Check the validity and compatitibility of used leapp data
  - Detect CIFS also when upgrading from RHEL8 to RHEL9 (PR1035)
  - Detect RoCE on IBM Z machines and check the configuration is safe for the upgrade
  - Detect a proxy configuration in YUM/DNF and adjust an error msg on issues caused by the configuration
  - Detect and report systemd symlinks that are broken before the upgrade
  - Detect the kernel-core RPM instead of kernel to prevent an error during post-upgrade phases
  - Disable the amazon-id DNF plugin on AWS during the upgrade stage to omit confusing error messages
  - Do not create new *pyc files when running leapp after the DNF upgrade transaction
  - Drop obsoleted upgrade paths
  - Enable upgrades of RHEL 8 for SAP HANA to RHEL 9 on ppc64le
  - Enable upgrades on s390x when /boot is part of rootfs
  - Extend the allow list of RHUI clients by azure-sap-apps to omit confusing report
  - Filter out PES events unrelated for the used upgrade path and handle overlapping event
   (fixes upgrades with quagga installed)
  - Fix scan of ceph volumes on systems without ceph-osd or when ceph-osd container is not found
  - Fix systemd symlinks that become incorrect during the IPU
  - Fix the check of memory (RAM) limits and use human readable values in the report
  - Fix the kernel detection during initramfs creation for new kernel on RHEL 9.2+
  - Fix the upgrade of IBM Z machines configured with ZFCP
  - Fix the upgrade on Azure using RHUI for SAP Apps images
  - Ignore external accounts in /etc/passwd
  - Improve remediation instructions for packages in unknown repositories
  - Improve the error message to guide users when discovered more space is needed
  - Improve the handling of blocklisted certificates
  - Inhibit the upgrade when entries in /etc/fstab cause overshadowing during the upgrade
  - Introduced an option to use an ISO file as a target RHEL version content source
  - Introduced possibility to specify what systemd services should be enabled/disabled on the upgraded system
  - Introduced the --nogpgcheck option to skip checking of RPM signatures
  - Map the target repositories also based on the installed content
  - Prevent re-run of leapp in the upgrade initramfs in case of previous failure
  - Prevent the upgrade with RHSM when Baseos and Appstream target repositories are not discovered
  - Provide common information about systemd services
  - RHUI(Azure) Handle correctly various SAP images
  - Register subscribed systems automatically to Red Hat Insights unless --no-insights-register is used
  - Remove obsoleted GPG keys provided by RH after the upgrade to prevent errors
  - Rework the network configuration handling and parse the configuration data properly
  - Set the system release lock after the upgrade also for premium channels
  - Small improvements in various reports
  - Resolves: rhbz#2088492, rhbz#2111691, rhbz#2127920, rhbz#2129716,rhbz#2139907, rhbz#2139907, rhbz#2141393, rhbz#2143372, rhbz#2155661


author: Alex Burmashev <alexander.burmashev@oracle.com> - 0.18.0-1.0.1
changelog:
  - Rebase Oracle patches on new source
  - Add Oracle Patches
  - Fix patch numbering
  - 1000-Add-Oracle-Linux-Support.patch [Orabug: 32187416]
  - 1001-Add-InstalledOracleSignedRPM-Message.patch [Orabug: 32076068]
  - 1002-Add-UEK-Kernel-Support.patch [Orabug: 32187416]
  - 1003-Rename-Upstream-Specific-Actors.patch [Orabug: 32076068]
  - 1004-UEKR6-Overlayfs-fix.patch [Orabug: 32187481]
  - 1005-Replace-Upstream-Bugzilla-URLs.patch [Orabug: 32076068]
  - 1006-Replace-Upstream-Refs.patch [Orabug: 32076068]
  - 1007-BTRFS-Support-UEK-only.patch [Orabug: 32187404]
  - 1008-Remove-Upstream-SM.patch [Orabug: 32076068]
  - 1009-Add-OL9-Upgrade-Repositories.patch [Orabug: 32214409]
  - 1010-Fix-SCTP-crash-on-arm.patch [Orabug: 32248761]
  - 1011-Keep-Default-Boot-Kernel.patch [Orabug: 32251187]
  - 1012-Add-Oracle-DNF-Plugin.patch [Orabug: 32076068]
  - 1013-BTRFS-RAID-Upgrade-Initramfs-fix.patch [Orabug: 32295600]
  - 1014-Set-All-Installed-Kernel-Parameters.patch [Orabug: 32251187]
  - 1015-Etc-Sysconfig-Kernel-fix.patch [Orabug: 32251187]
  - 1016-BTRFS-RAID-inhibit.patch [Orabug: 32295600]
  - 1017-Check-OSMS-Inhibit-Actor.patch [JIRA: OLDIS-3436]
  - 1018-Fix-License-Reboot-Issue.patch [Orabug: 32612983]
  - 1019-Support-OCI-Vars.patch [Orabug: 32826595]
  - 1020-Fix-Cloud-Init-Cache-After-Upgrade.patch [Orabug: 32857588]
  - 1021-Detect-and-Inhibit-OCI-BM-Shapes.patch [Orabug: 32858440]
  - 1022-EFI-Grubenv-Fix.patch [Orabug: 32858036]
  - 1023-Oracle-UEKR6-RDMA-Check.patch [Orabug: 33124455]
  - 1024-Oracle-OLM-Check.patch [OraBug: 33252470]
  - 1025-Post-Enable-Repos.patch [Orabug: 33210937]
  - 1026-Oracle-KVM-Check.patch [OraBug: 33599932]
  - 1027-KVM-Persistentnetnames-Fix.patch [Orabug: 33639916]
  - 1028-Remove-Upstream-SM-Args.patch [Orabug: 32076068]
  - 1039-Add-Oracle-Repos-parameters.patch [JIRA: OLDIS-5135]
  - 1030-OCI-vars-substitution.patch [Orabug: 32826595].
  - 1031-Oracle-UEKR7-Check.patch [OraBug: 34211484]
  - 1032-Check-vdo-fix.patch [Orabug: 34288152]
  - 1033-Fix-Upgrade-Emergency-Shell-Issue.patch [Orabug: 34279930]
  - 1034-OSWatcher-To-PCP-Actor.patch [Orabug: 34417308]
  - 1035-bug34685865-remove-upstream-refs.patch [Orabug: 34685865]
  - 1036-bug34498434-remove-upstream-refs.patch [Orabug: 34498434]
  - 1037-bug34299313-update-remediation-example.patch [Orabug: 34299313]
  - 1038-bug34685557-update-deprecated-tags-flags.patch [Orabug: 34685557]
  - 1039-bug34746134-Add-OL9-UEKR7-aarch64-Repomap.patch [Orabug: 34746134]
  - 1040-bug34817186-Remove-make-devel-Package.patch [Orabug: 34817186]
  - 1041-bug34790352-Replace-Upstream-Refs.patch [Orabug: 34790352]
  - Update package maps for gcc-toolset-11 [Orabug: 34730810]
  - Fix wrong type usage: 1042-Fix-typo-in-pes_events_scanner.py.patch
  - Ported Upgrading from ISO from Redhat to Oracle Linux:
  - Added Oracle GPG keys and updated references in tests:
  - 1044-Add-Oracle-GPG-Keys.patch [Orabug: 35300648]
  - 1043-Replace-RHEL-ISO-Check-with-OL-ISO-Check.patch [Orabug: 35304571],[Orabug: 35304815]
  - Replaced Redhat references with Oracle and removed hardcoding from repos:
  - 1045-Updated-RH-References.patch [Orabug: 34939638], [Orabug: 35329169]
  - 1046-Repomap-Hardcoding-Fix.patch [Orabug: 35342218]


author: Joseph Oliver <joseph.oliver@oracle.com> - 0.18.0-1.0.7
changelog:
  - Implemented fix for I686 packages causing error on upgrade due to dependency issues [Orabug: 35741727, Orabug: 35741807, Orabug: 35724480]


author: Petr Stodulka <pstodulk@redhat.com> - 0.18.0-4
changelog:
  - Introduce new upgrade path RHEL 8.9 -> 9.3
  - Update leapp data files to reflect new changes between systems
  - Detect and report use of deprecated Xorg drivers
  - Minor improvements of generated reports
  - Fix false positive report about invalid symlinks
  - Inhibit the upgrade when unsupported x86-64 microarchitecture is detected
  - Resolves: rhbz#2215997


author: Petr Stodulka <pstodulk@redhat.com> - 0.18.0-5
changelog:
  - Fix the calculation of the required free space on each partitions/volume for the upgrade transactions
  - Create source overlay images with dynamic sizes to optimize disk space consumption
  - Update GRUB2 when /boot resides on multiple devices aggregated in RAID
  - Use new leapp CLI API which provides better report summary output
  - Introduce possibility to add (custom) kernel drivers to initramfs
  - Detect and report use of deprecated Xorg drivers
  - Fix the generation of the report about hybrid images
  - Inhibit the upgrade when unsupported x86-64 microarchitecture is detected
  - Minor improvements and fixes of various reports
  - Requires leapp-framework 4.0
  - Update leapp data files
  - Resolves: rhbz#2140011, rhbz#2144304, rhbz#2174095, rhbz#2215997


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to v0.19.0
  - Requires leapp-framework 5.0
  - Handle correctly the installed certificates to allow upgrades with custom repositories using HTTPs with enabled SSL verification
  - Fix failing upgrades with devtmpfs file systems specified in FSTAB
  - Do not try to update GRUB core on IBM Z systems
  - Minor improvements and fixes of various reports and error messages
  - Redesign handling of information about kernel (booted and target) to reflect changes in RHEL 9.3
  - Use new leapp CLI API which provides better report summary output
  - Resolves: rhbz#2215997, rhbz#2222861, rhbz#2232618


author: Alex Burmashev <alexander.burmashev@oracle.com> - 0.19.0-1.0.1
changelog:
  - Reapplied patches on new source
  - Implemented fix for I686 packages causing error on upgrade due to dependency issues [Orabug: 35741727, Orabug: 35741807, Orabug: 35724480]
  - Implemented fix for ruby package conflicts on upgrade [Orabug: 35453270]
  - Drop unwanted upstream Insights functionality [Orabug: 35401379]
  - Update upstream references
  - Add data stream information to provided Oracle data sources
  - Rebase Oracle patches on new source
  - Add Oracle Patches
  - Fix patch numbering
  - 1000-Add-Oracle-Linux-Support.patch [Orabug: 32187416]
  - 1001-Add-InstalledOracleSignedRPM-Message.patch [Orabug: 32076068]
  - 1002-Add-UEK-Kernel-Support.patch [Orabug: 32187416]
  - 1003-Rename-Upstream-Specific-Actors.patch [Orabug: 32076068]
  - 1004-UEKR6-Overlayfs-fix.patch [Orabug: 32187481]
  - 1005-Replace-Upstream-Bugzilla-URLs.patch [Orabug: 32076068]
  - 1006-Replace-Upstream-Refs.patch [Orabug: 32076068]
  - 1007-BTRFS-Support-UEK-only.patch [Orabug: 32187404]
  - 1008-Remove-Upstream-SM.patch [Orabug: 32076068]
  - 1009-Add-OL9-Upgrade-Repositories.patch [Orabug: 32214409]
  - 1010-Fix-SCTP-crash-on-arm.patch [Orabug: 32248761]
  - 1011-Keep-Default-Boot-Kernel.patch [Orabug: 32251187]
  - 1012-Add-Oracle-DNF-Plugin.patch [Orabug: 32076068]
  - 1013-BTRFS-RAID-Upgrade-Initramfs-fix.patch [Orabug: 32295600]
  - 1014-Set-All-Installed-Kernel-Parameters.patch [Orabug: 32251187]
  - 1015-Etc-Sysconfig-Kernel-fix.patch [Orabug: 32251187]
  - 1016-BTRFS-RAID-inhibit.patch [Orabug: 32295600]
  - 1017-Check-OSMS-Inhibit-Actor.patch [JIRA: OLDIS-3436]
  - 1018-Fix-License-Reboot-Issue.patch [Orabug: 32612983]
  - 1019-Support-OCI-Vars.patch [Orabug: 32826595]
  - 1020-Fix-Cloud-Init-Cache-After-Upgrade.patch [Orabug: 32857588]
  - 1021-Detect-and-Inhibit-OCI-BM-Shapes.patch [Orabug: 32858440]
  - 1022-EFI-Grubenv-Fix.patch [Orabug: 32858036]
  - 1023-Oracle-UEKR6-RDMA-Check.patch [Orabug: 33124455]
  - 1024-Oracle-OLM-Check.patch [OraBug: 33252470]
  - 1025-Post-Enable-Repos.patch [Orabug: 33210937]
  - 1026-Oracle-KVM-Check.patch [OraBug: 33599932]
  - 1027-KVM-Persistentnetnames-Fix.patch [Orabug: 33639916]
  - 1028-Remove-Upstream-SM-Args.patch [Orabug: 32076068]
  - 1039-Add-Oracle-Repos-parameters.patch [JIRA: OLDIS-5135]
  - 1030-OCI-vars-substitution.patch [Orabug: 32826595].
  - 1031-Oracle-UEKR7-Check.patch [OraBug: 34211484]
  - 1032-Check-vdo-fix.patch [Orabug: 34288152]
  - 1033-Fix-Upgrade-Emergency-Shell-Issue.patch [Orabug: 34279930]
  - 1034-OSWatcher-To-PCP-Actor.patch [Orabug: 34417308]
  - 1035-bug34685865-remove-upstream-refs.patch [Orabug: 34685865]
  - 1036-bug34498434-remove-upstream-refs.patch [Orabug: 34498434]
  - 1037-bug34299313-update-remediation-example.patch [Orabug: 34299313]
  - 1038-bug34685557-update-deprecated-tags-flags.patch [Orabug: 34685557]
  - 1039-bug34746134-Add-OL9-UEKR7-aarch64-Repomap.patch [Orabug: 34746134]
  - 1040-bug34817186-Remove-make-devel-Package.patch [Orabug: 34817186]
  - 1041-bug34790352-Replace-Upstream-Refs.patch [Orabug: 34790352]
  - Update package maps for gcc-toolset-11 [Orabug: 34730810]
  - Fix wrong type usage: 1042-Fix-typo-in-pes_events_scanner.py.patch
  - Ported Upgrading from ISO from Redhat to Oracle Linux:
  - Added Oracle GPG keys and updated references in tests:
  - 1044-Add-Oracle-GPG-Keys.patch [Orabug: 35300648]
  - 1043-Replace-RHEL-ISO-Check-with-OL-ISO-Check.patch [Orabug: 35304571],[Orabug: 35304815]
  - Replaced Redhat references with Oracle and removed hardcoding from repos:
  - 1045-Updated-RH-References.patch [Orabug: 34939638], [Orabug: 35329169]
  - 1046-Repomap-Hardcoding-Fix.patch [Orabug: 35342218]


author: Joseph Oliver <joseph.oliver@oracle.com> - 0.19.0-1.0.3
changelog:
  - Add Oracle Patch
  - 1054-Package-Error-Handling-Fix.patch [Orabug: 35727259]
  - Fixed minor issue with patch: 1051-Implement-I686-Error-Inhibitor.patch
  - Update kernel detection code to correctly handle different kernels [Orabug: 35982738]


author: Joseph Oliver <joseph.oliver@oracle.com> - 0.19.0-1.0.5
changelog:
  - Implemented pes-events entry to fix iptables issue [Orabug: 35982910]
  - Replaced Redhat References with OL references in checkmicroarchitecture actor [Orabug: 35983304]


author: Joseph Oliver <joseph.oliver@oracle.com> - - 0.19.0-1.0.8
changelog:
  - 1060-Remove-Apache-Packages.patch [Orabug: 35972908]
  - 1061-Remove-Libasan6-Package.patch [Orabug: 35948072]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 0.20.0-2.0.2
changelog:
  - Update new upstream references [Orabug: 36537700] [Orabug: 36554979]
  - Use correct source_os and target_os [Orabug: 36510161]
  - Update package mappings for correct legacy OL8 KVM stream update [Orabug: 36534612]
  - Update package mappings for corret gcc-toolset-* [Orabug: 36539029]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 0.20.0-2.0.6
changelog:
  - Update list of obsolete GPG Keys [Orabug: 34787536]
  - Add mappings for new modules in 8.10 [36622252]
  - Add mappings for new ruby module stream [Orabug: 36614938]
  - Correctly refresh module streams with same names [Orabug: 36614938]
  - Support excluding packages [Orabug: 36534612]
  - Apply excluding for Oracle KVM stack upgrade [Orabug: 36534612]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 0.20.0-2.0.7
changelog:
  - Update the list of processed modules [Orabug: 36625802]
  - Update events for some deprecated packages [Orabug: 36625802]


author: Joseph Oliver <joseph.oliver@oracle.com> - 0.20.0-2.0.9
changelog:
  - Fix for maven package issue causing failure on upgrade due to package conflicts [Orabug: 36921888]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 0.20.0-2.0.14
changelog:
  - Implemented Default Kernel handling fix [Orabug: 36942371]
  - Updated RHEL references to OL [Orabug: 36978104]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 0.20.0-2.0.16
changelog:
  - Update list of obsoleted GPG keys [Orabug: 37247037]
  - Support OL9.5 as a target upgrade path [Orabug: 37247331]
  - Support additional GPG key on OL8 and OL9 [Orabug: 37247037]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 0.20.0-2.0.21
changelog:
  - Produce alert on additional i686 problematic packages [Orabug: 37792372] [Orabug: 37809864]
  - Add additional mappings for OL9 upgrade [Orabug: 37792090] [Orabug: 37803309]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 0.20.0-2.0.22
changelog:
  - Set Oracle Linux 9.6 as upgrade target [Orabug: 37839808]
  - Add alert for problematic aarch64 package [Orabug: 37953148]


author: Alex Burmashev <alexander.burmashev@oracle.com> 0.20.0-2.0.25
changelog:
  - Add additional mappings for OL9 upgrade [Orabug: 38640419]
  - Add additional problematic i686 package [Orabug: 38544332]
  - Update supported RHCK version [Orabug: 38640727]
  - Add mappings for mysql 8.4 stream [Orabug: 38644271]


author: Alex Burmashev <alexander.burmashev@oracle.com> 0.20.0-2.0.26
changelog:
  - Update aarch64 problematic package list [Orabug: 38658490]
  - Support OL9.7 as a target upgrade path [Orabug: 38544272]


author: Alex Burmashev <alexander.burmashev@oracle.com> 0.20.0-2.0.27
changelog:
  - Update aarch64 problematic package list [Orabug: 38658490]
  - Support OL9.7 as a target upgrade path [Orabug: 38640752]


author: Joseph Oliver <joseph.oliver@oracle.com> 0.20.0-2.0.28
changelog:
  - Implemented versionlock inhibitor [Orabug: 38645486]
  - Implemented fix for not enough space error message [Orabug: 35406933]


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.19.0-10
changelog:
  - Print nice error msg when device and driver deprecation data is malformed
  - Fix another cornercase when preserving symlinks to certificates in /etc/pki
  - Update the leapp upgrade data files - fixing upgrades with idm-tomcatjss
  - Resolves: RHEL-16729


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.20.0-1
changelog:
  - Rebase to new upstream v0.20.0.
  - Fix semanage import issue
  - Fix handling of libvirt's systemd services
  - Add a dracut breakpoint for the pre-upgrade step.
  - Drop obsoleted upgrade paths (obsoleted releases: 8.6, 8.9, 9.0, 9.3)
  - Resolves: RHEL-16729


author: Petr Stodulka <pstodulk@redhat.com> - 0.20.0-2
changelog:
  - Fallback to original RHUI solution on AWS to fix issues caused by changes in RHUI client
  - Resolves: RHEL-16729


author: Alex Burmashev <alexander.burmashev@oracle.com> - 0.20.0-2.0.1
changelog:
  - 1060-Remove-Apache-Packages.patch [Orabug: 35972908]
  - 1061-Remove-Libasan6-Package.patch [Orabug: 35948072]
  - Correctly parse multi-line output for boot dev [Orabug: 36025188]
  - Add additional mapping for iproute packages [Orabug: 36022753]
  - Implemented pes-events entry to fix iptables issue [Orabug: 35982910]
  - Replaced Redhat References with OL references in checkmicroarchitecture actor [Orabug: 35983304]
  - Expanded I686 inhibitor actor to cover additional packages [Orabug: 35973627]
  - 1054-Package-Error-Handling-Fix.patch [Orabug: 35727259]
  - Fixed minor issue with patch: 1051-Implement-I686-Error-Inhibitor.patch
  - Update kernel detection code to correctly handle different kernels [Orabug: 35982738]
  - Bump repomap.json internal version
  - Adapt new kernel detection code to UEK kernel
  - Reapplied patches on new source
  - Implemented fix for I686 packages causing error on upgrade due to dependency issues [Orabug: 35741727, Orabug: 35741807, Orabug: 35724480]
  - Implemented fix for ruby package conflicts on upgrade [Orabug: 35453270]
  - Drop unwanted upstream Insights functionality [Orabug: 35401379]
  - Update upstream references
  - Add data stream information to provided Oracle data sources
  - Rebase Oracle patches on new source
  - Add Oracle Patches
  - Fix patch numbering
  - 1000-Add-Oracle-Linux-Support.patch [Orabug: 32187416]
  - 1001-Add-InstalledOracleSignedRPM-Message.patch [Orabug: 32076068]
  - 1002-Add-UEK-Kernel-Support.patch [Orabug: 32187416]
  - 1003-Rename-Upstream-Specific-Actors.patch [Orabug: 32076068]
  - 1004-UEKR6-Overlayfs-fix.patch [Orabug: 32187481]
  - 1005-Replace-Upstream-Bugzilla-URLs.patch [Orabug: 32076068]
  - 1006-Replace-Upstream-Refs.patch [Orabug: 32076068]
  - 1007-BTRFS-Support-UEK-only.patch [Orabug: 32187404]
  - 1008-Remove-Upstream-SM.patch [Orabug: 32076068]
  - 1009-Add-OL9-Upgrade-Repositories.patch [Orabug: 32214409]
  - 1010-Fix-SCTP-crash-on-arm.patch [Orabug: 32248761]
  - 1011-Keep-Default-Boot-Kernel.patch [Orabug: 32251187]
  - 1012-Add-Oracle-DNF-Plugin.patch [Orabug: 32076068]
  - 1013-BTRFS-RAID-Upgrade-Initramfs-fix.patch [Orabug: 32295600]
  - 1014-Set-All-Installed-Kernel-Parameters.patch [Orabug: 32251187]
  - 1015-Etc-Sysconfig-Kernel-fix.patch [Orabug: 32251187]
  - 1016-BTRFS-RAID-inhibit.patch [Orabug: 32295600]
  - 1017-Check-OSMS-Inhibit-Actor.patch [JIRA: OLDIS-3436]
  - 1018-Fix-License-Reboot-Issue.patch [Orabug: 32612983]
  - 1019-Support-OCI-Vars.patch [Orabug: 32826595]
  - 1020-Fix-Cloud-Init-Cache-After-Upgrade.patch [Orabug: 32857588]
  - 1021-Detect-and-Inhibit-OCI-BM-Shapes.patch [Orabug: 32858440]
  - 1022-EFI-Grubenv-Fix.patch [Orabug: 32858036]
  - 1023-Oracle-UEKR6-RDMA-Check.patch [Orabug: 33124455]
  - 1024-Oracle-OLM-Check.patch [OraBug: 33252470]
  - 1025-Post-Enable-Repos.patch [Orabug: 33210937]
  - 1026-Oracle-KVM-Check.patch [OraBug: 33599932]
  - 1027-KVM-Persistentnetnames-Fix.patch [Orabug: 33639916]
  - 1028-Remove-Upstream-SM-Args.patch [Orabug: 32076068]
  - 1039-Add-Oracle-Repos-parameters.patch [JIRA: OLDIS-5135]
  - 1030-OCI-vars-substitution.patch [Orabug: 32826595].
  - 1031-Oracle-UEKR7-Check.patch [OraBug: 34211484]
  - 1032-Check-vdo-fix.patch [Orabug: 34288152]
  - 1033-Fix-Upgrade-Emergency-Shell-Issue.patch [Orabug: 34279930]
  - 1034-OSWatcher-To-PCP-Actor.patch [Orabug: 34417308]
  - 1035-bug34685865-remove-upstream-refs.patch [Orabug: 34685865]
  - 1036-bug34498434-remove-upstream-refs.patch [Orabug: 34498434]
  - 1037-bug34299313-update-remediation-example.patch [Orabug: 34299313]
  - 1038-bug34685557-update-deprecated-tags-flags.patch [Orabug: 34685557]
  - 1039-bug34746134-Add-OL9-UEKR7-aarch64-Repomap.patch [Orabug: 34746134]
  - 1040-bug34817186-Remove-make-devel-Package.patch [Orabug: 34817186]
  - 1041-bug34790352-Replace-Upstream-Refs.patch [Orabug: 34790352]
  - Update package maps for gcc-toolset-11 [Orabug: 34730810]
  - Fix wrong type usage: 1042-Fix-typo-in-pes_events_scanner.py.patch
  - Ported Upgrading from ISO from Redhat to Oracle Linux:
  - Added Oracle GPG keys and updated references in tests:
  - 1044-Add-Oracle-GPG-Keys.patch [Orabug: 35300648]
  - 1043-Replace-RHEL-ISO-Check-with-OL-ISO-Check.patch [Orabug: 35304571],[Orabug: 35304815]
  - Replaced Redhat references with Oracle and removed hardcoding from repos:
  - 1045-Updated-RH-References.patch [Orabug: 34939638], [Orabug: 35329169]
  - 1046-Repomap-Hardcoding-Fix.patch [Orabug: 35342218]


author: Ondrej Dubaj <odubaj@redhat.com> - 3.26.0-5
changelog:
  - Fixed CVE-2019-13752 (#1786529) 
  - Fixed CVE-2019-13753 (#1786535) 
  - Fixed CVE-2019-13734 (#1786509) 
  - Fixed CVE-2019-19924 (#1789776)
  - Fixed CVE-2019-19923 (#1789812)
  - Fixed CVE-2019-19925 (#1789808)
  - Fixed CVE-2019-19959 (#1789823)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.26.0-10
changelog:
  - Fixed CVE-2020-13632 (#1845572)
  - Fixed CVE-2020-13631 (#1845474)
  - Fixed CVE-2020-13630 (#1845153)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.26.0-14
changelog:
  - Fixed CVE-2019-5827 (#1710184)
  - Fixed CVE-2019-13750 (#1786510)
  - Fixed CVE-2019-13751 (#1786522)
  - Fixed CVE-2019-19603 (#1792013)
  - Fixed CVE-2020-13435 (#1841233)


author: Petr Kubat <pkubat@redhat.com> - 3.26.0-1
changelog:
  - Updated to version 3.26.0 (https://sqlite.org/releaselog/3_26_0.html)
    Fixes fts3/4 corrupt database exploit (#1659684)


author: Michal Ruprich <mruprich@redhat.com> - 4.8.4-7
changelog:
  - Adding a timeout for TLS close
  - Resolves: RHEL-108115 - "cannot seek on data source" in TLS lftp sessions


author: Adam Jackson <ajax@redhat.com> - 1.6.5-4
changelog:
  - Split libX11-xcb to its own subpackage. This doesn't have much effect at
    the moment because x11-xcb.pc still lists both libX11 and libxcb in
    Requires, but once that's fixed eg. libEGL should be able to be installed
    without libX11.


author: José Expósito <jexposit@redhat.com> - 1.6.8-7
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.12-9
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160229)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160231)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160239)


author: José Expósito <jexposit@redhat.com> - 3.5.12-10
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.12-9
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2161800)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2161808)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160238)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 12.10.0-17
changelog:
  - Python 2 binary package renamed to python2-appindicator
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Parag Nemade <paragn AT fedoraproject DOT org> - 1.1.3-10
changelog:
  - Fix bogus date in %changelog
  - ant-nodeps is dropped from ant-1.9.0-2 build in rawhide
  - Drop buildroot, %clean, %defattr and removal of buildroot in %install


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-4
changelog:
  - Use libblkid to check swap status before swapon (vtrefny)
    Related: rhbz#1634016
  - Add error codes and Python exceptions for swapon fails (vtrefny)
    Resolves: rhbz#1634016


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-7
changelog:
  - Use major/minor macros from sys/sysmacros.h instead of linux/kdev_t.h (vtrefny)
    Resolves: rhbz#1644825


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-9
changelog:
  - Remove device-mapper-multipath dependency from fs and part plugins (vtrefny)
    Resolves: rhbz#1700297


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-12
changelog:
  - Use cryptsetup to check LUKS2 label
    Resolves: rhbz#1778689
  - Fix expected cache pool name with newest LVM
    Related: rhbz#1778689


author: Vojtech Trefny <vtrefny@redhat.com> - 2.17-1
changelog:
  - Redirect cryptsetup log to libblockdev log (vtrefny)
  - Add a generic logging function for libblockdev (vtrefny)
  - Add functions to resize LUKS 2 (vtrefny)
  - Add function to get information about LUKS 2 integrity devices (vtrefny)
  - Add function to get information about a LUKS device (vtrefny)
  - Add a basic test for creating LUKS 2 format (vtrefny)
  - Use libblockdev function to create LUKS 2 in tests (vtrefny)
  - Add support for creating LUKS 2 format (vtrefny)
  - Skip bcache tests on Rawhide (vtrefny)
  - Allow building libblockdev without Python 2 support (vtrefny)
  - Allow compiling libblockdev crypto plugin without escrow support (vtrefny)
  - Require at least libndctl 58.4 (vtrefny)
  - New function for luks metadata size (japokorn)
  - Add functions to backup and restore LUKS header (vtrefny)
  - Add function for killing keyslot on a LUKS device (vtrefny)
  - Add functions to suspend and resume a LUKS device (vtrefny)
  - Use '=' instead of '==' to compare using 'test' (v.podzimek)
  - lvm-dbus: Check returned job object for error (vtrefny)
  - Get sector size for non-block NVDIMM namespaces too (vtrefny)
  - Fix memory leaks discovered by clang (vtrefny)
  - Add new functions to docs/libblockdev-sections.txt (segfault)
  - Make a link point to the relevant section (segfault)
  - Don't use VeraCrypt PIM if compiled against libcryptsetup < 2.0 (segfault)
  - Make keyfiles parameter to bd_crypto_tc_open_full zero terminated (segfault)
  - Add function bd_crypto_device_seems_encrypted (segfault)
  - Support VeraCrypt PIM (segfault)
  - Support TCRYPT system volumes (segfault)
  - Support TCRYPT hidden containers (segfault)
  - Support TCRYPT keyfiles (segfault)
  - Support unlocking VeraCrypt volumes (segfault)
  - Enforce ZERO_INIT gcc backwards compatibility (bjornpagen)
  - Add function for getting NVDIMM namespace name from devname or path (vtrefny)
  - Add --without-xyz to DISTCHECK_CONFIGURE_FLAGS for disabled plugins (vtrefny)
  - Add tests for the NVDIMM plugin (vtrefny)
  - Add the NVDIMM plugin (vtrefny)
  - Fix build with clang (bjornpagen)
  - s390: don't hardcode paths, search PATH (flokli)
  - Fix build against musl libc (bjornpagen)
  - Fix python2-gobject-base dependency on Fedora 26 and older (vtrefny)
  - Sync the spec file with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-1
changelog:
  - Use python interpreter explicitly when running boilerplate_generator.py (vtrefny)
  - vdo: Implement bd_vdo_get_stats() (tbzatek)
  - Add test for is_tech_available with multiple dependencies (vtrefny)
  - lvm-dbus.c: Check for 'lvmdbus' dependency in 'bd_lvm_is_tech_avail' (vtrefny)
  - lvm.c: Check for 'lvm' dependency in 'bd_lvm_is_tech_avail' (vtrefny)
  - Fix licence headers in sources (vtrefny)
  - Fix three memory leaks in lvm-dbus.c (vtrefny)
  - Ignore "bad-super-call" pylint warning in BlockDev.py (vtrefny)
  - Fix running pylint in tests (vtrefny)
  - Fix vdo configuration options definition in spec file (vtrefny)
  - Fix calling BlockDev.reinit in swap tests (vtrefny)
  - Fix how we check zram stats from /sys/block/zram0/mm_stat (vtrefny)
  - Skip VDO tests also when the 'kvdo' module is not available (vtrefny)
  - Add version to tests that should be skipped on CentOS/RHEL 7 (vtrefny)
  - Skip btrfs tests if btrfs module is not available (vtrefny)
  - Do not build KBD plugin with bcache support on RHEL (vtrefny)
  - Do not build btrfs plugin on newer RHEL (vtrefny)
  - fs: Properly close both ends of the pipe (tbzatek)
  - Make sure library_test works after fixing -Wstrict-prototypes (vtrefny)
  - Make sure library tests properly clean after themselves (vtrefny)
  - pkg-config: add -L${libdir} and -I${includedir} (max.kellermann)
  - plugins/kbd: make wait_for_file() static (max.kellermann)
  - plugins/lvm{,-dbus}: get_lv_type_from_flags() returns const string (max.kellermann)
  - plugins/dm: add explicit cast to work around -Wdiscarded-qualifiers (max.kellermann)
  - plugins/crypto: work around -Wdiscarded-qualifiers (max.kellermann)
  - plugins/check_deps: make all strings and `UtilDep` instances `const` (max.kellermann)
  - exec: make `msg` parameters const (max.kellermann)
  - fix -Wstrict-prototypes (max.kellermann)
  - module.c: Accept kernel modules if they are built-in (marco.guerri.dev)
  - BlockDev.py Convert dictionary keys to set before using them (vtrefny)
  - Skip 'test_cache_pool_create_remove' on CentOS 7 (vtrefny)
  - Re-order libbd_crypto_la_LIBADD to fix libtool issue (tom)
  - acinclude.m4: Use AS_EXIT to fail in LIBBLOCKDEV_FAILURES (vtrefny)
  - configure.ac: Fix missing parenthesis in blkid version check (vtrefny)
  - Allow specifying extra options for PBKDF when creating LUKS2 (vtrefny)
  - Reintroduce python2 support for Fedora 29 (vtrefny)
  - Use versioned command for Python 2 (vtrefny)
  - Fix few wrong names in doc strings (vtrefny)
  - Make sure all our free and copy functions work with NULL (vtrefny)
  - Use libblkid in bd_crypto_is_luks (vtrefny)
  - vdo: Properly destroy the yaml parser (tbzatek)
  - Add a simple test case for bd_crypto_tc_open (vtrefny)
  - Add Python override for bd_crypto_tc_open_full (vtrefny)
  - Show simple summary after configure (vtrefny)
  - Do not build VDO plugin on non-x86_64 architectures (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Simone Caronni <negativo17@gmail.com> - 0.9.3-2
changelog:
  - Use autotools to get rid of RPATH.
  - Fix Java build requirements for RHEL/CentOS 7.
  - Clean up SPEC file, rpmlint fixes.
  - Add license macro.


author: Robert Scheck <robert@fedoraproject.org> 1.4.4-1
changelog:
  - Update to upstream 1.4.4 (#1352496)
  - Reworked spec file to build libburn1 for RHEL >= 6 (#750009)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.11-4
changelog:
  - Python 2 binary package renamed to python2-libbytesize
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.0-1
changelog:
  - Make more space for CI status image (vtrefny)
  - Include limits.h to make sure ULONG_MAX is defined (vpodzime)
  - Remove extra 'is' in two docstrings (vpodzime)
  - Properly support 64bit operands (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.1-1
changelog:
  - Add NEWS.rst file (vtrefny)
  - Fix source and url in spec file (vtrefny)
  - Use only one git tag for new releases (vtrefny)
  - Actually translate the units when expected (vpodzime)
  - Add two temporary test files to .gitignore (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.2-1
changelog:
  - Use only version as a tag of the last release (vpodzime)
  - Do not require the glib-2.0 pkgconfig package (vpodzime)
  - Do not lie about tag creation (vpodzime)


author: Vojtech Trefny <vtrefny@redhat.com> - 1.3-1
changelog:
  - Allow building libbytesize without Python 2 support (vtrefny)
  - Sync spec with downstream (vtrefny)
  - Add gcc to BuildRequires (vtrefny)
  - Fix links for documentation and GH project (vtrefny)
  - Add a HACKING.rst file (vpodzime)
  - Do not segfault when trying to bs_size_free NULL (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 1.4-1
changelog:
  - Squashed 'translation-canary/' changes from 840c2d6..fccbb1b (vtrefny)
  - Make sure the test script fails if one of the test runs fail (vtrefny)
  - Do not try to run python2 tests without python2 support (vtrefny)
  - Fix licence header for "gettext.h" (vtrefny)
  - Do not use rpm to check for Zanata client (vtrefny)
  - Use new ldconfig_scriptlets macro in spec (vtrefny)


author: Tom Hromatka <tom.hromatka@oracle.com> - 2.0
changelog:
  - Add cgroup v2 support to all libcgroup tools -
    cgclassify, cgclear, cgconfigparser, cgcreate, cgdelete, cgexec, cgget,
    cgrulesengd, cgset, cgsnapshot, lscgroup, lssubsys. See github issue #12.
  - Fix an issue with parallel builds
  - Add extensive functional tests
  - Remove .libs from Makefile.am files
  - Major refactor of cgget to make it more closely align with the other tools
  - Fix many string truncation and possible buffer overflow warnings


author: Tom Hromatka <tom.hromatka@oracle.com> - 2.0.1
changelog:
  - Allow reading/writing from cgroup.* files in cgroup v2
  - Add support for cgroup v2's cgroup.threads file
  - Fix issue where libcgroup/pam wasn't working properly when
  - cgrulesengd is disabled
  - Fix a bug where the cgroup version wasn't initialized in a
  - named cgroup v1 hierarchy
  - Various automake bug fixes
  - Build PAM module as unversioned DSO
  - Fix build issues with musl libc
  - Fix potential TOCTOU race in cgroup_get_procs()


author: Tom Hromatka <tom.hromatka@oracle.com> - 2.0.2-1.0.1
changelog:
  - Fix extra spaces in configure.ac's --enable-bindings
  - Fix potential segfault if there are more than 100 cgroup mount points


author: Tom Hromatka <tom.hromatka@oracle.com> - 3.0.0-1.0.1
changelog:
  - Introduce cgxget and cgxset - tools to abstract cgroup v1 and v2 systems
  - Introduce new C APIs that abstract the cgroup v1 and v2 interfaces for the user
    Remove the cgclear tool
  - Introduce modern Cython-based Python bindings, replacing the old bindings
  - Add spdx license tags across the files
  - Introduce a process for handling security-related vulnerabilities
  - Fix many warnings and errors reported by coverity
  - Add full cgroup v2 support to continuous integration
  - Add code quality analysis to continuous integration
  - Add Linux kernel syntax style and add checking to continuous integration


author: Tom Hromatka <tom.hromatka@oracle.com>- 3.1.0-1.0.1
changelog:
  - Add systemd C APIs
  - Add systemd support to all command line tools, including cgcreate,
    cgconfigparser, cgexec, and cgclassify. Note the usage of the -b flag in many
    tools to ignore the default systemd hierarchy and operate from the root of
    the cgroup hierarchy
  - Add python systemd APIs
  - Improved handling of legacy (cgroup v1), hybrid (v1/v2), and unified (v2)
    cgroup hierarchies
  - Add several new C APIs, including:
    cg_setup_mode_t() - A function that returns the current cgroup setup mode
    (legacy, hybrid, or unified)
    Various functions for better traversal through a struct cgroup
    cgroup_create_scope() and cgroup_create_scope2() for creating systemd scopes
    cgconfigparser now supports a systemd section
  - Libcgroup python bindings have matured greatly but are still considered
    experimental and subject to change. Community feedback here would be greatly
    appreciated
    Add rudimentary logging support
    Add systemd support
    Add setup mode (legacy, hybrid, unified) support
    Add several APIs for operating on struct cgroup in a Pythonic manner
    Add methods for moving processes within cgroups
    Rename blacklist to denylist
    Rename whitelist to allowlist
    Add many functional tests
  - Remove ExecStop from extras-3.1.0/cgconfig.service unit
  - Add dependency of selinux-policy package for libcgroup-tools


author: Filip Januš <fjanus@redhat.com> 5.3.28-42
changelog:
  - Apply the previous change only on aarch64 to limit the risk of unwanted impact
  - Resolves: #1992402


author: Sam Booth <sam.booth@oracle.com> - 5.3.28-42.0.1
changelog:
  - Update URL in rpm description [Orabug: 35986894]
  - Change http links in spec to https [Orabug: 35986894]
  - Buildrequire java-devel 1:1.8.0


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.12-22
changelog:
  - Python 2 binary package renamed to python2-libdnet
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Dominik Mierzejewski <rpm[AT]greysector.net> 5.0.3-4
changelog:
  - fix FTBFS due to doc files in the wrong place (#1307717)
  - use license macro
  - drop unnecessary defattr declarations


author: Filip Januš <fjanus@redhat.com> - 12.2-1
changelog:
  - Rebase onto: 12.2
  - update of patch(libecpg-10.5-external-libpq.patch) was needed
  - add upstream patch libecpg-12.2-dependency-build.patch
    https://www.postgresql.org/message-id/20200321221303.GA17979%40momjian.us


author: Honza Horak <hhorak@redhat.com> - 13.1-3
changelog:
  - Add Requires: libpgtypes to avoid the need to test interoperability
    between the various combinations of old and new subpackages


author: Attila Lakatos <alakatos@redhat.com> - 0.1.10-3
changelog:
  - Rebuild due to the following message: libestr-0.1.10-2.el8 has already been built
    resolves: rhbz#2056293


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Parag Nemade <paragn AT fedoraproject DOT org> - 1.1.3-13
changelog:
  - ant-nodeps is dropped from ant-1.9.0-2 build in rawhide
  - Drop buildroot, %clean, %defattr and removal of buildroot in %install


author: Benjamin Berg <bberg@redhat.com> - 1.90.0-2
changelog:
  - Add patch to remove debug spew from udev rules
  - Add patch to fix compilation error
  - Related: rhbz1740752


author: Kalev Lember <klember@redhat.com> - 0.17.6-1
changelog:
  - Update to 0.17.6
  - Don't set group tags
  - Co-own gir directories instead of depending on gobject-introspection
  - Use make_install macro
  - Update project URLs


author: Brian C. Lane <bcl@redhat.com> - 0.26.5-1
changelog:
  - Rebase to 0.26.5 (CVE-2018-11235, CVE-2018-10887, CVE-2018-10888)
  - Disable SSH so that libssh2 is not required
  - Use python3 when building
  - Add README.rhel8 explaining why SSH is disabled


author: Brian C. Lane <bcl@redhat.com> - 0.26.8-1
changelog:
  - Update to 0.26.8
    Resolves: rhbz#1638880
  - Disable upstream online tests
    Related: rhbz#1638880
  - tests: Increase TOOBIG value used on i686
    Related: rhbz#1638880


author: Brian C. Lane <bcl@redhat.com> - 0.26.4-1
changelog:
  - Update to libgit2-glib-0.26.4
  - Switch to using meson build system
  - Disable SSH so that libssh2 is not required
  - Add README.rhel8 explaining why SSH is disabled


author: Adam Jackson <ajax@redhat.com> - 1.0.1-0.6.git5baa1e5
changelog:
  - Enable %check for all but ppc64 and s390x, which has known but low-impact
    failures
  - Simplify %release


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Tomas Pelka <tpelka@redhat.com> - 0.3.4-12
changelog:
  - Bumped version and rebuildccagaincafter z-stream unfreeze to trigger gating for 8.2.0.z properly
    Resolves: rhbz#1813962


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.8.3-20
changelog:
  - Python 2 binary package renamed to python2-gpod
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Caolán McNamara <caolanm@redhat.com> 1.14.29-6
changelog:
  - Resolves: rhbz#1202683 thumbnails not created in absence of ImageMagick
    because gdk-pixbuf2-devel not present at build time


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.3-6
changelog:
  - Rebase to libguestfs 1.36 in RHEL 7.4.
    resolves: rhbz#1359086
  - v2v: always use names for libvirt pools
    resolves: rhbz#1141631
  - v2v: correctly find GRUB in RHEL UEFI guests
  - v2v: uninstall VMware tools packages from guests
    resolves: rhbz#1155150
  - v2v: install RHEV-APT only when using -o rhev/-o vdsm
    resolves: rhbz#1161019
  - New API: btrfs-filesystem-show
    resolves: rhbz#1164765
  - p2v: always enable debugging when running virt-v2v
    resolves: rhbz#1167623
  - libguestfs prefers virtio-pci on aarch64
    resolves: rhbz#1237250
  - v2v: make sure to copy all the driver files on Windows
    resolves: rhbz#1255610
  - Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
    Requires to >= 1.3.10-5.8.el7
    resolves: rhbz#1311890
  - v2v: ignore all the environment variables for proxy when exporting from
    vCenter
    resolves: rhbz#1354507
  - virt-sysprep can deal with full-LUKS encrypted guests
    resolves: rhbz#1362649
  - All the tools have bash completion scripts.
    resolves: rhbz#1367738
  - v2v: do not remove Processor and Intelppm nodes in Windows guests
    resolves: rhbz#1372668
  - Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
    regular expression in file_contexts file
    resolves: rhbz#1374232
  - v2v: set all the properties on creation when exporting to Glance
    resolves: rhbz#1374405
  - v2v: set hw_video_model when exporting to Glance
    resolves: rhbz#1374651
  - v2v: fix OVA conversion as root using the libvirt backend
    resolves: rhbz#1375157
  - Various improvements and fixes to the documentation
    resolves: rhbz#1377081
    resolves: rhbz#1390876
    resolves: rhbz#1398070
    resolves: rhbz#1425306
  - v2v: support <listen type='socket'> and <listen type='none'>
    resolves: rhbz#1378022
  - v2v: allow libvirt >= 2.1.0 for vCenter conversions
    resolves: rhbz#1379240
  - p2v: enable mnemonics in the GUI
    resolves: rhbz#1379289
  - Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
    resolves: rhbz#1382275
  - Correctly parse mount options in btrfs entries in /etc/fstab.
    resolves: rhbz#1383517
  - Read secrets from libvirt domains, when inspecting them
    resolves: rhbz#1392798
  - v2v: add --vdsm-compat=1.1 flag for VDSM
    resolves: rhbz#1400205
  - Fix inspection with UsrMove and /usr in a separate partition
    resolves: rhbz#1401474
  - v2v: improve import compatibility with OVAs produced by AWS
    resolves: rhbz#1402301
  - resize: allow URIs for the output disk
    resolves: rhbz#1404182
  - Disable EDD when launching the appliance
    resolves: rhbz#1404287
  - v2v: increase the memory allocated to the appliance
    resolves: rhbz#1418283
  - p2v: switch from GTK+ 2 to GTK+ 3
  - p2v: add dbus-devel as BuildRequires to disable suspension during the
    conversion
  - libguestfs-java: bump the java-headless Require to >= 1.7.0, matching the
    Build-Require, and the generated bytecode
    resolves: rhbz#1364518
  - Do not try to use/write to /var/cache/yum & /var/log/yum.log
  - Bump ocaml-findlib-devel BuildRequires to >= 1.3.3-7.el7, because of
    RHBZ#1403897
  - v2v: remove --dcpath & --dcPath from --help output too
    resolves: rhbz#1429430
  - v2v: force VNC as display for -i disk, as SDL is not supported
    resolves: rhbz#1372671
  - v2v, p2v: rename rhvm network to ovirtmgmt
    resolves: rhbz#1429491
  - v2v: when exporting to local disk, check that UEFI firmware is installed
    before conversion
    resolves: rhbz#1429506
  - dib: actually generate SHA256 checksums when using --checksum
    resolves: rhbz#1430184
  - v2v: do not mention SUSE Xen hosts as supported
    resolves: rhbz#1430203
  - v2v: depend on OVMF/AAVMF, for converting EFI guests
    resolves: rhbz#1429643
  - v2v: use absolute path when using an OVA as backing file
    resolves: rhbz#1430680
  - v2v: support Debian/Ubuntu guests
    resolves: rhbz#1387213
  - sysprep: remove DHCP_HOSTNAME entries
    resolves: rhbz#1427529
  - v2v: avoid repeated "run virt-v2v -v -x" message on error
    resolves: rhbz#1167623
  - bash-completion: add script for virt-v2v-copy-to-local
    resolves: rhbz#1367738
  - v2v: fix virtio block driver installation for Windows 10 and Windows 2016
    resolves: rhbz#1434737
  - Replace the libosinfo dependency with osinfo-db, since we are only using
    the osinfo database.
  - v2v: fix virtio driver installation for Windows 8 UEFI
    resolves: rhbz#1431579
  - v2v: new 'vmx' import method
    resolves: rhbz#1441197
  - v2v: properly identify Windows 2016 guests when exporting them to RHV-M
    resolves: rhbz#1447202
  - Run pvresize in non-interactive mode
    resolves: rhbz#1460692
  - resize: make sure the input disk is read-only
    resolves: rhbz#1463714
  - Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
    resolves: rhbz#1463646


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.10-6
changelog:
  - Rebase to libguestfs 1.36.10 in RHEL 7.5.
    resolves: rhbz#1472272
  - Build against OCaml 4.05
    resolves: rhbz#1447981
  - Enable the copyonread flag when running the appliance using libvirt.
    resolves: rhbz#1466563
  - Make sure kernel-rt is never used as Requires.
    resolves: rhbz#1471651
  - v2v: disable unconfiguration of manually installed VMware tools.
    resolves: rhbz#1477905
  - v2v: prefer pigz or pxz for uncompressing OVA files, if available
    resolves: rhbz#1448739
  - resize: handle empty UUIDs for swap partitions
    resolves: rhbz#1482737
  - v2v: remove mention of --dcpath in an error message
    resolves: rhbz#1486197
  - Disables the QEMU image file locking when opening disks as read-only
    resolves: rhbz#1417306
    resolves: rhbz#1503497
  - Briefly document the format used for URIs
    resolves: rhbz#1450325
  - v2v: deal with grub2 configurations without a default set
    resolves: rhbz#1472288
  - v2v: warn when a guest has passthrough devices
    resolves: rhbz#1472719
  - v2v: fix three regular expressions
    resolves: rhbz#1494555
  - v2v: enable conversion of full-disk LUKS-encrypted Linux guests
    resolves: rhbz#1451665
  - v2v: new 'vddk' import method
    resolves: rhbz#1477912
    resolves: rhbz#1513884
  - Enable libguestfs to work on z Systems
    resolves: rhbz#1479526
  - p2v: fx check for sudo requiring a password
    resolves: rhbz#1500673
  - v2v: handle disks with snapshots in vCenter
    resolves: rhbz#1172425
  - rescue: backport improved version
    resolves: rhbz#1438710
  - v2v: improve bootloader detection
    resolves: rhbz#1508299
  - v2v: parse MAC address of network interfaces in OVF files
    resolves: rhbz#1506572
  - Unconditionally depend on libvirt-daemon-kvm >= 3.9.0-1, which will always
    pull the right qemu-kvm too, and thus remove the unversioned dependencies
    on it
    resolves: rhbz#1500870
  - v2v: fix RPM file owned test
    resolves: rhbz#1503958
  - Do not open read-only disks using <shareable/> in the libvirt backend
    resolves: rhbz#1518517
  - v2v: handle better when grubby does not report any default kernel
    resolves: rhbz#1519204
  - v2v: enhance vmx import method to access via SSH
    resolves: rhbz#1523767
  - builder: fix caching of templates when using --cache-all-templates
    resolves: rhbz#1523650


author: Jacob Wang <jacob.wang@oracle.com> - 1:1.38.4-10.0.1
changelog:
  - Config supermin to use host yum.conf in ol8 [Orabug: 29319324]
  - Set DISTRO_ORACLE_LINUX correspeonding to ol


author: John Mcwalters <john.mcwalters@oracle.com> - 1:1.38.4-11.1.0.1
changelog:
  - Config supermin to use host yum.conf in ol8 [Orabug: 29319324]
  - Set DISTRO_ORACLE_LINUX corresponding to ol


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.4-11
changelog:
  - Use a better icon for RHEL 7+ guests
    resolves: rhbz#1679483
  - Fix inspection of partition-less devices
    resolves: rhbz#1679966
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1688062


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.4-12
changelog:
  - v2v: update nbdkit information in documentation
    resolves: rhbz#1651115
  - v2v: use proper SELinux label for nbdkit sockets
    resolves: rhbz#1717088


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-23
changelog:
  - Ignore the user.WofCompressedData xattr
    resolves: rhbz#1811539
  - sysprep: new ipa-client and kerberos-hostkeytab operations
    resolves: rhbz#1789592


author: David Sloboda <david.x.sloboda@oracle.com> - 1:1.40.2-25.0.1
changelog:
  - Replace upstream references from description tag
  - Config supermin to use host yum.conf in ol8 [Orabug: 29319324]
  - Set DISTRO_ORACLE_LINUX correspeonding to ol


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.40.2-26
changelog:
  - insufficient default memsize to open anaconda default RHEL 8.2 luks device
    resolves: rhbz#1837765


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.40.2-27
changelog:
  - selinux-relabel does not work if SELINUXTYPE != targeted
  - tar-in command does not allow restoring file capabilities
    resolves: rhbz#1384241 rhbz#1828952


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.44.0-4
changelog:
  - Autodetect backing format for qemu-img create -b
  - Move appliance to separate subpackage
  - Read rpm database through librpm
    resolves: rhbz#2013916, rhbz#1989520, rhbz#1836094


author: Richard W.M. Jones <rjones@redhat.com> - 7.0-2
changelog:
  - Resync against Rawhide package (ntfs-3g 2013.1.13).
  - Drop HAL file since HAL is dead.
    resolves: rhbz#819939


author: Richard W.M. Jones <rjones@redhat.com> - 7.1-2
changelog:
  - New package for RHEL 7.1
  - Rebase to ntfs-3g 2014.2.15
    resolves: rhbz#1100319
  - Change the package so it works with supermin5.
  - Remove dependency on external FUSE.


author: Richard W.M. Jones <rjones@redhat.com> - 7.2-2
changelog:
  - Fix for handling guest filenames with invalid or incomplete
    multibyte or wide characters
    resolves: rhbz#1301593


author: Richard W.M. Jones <rjones@redhat.com> - 8.0-1
changelog:
  - Rebase to 2017.3.23.
  - Remove patches which are now upstream.
  - Resynch with Fedora package.
  - Enable all architectures for RHEL 8.


author: Richard W.M. Jones <rjones@redhat.com> - 8.0-3
changelog:
  - Fix for CVE-2019-9755
    (heap-based buffer overflow leads to local root privilege escalation)
    resolves: rhbz#1698503


author: Richard W.M. Jones <rjones@redhat.com> - 8.6-1
changelog:
  - Rebase to ntfs-3g 2021.8.22
  - Fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287, CVE-2021-33289,
    CVE-2021-35266, CVE-2021-35267, CVE-2021-35268, CVE-2021-35269,
    CVE-2021-39251, CVE-2021-39252, CVE-2021-39253, CVE-2021-39254
    resolves: rhbz#2004490


author: Richard W.M. Jones <rjones@redhat.com> - 8.8-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127240 rhbz#2127248
    (also: 2127233 2127234 2127241 2127249 2127255 2127256 2127262 2127263)


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-4
changelog:
  - Ensure gxps_archive_read_entry() fills the GError in case of failure
  - Handle errors returned by archive_read_data()
  - Fixes CVE-2018-10733
  - Resolves: #1576113


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-5
changelog:
  - Fix integer overflow in png decoder
  - Clear the error before trying to load an image again
  - Resolves: #1524378


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.34-1
changelog:
  - update to 1.34 (CVE-2017-14062)
  - include soname in file list
  - use macros for ldconfig
  - add gcc to build requirements


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.34-2
changelog:
  - fix ABI compatibility with libidn-1.33 and earlier (#1566414 #1573961)
  - add texinfo to build requirements


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.11-24
changelog:
  - Python 2 binary package renamed to python2-libieee1284
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Bastien Nocera <bnocera@redhat.com> - 1.2.0-12
changelog:
  + libimobiledevice-1.2.0-12
  - Replace patches with a single mega-patch
  - Fixes usbmuxd for iOS 11 devices


author: Peter Hutterer <peter.hutterer@redhat.com> 1.11.903-2
changelog:
  - drop libinput replay, this tool requires libevdev-python which we don't
    have in RHEL and it's a debugging-tool only.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.3-3
changelog:
  - Allow for the tablet mode quirk to apply to touchpads (#1664225)
  - Add a quirk for the Asus VivoBook Flip to keep the
    keyboard and touchpad working in tablet mode


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 1.6.1-6
changelog:
  - Fix v1.6.1-implicit-fallthrough.patch compatibility with gcc < 7.
  - Use %ldconfig_scriptlets.
    https://fedoraproject.org/wiki/Packaging:Scriptlets#Shared_Libraries


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 1.6.1-7
changelog:
  - Add: BuildRequires: gcc
    https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 1.6.1-8
changelog:
  - Enable tests (PTUNIT) and man pages (MAN).
  - Change BuildRequires: gcc -> gcc-c++ as PTUNIT tests require C++.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.4-19
changelog:
  - Python 2 binary package renamed to python2-libiptcdata
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Cole Robinson <crobinso@redhat.com> - 1.18.0-2
changelog:
  - Fix rdma deps and don't restrict archs
  - Add --disable-werror to fix gcc8 build (bz #1556044)
  - Spec file cleanups (bz #1483290)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-5.el8
changelog:
  - libiscsi-iser_rcv_completion-unify-error-handling.patch [bz#1634541]
  - libiscsi-iser-fix-posting-of-receive-descriptors.patch [bz#1634541]
  - libiscsi-sync-remove-unnecessary-checks.patch [bz#1634541]
  - libiscsi-do-not-warn-for-strncpy.patch [bz#1634541]
  - libiscsi-avoid-fallthrough.patch [bz#1634541]
  - libiscsi-avoid-truncation-when-logging-message-that-includes-.patch [bz#1634541]
  - Resolves: bz#1634541
    (Fix important coverity issues (libiscsi))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> -
changelog:
  - libiscsi-fix-connection-to-LUN-with-IPv6-address.patch [bz#1597942]
  - Resolves: bz#1597942
    (Qemu-kvm fails to connect to iscsi LUN by IPV6 address)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-7.el8
changelog:
  - libiscsi-redhat-Remove-disable-werror-from-spec-file.patch [bz#1581025]
  - Resolves: bz#1581025
    (Remove --disable-werror from spec file)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.4.8-4
changelog:
  - Remove KDE bits
  - Provide: mkisofs (as genisoimage does)
  - Increase alternative priority to win over genisoimage
  - Update RHEL conditionals for lib{isofs,burn} renaming to match those packages


author: Robert Scheck <robert@fedoraproject.org> 1.4.2-3
changelog:
  - Move large documentation into -doc subpackage (#744416)
  - Reworked spec file to build libisofs1 for RHEL >= 6 (#744416)


author: Parag Nemade <pnemade AT redhat DOT com> - 1:0.2.7-11
changelog:
  - Resolves:rh#1615534: libkkc-data FTBFS for missing BuildRequires
  - moved this package to use python3


author: Akira TAGOH <tagoh@redhat.com> - 0.6.2-8
changelog:
  - Suppress documentation in Flatpak builds
    Resolves: rhbz#1896257
  - build gir with non-parallel to avoid strange behavior.


author: Martin Gieseking <martin.gieseking@uos.de> - 2.6.2-12
changelog:
  - Applied security fixes from EL 7.4 (CVE-2014-8184, CVE-2017-13738, CVE-2017-13740, CVE-2017-13741, CVE-2017-13742, CVE-2017-13743, CVE-2017-13744)
  - Dropped redundant parts of the spec file.
  - Updated URL.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.6.2-13
changelog:
  - Python 2 binary package renamed to python2-louis
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: David King <dking@redhat.com> - 2.6.2-17
changelog:
  - Fix CVE-2018-11577 (#1585906)
  - Fix CVE-2018-11684 (#1588632)
  - Fix CVE-2018-11685 (#1588637)
  - Fix CVE-2018-12085 (#1589942)


author: Daniel Kopecek <dkopecek@redhat.com> - 9-3
changelog:
  - Enabled build gating
  - Synced layout test assumtions with recent cryptsetup changes
    Resolves: rhbz#1625683


author: Sergio Correia <scorreia@redhat.com> - 9-3.1
changelog:
  - LUKSMeta now sets error level from libcryptsetup to CRYPT_LOG_ERROR, and
    this output is logged to stderr
    Resolves: rhbz#1770395


author: Nicolas Chauvet <kwizart@gmail.com> - 0.15.1b-15
changelog:
  - Don't use multiarch patch when the result is not hardcoded
  - Update FPM
  - Add patches from lp#534287 and lp#534287


author: Michal Ruprich <mruprich@redhat.com> - 1.2.0-6
changelog:
  - Adding libmaxminddb as a new package to RHEL-8 (rhbz#1607927)
  - Adding Recommends tag for geolite2 databases


author: Jan Vcelak <jvcelak@fedoraproject.org> 1.1.1-4
changelog:
  - remove utils subpackage and place mmdblookup into devel subpackage
  - remove Group from the spec file
  - move NOTICE and Changes.md to devel subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 2.5.0-2
changelog:
  - Fix memory corruption error using Module.search_rpms() from python
  - Speed up valgrind tests
  - Resolves: rhbz#1714766


author: Richard W.M. Jones <rjones@redhat.com> - 0.7-0.1.alpha
changelog:
  - New upstream version 0.7alpha.
  - No tarball was uploaded so temporarily use tarball from github.
  - Fixes CVE-2018-14679 libmspack: off-by-one error in the CHM PMGI/PMGL
    chunk number validity checks


author: Richard W.M. Jones <rjones@redhat.com> - 0.7-0.2.alpha.4
changelog:
  - Fix for CVE-2019-1010305
  - Remove "fix" for CVE-2018-14680 as this fix is included in base tar ball.
    resolves: rhbz#1736745, rhbz#1736743


author: Dominik Mierzejewski <dominik@greysector.net> - 1.1.13-2
changelog:
  - Use https source URL
  - Drop obsolete spec elements
  - Use license macro
  - Update libusbx-devel build dependency
  - Drop ancient (F15) Obsoletes:
  - Tighten file list


author: David King <amigadave@amigadave.com> 5.1.0-1
changelog:
  - Update to 5.1.0 (#1164434)
  - Drop libxml2 patch (fixed upstream)
  - Use pkgconfig for BuildRequires


author: David Tardon <dtardon@redhat.com> - 0.3.11-3
changelog:
  - Resolves: rhbz#1461763 CVE-2017-9433 Out-of-bounds write in the
    MsWrd1Parser::readFootnoteCorrespondence function


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.2-1
changelog:
  - New upstream version 1.0.2.
  - Remove patches which are upstream.
  - Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
  - Fix previous commit message.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.3-1
changelog:
  - New upstream version 1.0.3.
  - Contains fix for remote code execution vulnerability.
  - Add new libnbd-security(3) man page.


author: Robert Scheck <robert@fedoraproject.org> 1.1.6-7
changelog:
  - Run autoreconf to recognize aarch64 (#925813)
  - Conditionalized usage of %{_lib} vs %{_libdir} for RHEL < 7
  - Tight run-time dependencies between sub-packages via %{?_isa}


author: Tomas Hoger <thoger@redhat.com> - 0.1.13-11
changelog:
  - Add conditional for building with(out) gst010 / GStreamer 0.10 support.
  - Disable gst010 plugin by default.


author: Stefan Becker <chemobejk@gmail.com> - 0.1.14-3
changelog:
  - update to 0.1.14-70-gfb2f1f7 with alternate server fixes for SIPE
  - add autoreconf build step
  - remove examples subpackage as examples are no longer installed


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-4.20171128gitfb2f1f7
changelog:
  - enable make check again
  - make tests pass in Koji
  - disable test-new-dribble that sometimes hangs indefinitely
  - make tests compile on i686
  - make the package build on armv7hl
  - make the package build on Fedora 28
  - avoid build failure if gstreamer-plugins-base-devel is installed
  - move autoreconf invocation to %prep
  - use Name Version Release that explicitly identifies an SCM snapshot (#1541646)


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-6.20171128gitfb2f1f7
changelog:
  - temporarily make the upstream test-suite run on Intel arches only
  - disable test-send-recv, which fails in Koji


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-7.20180504git34d6044
changelog:
  - component: accept TURN in nice_component_verify_remote_candidate() (#1541646)
  - update to 0.1.14-85-g34d6044 (#1541646)


author: Thomas Haller <thaller@redhat.com> - 1.8.10-2
changelog:
  - fix double-free handling VPN data in nm-applet (rh #1541565)
  - fix certificate chooser for no available modules (bgo #785674)


author: Lubomir Rintel <lkundrak@v3.sk> - 1.8.26-2
changelog:
  - Fixes suggested in review by Matthew Krupcale (#1763285):
  - Add gcc BR
  - Fixed the libnma-gtk4 conditional
  - Made dependencies arch-specific where relevant
  - Dropped obsolete macros
  - Install license file with libnma-gtk4


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release (rh #2062686)
  - Include OWE wireless security (rh #2060327)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057514)


author: Kalev Lember <klember@redhat.com> - 0.7.7-1
changelog:
  - Update to 0.7.7
  - Remove lib64 rpaths
  - Don't set group tags
  - Use make_install macro
  - Don't manually set deps that pkgconfig dep extractor automatically does
  - Drop old, unused build deps
  - Tighten deps with the _isa macro


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.2.0-4
changelog:
  - Resolves: rhbz#1649632 - libosinfo test suite should collect+report all
                             failures, not exit on first error


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1727843 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.8.0-1
changelog:
  - Resolves: rhbz#1815158 - Rebase to libosinfo the latest upstream release
  - Resolves: rhbz#1754394 - Provide information about UEFI support for guests (libosinfo)
  - Resolves: rhbz#1032520 - WHQL'ed drivers should be made available for Boxes/libosinfo users


author: Bastien Nocera <bnocera@redhat.com> - 1.22.0-6
changelog:
  + libpeas-1.22.0-6
  - Remove python2 loader, all GNOME apps using libpeas were ported to Python3
    when ported to GTK+ 3.x, and obsolete libpeas-loader-python
  - Resolves: #1559090


author: Kalev Lember <klember@redhat.com> - 1.12-9
changelog:
  - Remove lib64 rpaths
  - Disable strict aliasing as it's not strict-aliasing clean on ppc64el
  - Don't redefine licensedir


author: Peter Robinson <pbrobinson@fedoraproject.org> 2.0.0-1
changelog:
  - Update to upstream 2.0.0
  - Fixes the following CVEs plus others
  - CVE-2017-6440 CVE-2017-6439 CVE-2017-6438 CVE-2017-6437 CVE-2017-6436
  - CVE-2017-6435 CVE-2017-5836 CVE-2017-5835 CVE-2017-5834 CVE-2017-5545
  - CVE-2017-5209


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.0.0-4
changelog:
  - Python 2 binary package renamed to python2-libplist
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Bastien Nocera <bnocera@redhat.com> - 2.0.0-10
changelog:
  + libplist-2.0.0-10
  - The Python3 Cython binary is now called "cython" not "cython3"
  - Resolves: #1611726


author: Jeff Moyer <jmoyer@redhat.com> - 1.9-1
changelog:
  - Update to upstream version 1.9
  - get rid of % check, as the builtin tests now require packages we don't ship.
  - Related: rhbz#1780389


author: Pavel Raiskup <praiskup@redhat.com> - 10.3-1
changelog:
  - initial release, packaging inspired by postgresql.spec
  - provide postgresql-devel to avoid fixing all the client packages


author: Dan Winship <danw@redhat.com> - 0.4.15-5.1
changelog:
  - Drop python2 subpackage (#1559092)
  - Drop PAC runner based on the "pacrunner" package (#1569023)
  - Replace pacrunner-crash-fix patch with version from RHEL7
  - Drop kde subpackage (#1538147)


author: Carl Byington <carl@five-ten-sg.com> 0.6.71-1
changelog:
  - fedora python naming scheme changes
  - Zachary Travis - Add support for the OST 2013 format, and
    Content-Disposition filename key fix for outlook compatibility


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.6.71-4
changelog:
  - Python 2 binary package renamed to python2-libpst
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Nils Philippsen <nils@tiptoe.de> - 2.1.2-1
changelog:
  - version 2.1.2
  - tidy up spec file
  - use %license for license file
  - require same arch main from devel package


author: Attila Lakatos <alakatos@redhat.com> - 1.6.1-1
changelog:
  - Rebase to 1.6.1
    resolves: RHEL-12892
  - Fix warnings reported by rpmlint
  - Enable support for zlib/zstd compression and GSSAPI


author: Jiri Vymazal <jvymazal@redhat.com> - 1.2.13-1
changelog:
  - rebase to 1.2.13
    resolves: rhbz#1425638
  - added patch for GnuTLS crypto-policy adherence
    resolves: rhbz#1179317
  - added autoconf, automake and libtool because package
    has patches now


author: Attila Lakatos <alakatos@redhat.com> - 1.9.0-1
changelog:
  - rebase to 1.9.0
  - add patch to comply with crypto policies
  - add support for openssl
    resolves: rhbz#1932783
  - Properly end TLS connections
    resolves: rhbz#1886400


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 5.0-1
changelog:
  - New upstream release, migrated to python
  - Turn off automatic python byte-compilation and use py_byte_compile for the
    extension files


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.5-6
changelog:
  - replace all Fedora URLs by corresponding values for RHEL
  - fix coverity issues
  - Resolves: #1602590, #1623406


author: Michal Fabik <mfabik@redhat.com> 2.9.5-7
changelog:
  - bugzilla: change the default bugzilla group
  - tests: Disable strcpm'ing a freed pointer
  - Add autogen.sh
  - Resolves #1660449


author: Martin Kutlak <mkutlak@redhat.com> - 2.9.5-10
changelog:
  - reportclient: Search for required packages recursively
  - reportclient: Find and download required debuginfo packages
  - report-client: Find debuginfos in own method
  - Resolves: rhbz#1783897


author: EL Errata <el-errata_ww@oracle.com> - 2.9.5-10.0.1.el8
changelog:
  - Update workflow xml for Oracle [Orabug: 18945470]
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport and libreport-rhel
  - Added orabug20390725.patch to remove redhat reference [Orabug: 20390725]
  - Added Bug20357383.patch to remove redhat reference [Orabug: 20357383]
  - libreport: unresolved deps python3-subscription-manager-rhsm [Orabug: 29386049]
  - Removed libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla


author: Michal Židek <mzidek@redhat.com> - 2.9.5-12
changelog:
  - Resolves: rhbz#1835388 - abrt-addon-ccpp causes failures during openscap scans on CCE-27119-7
  - This is just libreport side (abrt also needs to be patched)


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.1-1
changelog:
  - build: create tarball in release-* target
  - problem_data: fix double const
  - wizard: fix error found by -Werror=format-security
  - run_event: fix cmp between pointer and zero character
  - build: do not upload tarball to fedorahosted.org
  - spec: do not use fedorahosted.org as source
  - build: fix generating list of dependences in autogen.sh
  - build: generate new release entries with date
  - report-newt: free allocated variables, don't close dd twice
  - build: fix scratch-build target
  - changelog: reflect the PR
  - lib: several bug fixes in parsing of mountinfo
  - lib: correctly recognize chroot in container
  - lib: declare CONTAINER_ROOTS element name
  - lib: add more log wrappers for perror
  - reporter-bugzilla: use /etc/os-release for default url
  - configure.ac: Remove nss dependency
  - spec: include testsuite headers in the devel package
  - tests: include testsuite.h in the dist archive
  - maint: check pulled .po files for errors
  - build: fix bug in changelog generating in release target
  - changelog: fix typos


author: Julius Milan <jmilan@redhat.com> 2.9.3-1
changelog:
  - Translation updates
  - commit to delete
  - workflows: fix description in workflow_RHELJavaScript.xml.in
  - workflows: add workflow for adding data to existing case
  - client-python,report-python: Allow python to be optional at build time
  - ignored words: add SYSTEMD_NSS_BYPASS_BUS
  - reporter-ureport: add 'ProcessUnpackaged' option
  - spec: add workflow for adding data to existing case
  - rep-sys-journal: fix in finding executable basename
  - remove old obsolete
  - Group is not used any more
  - remove old changelogs
  - requires pythonX-dnf instead of dnf
  - doc: fix obsolete doxygen tags & complains
  - lib: Introduce pid_for_children element from ns
  - client-python: Do not try to unlink None
  - spec: rename Python binary packages


author: Martin Kutlak <mkutlak@redhat.com> 2.9.4-1
changelog:
  - Translation updates
  - Revert "use /usr/sbin/"
  - ureport: remove json-c is_error() usage
  - ldconfig and gtk-update-icon-cache is not needed in rawhide
  - reporter-rhtsupport: Remove dependency on redhat-access-insights
  - do not expand macro in changelog
  - move defattr which match the defaults
  - use /usr/sbin/
  - macro python_sitearch is always defined on rhel7+
  - remove rhel6 specific items and accomodate to rhel7+
  - This package uses names with ambiguous `python-` prefix in requirements.
  - reporter-{bugzilla,mantisbt,rhtsupport}: fix free
  - reporter-mailx: rely on configured email
  - spec: fix unowned directories
  - augeas: include local config path
  - doc: update to contain newly added user's local config
  - reporter-mantisbt: read configuration from user's home
  - reporter-rhtsupport: read configuration from user's home
  - reporter-bugzilla: read configuration from user's home
  - reporter-bugzilla: ask concrete bz when requiring login
  - makefile: fix make release


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.5-1
changelog:
  - spec: actualize according to downstream
  - spec: Conditionalize the Python2 and Python3
  - report-python: fix tests if configure --without-python2
  - autogen: correctly parse buildrequires from spec file


author: Paul Wouters <pwouters@redhat.com> - 3.27-2
changelog:
  - Resolves: rhbz#1645137 Libreswan segfaults when it loads configuration file with more then 5 connections


author: Paul Wouters <pwouters@redhat.com> - 3.27-3
changelog:
  - Resolves: rhbz#1648776 limit connections to be ikev1only or ikev2only and make ikev2only the default


author: Paul Wouters <pwouters@redhat.com> - 3.27-4
changelog:
  - Resolves: rhbz#1657846 libreswan no longer needs to provide openswan in rhel8
  - Resolves: rhbz#1643388 libreswan: Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth
  - Resolves: rhbz#1657854 remove userland support for deprecated KLIPS IPsec stack support


author: Paul Wouters <pwouters@redhat.com> - 3.27-5
changelog:
  - Resolves: rhbz#1664522 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are >= 3072 bits


author: Paul Wouters <pwouters@redhat.com> - 3.27-6
changelog:
  - Resolves: rhbz#1668342 SELinux prevents libreswan from using some outbound ports causing DNS resolution failures at connection at load time


author: Paul Wouters <pwouters@redhat.com> - 3.27-7
changelog:
  - Resolves: rhbz#1671793 proessing ISAKMP_NEXT_D with additional payloads causes dangling pointer to deleted state


author: Paul Wouters <pwouters@redhat.com> - 3.27-9
changelog:
  - Resolves: rhbz#1648776 limit connections to be ikev1only or ikev2only and make ikev2only the default [man page update]


author: Paul Wouters <pwouters@redhat.com> - 3.28-1
changelog:
  - Resolves: rhbz#1712555 libreswan rebase to 3.28
  - Resolves: rhbz#1683706 Libreswan shows incorrect error messages
  - Resolves: rhbz#1706180 Remove last usage of old (unused) PF_KEY API
  - Resolves: rhbz#1677045 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart
  - Resolves: rhbz#1686990 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE
  - Resolves: rhbz#1608353 /usr/sbin/ipsec part of the libreswan packages still invokes commands that were deprecated a decade ago
  - Resolves: rhbz#1699318 'ipsec show' has python3 invalid syntax
  - Resolves: rhbz#1679394 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure


author: Paul Wouters <pwouters@redhat.com> - 3.29-2
changelog:
  - Resolves: rhbz#1723957 libreswan is missing linux audit calls for failed IKE SAs and failed IPsec SAs required for Common Criteria


author: Paul Wouters <pwouters@redhat.com> - 3.29-3
changelog:
  - Resolves: rhbz#1725205 XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire


author: Paul Wouters <pwouters@redhat.com> - 3.29-6
changelog:
  - Resolves: rhbz#1714331 support NSS based IKE KDF's [require updated nss for rhbz 1738689, memleak fix]


author: Paul Wouters <pwouters@redhat.com> - 3.29-7
changelog:
  - Resolves: rhbz#1814935 CVE-2020-1763 doS attack via malicious IKEv1 informational exchange message [rhel-8.2.0.z]


author: Paul Wouters <pwouters@redhat.com> - 3.32-1
changelog:
  - Resolves: rhbz#1820206 Rebase to libreswan 3.32
  - Resolves: rhbz#1816265 Use NSS to check whether FIPS mode is enabled
  - Resolves: rhbz#1826337 libreswan in FIPS mode rejects ECDSA keys based on faulty RSA key size check being applied


author: Paul Wouters <pwouters@redhat.com> - 3.32-3
changelog:
  - Resolves: rhbz#1842597 regression: libreswan does not send PLUTO_BYTES env variables to updown script
  - Resolves: rhbz#1847766 subsequent xfrmi interfaces configured outside of libreswan are not recognised properly
  - Resolves: rhbz#1840212 protect libreswan against unannounced nss ABI change


author: Paul Wouters <pwouters@redhat.com> - 4.2-1
changelog:
  - Resolves: rhbz#1891128 [Rebase] rebase libreswan to 4.2
  - Resolves: rhbz#1025061 - IKEv2 support for Labeled IPsec


author: Paul Wouters <pwouters@redhat.com> - 4.3-3
changelog:
  - Resolves: rhbz#1933064 - IKEv2 support for Labeled IPsec
  - Resolves: rhbz#1935150 RFE: Support IKE and ESP over TCP: RFC 8229
  - Resolves: rhbz#1935339 virtual_private setting is missing in the default config


author: Daiki Ueno <dueno@redhat.com> - 4.4-1
changelog:
  - Resolves: rhbz#1958968 Rebase libreswan to 4.4
  - Resolves: rhbz#1954423 Libreswan: TS_UNACCEPTABLE on multiple connections between the same peers


author: Daiki Ueno <dueno@redhat.com> - 4.5-1
changelog:
  - Resolves: rhbz#2017352 Rebase libreswan to 4.5
  - Resolves: rhbz#2036903 ikev1: disable diagnostics logging on receiving malformed packets


author: Daiki Ueno <dueno@redhat.com> - 4.9-1
changelog:
  - Resolves: rhbz#2128672 Rebase libreswan to 4.9
  - Remove libreswan-4.4-ikev1-disable-diagnostics.patch no longer necessary


author: Sahana Prasad <sahana@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-30570 Malicious IKEv1 Aggressive Mode packets can crash libreswan
  - Resolves: rhbz#2187179


author: Paul Wouters <pwouters@redhat.com> - 4.1-1
changelog:
  - Resolves: rhbz#1891128 [Rebase] rebase libreswan to 4.1
  - Resolves: rhbz#1889836 libreswan: add 3.x compat patches for obsoleted/removed keywords of 4.0 and re-port ikev2= patch


author: Paul Wouters <pwouters@redhat.com> - 4.3-3
changelog:
  - Resolves: rhbz#1372050 RFE: Support IKE and ESP over TCP: RFC 8229
  - Resolves: rhbz#1934186 virtual_private setting is missing in the default config


author: Daiki Ueno <dueno@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-23009: remote DoS via crafted TS payload with an
    incorrect selector length (rhbz#2186127)


author: Sahana Prasad <sahana@redhat.com> - 4.9-3
changelog:
  - Fix CVE-2023-30570: Malicious IKEv1 Aggressive Mode packets can crash
    libreswan
  - Resolves: rhbz#2187179


author: Sergio Durigan Junior <sergiodj@redhat.com> - 0.0.4-12
changelog:
  - Resolves: rhbz#1786466 Do not use %{?_isa} for GDB dependency. Recommend
    GDB, instead of requiring it.


author: Tomas Popela <tpopela@redhat.com> - 2.42.7-5
changelog:
  - Resolves: RHEL-635 Upgrade to procedural-masquerade 0.1.7 to fix FTBFS with newer Rust
  - Resolves: RHEL-636 librsvg2 is missing Provides: bundled()
  - Resolves: RHEL-637 Add git-core as a BR for autosetup


author: Nils Philippsen <nils@tiptoe.de> - 0.1.9-1
changelog:
  - version 0.1.9
  - change license to BSD (2-clause)
  - require gcc, alsa-lib-devel, fftw-devel for building


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-2.1
changelog:
  - Use Python distutils to install SELinux python bindings (#1719771)
  - Move  sefcontext_compile to -utils package (#1612518)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-6
changelog:
  - Describe fcontext regular expressions (#1904059)
  - Strip spaces before values in config (#2012145)


author: Petr Lautrbach <lautrbach@redhat.com> - 2.9-10
changelog:
  - Close old selabel handle when setting a new one (RHEL-73348)
  - Fix NULL pointer use in selinux_restorecon_set_sehandle (RHEL-74252)


author: Jindrich Novy <jnovy@redhat.com> - 4.3.0-3
changelog:
  - fix static analysis issues merged upstream
    (https://gitlab.freedesktop.org/slirp/libslirp/-/merge_requests/41)
  - Related: #1823657


author: Jindrich Novy <jnovy@redhat.com> - 4.3.0-3
changelog:
  - fix static analysis issues merged upstream
    (https://gitlab.freedesktop.org/slirp/libslirp/-/merge_requests/41)
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 4.3.0-4
changelog:
  - fix "CVE-2020-10756 QEMU: slirp: networking out-of-bounds read information disclosure vulnerability"
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 4.4.0-1
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
  - Related: #1934415


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-1
changelog:
  - updated to 1.0.28
  - fix possible buffer overflow when parsing crafted ID3 tags (#1440758, CVE-2017-7586)
  - fix possible buffer overflow when parsing crafted flac file (#1440756, CVE-2017-7585)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10
changelog:
  - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
    i2alaw_array in alaw (#1673085)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10.1
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985027)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-11
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985028)


author: Milan Crha <mcrha@redhat.com> - 2.62.2-1
changelog:
  - Update to 2.62.2
  - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c:get_cookies() on empty hostnames


author: Tomas Popela <tpopela@redhat.com> - 2.62.3-6
changelog:
  - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names
  - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data
  - Resolves: RHEL-67076
  - Resolves: RHEL-67067


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.62.3-7
changelog:
  - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict
    Resolves: RHEL-76376


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.62.3-8
changelog:
  - Backport patches for various CVEs, plus test improvements
    Resolves: RHEL-85887
    Resolves: RHEL-85900
    Resolves: RHEL-85901
    Resolves: RHEL-87039
    Resolves: RHEL-87094
    Resolves: RHEL-87114
    Resolves: RHEL-88348
    Resolves: RHEL-88351


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.62.3-9
changelog:
  - Add patches to improve test reliability
  - Backport patches for various CVEs
    Resolves: RHEL-85879
    Resolves: RHEL-92280
    Resolves: RHEL-93031
    Resolves: RHEL-93032


author: Tomas Popela <tpopela@redhat.com> - 2.62.3-6
changelog:
  - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names
  - Backport upstream patch for CVE-2024-52530 - infinite loop while reading websocket data
  - Resolves: RHEL-67076
  - Resolves: RHEL-67067


author: Rex Dieter <rdieter@fedoraproject.org> - 0.2.8-5
changelog:
  - BR: libgs-devel (f28+)
  - .spec cleanup/cosmetics (drop deprecated tags, use %autosetup/%license, tighten subpkg dep)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.1-2
changelog:
  - Add Provides for libssh_threads.so to unbreak applications
  - Fix ABIMap detection to not depend on python to build


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.3-1
changelog:
  - Update to version 0.8.3
    * Added support for rsa-sha2 (#1610882)
    * Added support to parse private keys in openssh container format (other than
      ed25519) (#1622983)
    * Added support for diffie-hellman-group18-sha512 and
      diffie-hellman-group16-sha512 (#1610885)
    * Added ssh_get_fingerprint_hash()
    * Added ssh_pki_export_privkey_base64()
    * Added support for Match keyword in config file
    * Improved performance and reduced memory footprint for sftp
    * Fixed ecdsa publickey auth
    * Fixed reading a closed channel
    * Added support to announce posix-rename@openssh.com and hardlink@openssh.com
      in the sftp server
    * Use -fstack-protector-strong if possible (#1624135)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.5-1
changelog:
  - Update to version 0.8.5
    * Fixed an issue where global known_hosts file was ignored (#1649321)
    * Fixed ssh_get_fd() to return writable file descriptor (#1649319)
    * Fixed regression introduced in known_hosts parsing (#1649315)
    * Fixed a regression which caused only the first algorithm in known_hosts to
      be considered (#1638790)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.91-0.1
changelog:
  - Update to 0.9.0 pre release version (0.8.91)
  - Added default configuration files for client and server
  - Removed unused patch files left behind
  - Fixed issues found to run upstream test suite with SELinux


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.0-1
changelog:
  - Update to version 0.9.0
    https://www.libssh.org/2019/06/28/libssh-0-9-0/
  - Added explicit Requires for crypto-policies
  - Do not ignore known_hosts keys when SSH_OPTIONS_HOSTKEYS is set
  - Provide the configuration files in a separate libssh-config subpackage


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.0-3
changelog:
  - Add Obsoletes in libssh-config to avoid conflict with old libssh which
    installed the configuration files.


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.4-1
changelog:
  - Update to version 0.9.4
    https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  - Fixed CVE-2019-14889 (#1781782)
  - Fixed CVE-2020-1730 (#1802422)
  - Create missing directories in the path provided for known_hosts files (#1733914)
  - Removed inclusion of OpenSSH server configuration file from
    libssh_server.config (#1821339)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.4-2
changelog:
  - Do not return error when server properly closed the channel (#1849071)
  - Add a test for CVE-2019-14889
  - Do not parse configuration file in torture_knownhosts test


author: Sahana Prasad <sahana@redhat.com> - 0.9.4-3
changelog:
  - Fix CVE-2020-16135 NULL pointer dereference in sftpserver.c if
    ssh_buffer_new returns NULL (#1862646)


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-2021-3634: Fix possible heap-buffer overflow when
    rekeying with different key exchange mechanism
  - Rebase to version 0.9.6
  - Rename SSHD_EXECUTABLE to SSH_EXECUTABLE in tests/torture.c
  - Resolves: rhbz#1896651, rhbz#1994600


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-6
changelog:
  - Enable client and server testing build time
  - Fix failing rekey test on arch s390x
  - Resolves: rhbz#2126342


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-7
changelog:
  - Fix NULL dereference during rekeying with algorithm guessing
    GHSL-2023-032 / CVE-2023-1667
  - Fix possible authentication bypass
    GHSL 2023-085 / CVE-2023-2283
  - Resolves: rhbz#2182251, rhbz#2189742


author: Darren Archibald <darren.archibald@oracle.com> - 0.9.6-13
changelog:
  - Client and Server side mitigations (CVE-2023-48795)
  - Strip extensions from both kex lists for matching (CVE-2023-48795)
  - tests: Adjust calculation to strict kex (CVE-2023-48795)


author: Sahana Prasad <sahana@redhat.com> - 0.9.6-14
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Note: version is bumped from 12 to 14 directly, as the z-stream
    version in 8.9 also has 13. So bumping it to 14, will prevent
    upgrade conflicts.
  - Resolves:RHEL-19690, RHEL-17244, RHEL-19312


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-2021-3634: Fix possible heap-buffer overflow when
    rekeying with different key exchange mechanism (#1978810)


author: Paul Howarth <paul@city-fan.org> - 1.7.0-5
changelog:
  - Revert parts of previous change that broke EL-5 compatibility
  - Include NEWS in docs package, it's much more than RELEASE-NOTES


author: Paul Howarth <paul@city-fan.org> - 1.8.0-1
changelog:
  - Update to 1.8.0
    - Added a basic dockerised test suite
    - crypto: Add support for the mbedTLS backend
    - See RELEASE-NOTES for details of bug fixes


author: Paul Howarth <paul@city-fan.org> - 1.8.0-5
changelog:
  - scp: Do not NUL-terminate the command for remote exec (#1489736, GH#208)
  - Make devel package dependency on main package arch-specific
  - Drop EL-5 support
    - noarch sub-packages always available now
    - Drop legacy Group: and BuildRoot: tags
    - Drop explicit buildroot cleaning
    - %{__isa_bits} always defined now


author: Kamil Dudka <kdudka@redhat.com> 1.8.0-7.el8_0.1
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: David Tardon <dtardon@redhat.com> - 0.0.3-3
changelog:
  - Resolves: rhbz#1458800 CVE-2017-9432 Stack-buffer overflow in the
    StarWriterStruct::DatabaseName::read


author: Tony Asleson <tasleson@redhat.com> - 1.9.1-7
changelog:
  - Remove valgrind dependency as not being used and causing
    build to fail as it pulls in python3.11


author: Kamil Dudka <kdudka@redhat.com> - 1.2.20-16
changelog:
  - fix memory leaks through gnu_long{name,link} (CVE-2021-33645 CVE-2021-33646)
  - fix out-of-bounds read in gnu_long{name,link} (CVE-2021-33643 CVE-2021-33644)


author: Peter Robinson <pbrobinson@fedoraproject.org> 4.9-2
changelog:
  - Move development related docs to devel sub package
  - Cleanup spec and macros
  - Update valgrind ExclusiveArch


author: Daiki Ueno <dueno@redhat.com> - 0.1.24-1
changelog:
  - Update to 0.1.24
  - Apply patch from upstream, which fixes scim-thai FTBFS with GCC6 (Closes: #1308117)


author: Nikola Forró <nforro@redhat.com> - 4.0.9-19
changelog:
  - Fix CVE-2020-35521 (#1945539)
  - Fix CVE-2020-35522 (#1945555)
  - Fix CVE-2020-35523 (#1945542)
  - Fix CVE-2020-35524 (#1945546)


author: Matej Mužila <mmuzila@redhat.com> - 4.0.9-23
changelog:
  - Fix various CVEs
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1355


author: Darren Archibald <darren.archibald@oracle.com> - 4.0.9-29
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
  - Resolves: (BZ#2170167) (BZ#2170172) (BZ#2170178) (BZ#2170187) (BZ#2170192)


author: Matej Mužila <mmuzila@redhat.com> - 4.0.9-29
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
  - Resolves: RHEL-4683 RHEL-4685 RHEL-4686 RHEL-4687 RHEL-4688


author: Ondrej Sloup <osloup@redhat.com> - 4.0.9-30
changelog:
  - Bump specfile to retrigger gating
  - Add tests folder for standard beakerlib
  - Related: RHEL-4683 RHEL-4685 RHEL-4686 RHEL-4687 RHEL-4688


author: Matej Mužila <mmuzila@redhat.com> - 4.0.9-32
changelog:
  - Fix CVE-2023-6228 CVE-2023-52356 CVE-2023-25433 CVE-2018-15209
  - Resolves: RHEL-30682 RHEL-30520 RHEL-30474 RHEL-5406


author: David Shea <dshea@redhat.com> - 0.4.5-3
changelog:
  - Render the map directly from SVG (#1335158)
  - Fix memory leaks in tz.c
  - Fix an invalid memory access
  - Do not modify TZ in the process environment
  - Move all data files to /usr/share/libtimezonemap from .../libtimezonemap/ui
  - Add extra city data so all timezone offsets are clickable
  - Move Venezuela from -04:30 to -04:00
  - Fix the conversion of points just west of 180 longitude
  - Remove the out-of-date Olson map data
  - Update the "backward" file
  - Improve the location selected when setting the timezone by name (#1322648)
  - Remove an extra line in the +10:00 layer
  - Move Chile back an hour


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.6-23
changelog:
  - bake in versioned requirement on automake (rhbz#1193591)
  - fix testsuite FTBFS against automake 1.16.1
  - bypass -specs=* to gcc (rhbz#985592)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.2-1.20200527git7325acb477
changelog:
  - Update to v0.7.2 stable snapshot, fixes rhbz#1809676
  - exclude i686 build
  - Following stable-0.7.0 branch for TPM 2 related fixes: RSA decryption,
    PSS salt length, symmetric decryption (padding)
  - Under certain circumstances an RSA decryption could cause a buffer overflow causing
    termination of the program (swtpm)
  - Following stable-0.7.0 branch for TPM 2 related fixes; v0.7.1 + gcc related patch
  - elliptic curve fixes
  - MANUFACTURER changed from "IBM " to "IBM"
  - gcc 10 related fix
  - Following stable-0.7.0 branch for TPM 1.2 related bugfix


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.3-1.20200818git1d392d466a
changelog:
  - Update to v0.7.3 stable, fixes rhbz#1868447
  - (includes "tpm2: fix PCRBelongsTCBGroup for PCClient")


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.4-5.20201106git2452a24dab
changelog:
  - Fix CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Fixes: rhbz#1976816


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.4-6.20201106git2452a24dab
changelog:
  - Fix CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999307


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-2.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173964
    Resolves: rhbz#2173970


author: Tomas Bzatek <tbzatek@redhat.com> - 2.8.3-1
changelog:
  - Rebased to upstream 2.8.3 release (#1685210)
  - Fix leaking filedescriptors (#1614774)
  - Fix udisksctl pager scrolling (#1662336)
  - Fix LVM2 plugin CreateSnapshot() error (#1668291)
  - Add ISCSI plugin GetInitiatorNameRaw() method (#1710257)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.0-14
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188991)
  - tests: Use stronger passphrases for LUKS tests
  - lvm2: Improve uevent processing (#2039772)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.0-16
changelog:
  - iscsi: Fix login on firmware-discovered nodes (#2213193)
  - tests: Extend iscsi method call timeouts (#2213715)


author: Robert Scheck <robert@fedoraproject.org> 0.9.12-15
changelog:
  - Added patch to avoid a /usr/@DATADIRNAME@/locale/ directory
  - Use %{_udevrulesdir} macro rather /etc/udev/rules.d/ (#1226681)


author: Jeff Moyer <jmoyer@redhat.com> - 1.0.7-2.el8
changelog:
  - Fix versioning.  The installed library is 1.0.7, make the rpm match.
  - bump release number for build, which includes -fPIC fix
  - Related: rhbz#1862551


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-15
changelog:
  - virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1634782)
  - qemu: Ignore nwfilter binding instantiation issues during reconnect (rhbz#1648544)
  - qemu: Set identity for the reconnect all thread (rhbz#1648546)
  - Revert "access: Modify the VIR_ERR_ACCESS_DENIED to include driverName" (rhbz#1631608)
  - access: Modify the VIR_ERR_ACCESS_DENIED to include driverName (rhbz#1631608)
  - qemu: add vfio-ap capability (rhbz#1508146)
  - qemu: vfio-ap device support (rhbz#1508146)
  - qemu: Extract MDEV VFIO PCI validation code into a separate helper (rhbz#1508146)
  - conf: Move VFIO AP validation from post parse to QEMU validation code (rhbz#1508146)
  - qemu: Fix post-copy migration on the source (rhbz#1649169)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-16
changelog:
  - util: Don't overflow in virRandomBits (rhbz#1655586)
  - virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1655586)
  - spec: remove libcgroup and cgconfig (rhbz#1602407)
  - qemu: Drop duplicated code from qemuDomainDefValidateFeatures() (rhbz#1647822)
  - tests: Add capabilities data for QEMU 3.1.0 on ppc64 (rhbz#1647822)
  - qemu: Introduce QEMU_CAPS_MACHINE_PSERIES_CAP_NESTED_HV (rhbz#1647822)
  - conf: Parse and format nested-hv feature (rhbz#1647822)
  - qemu: Format nested-hv feature on the command line (rhbz#1647822)
  - qemu: Add check for whether KVM nesting is enabled (rhbz#1645139)
  - secret: Add check/validation for correct usage when LookupByUUID (rhbz#1656255)
  - cpu: Add support for "stibp" x86_64 feature (rhbz#1655032)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-17
changelog:
  - virsh: Strip XML declaration when extracting CPU XMLs (rhbz#1659048)
  - RHEL: qemu: Add ability to set sgio values for hostdev (rhbz#1582424)
  - RHEL: qemu: Add check for unpriv sgio for SCSI generic host device (rhbz#1582424)
  - qemu: Alter @val usage in qemuSetUnprivSGIO (rhbz#1656362)
  - qemu: Alter qemuSetUnprivSGIO hostdev shareable logic (rhbz#1656362)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-18
changelog:
  - conf: correct false boot order error during domain parse (rhbz#1630393)
  - qemu: Remove duplicated qemuAgentCheckError (rhbz#1665000)
  - qemu: require reply from guest agent in qemuAgentGetInterfaces (rhbz#1665000)
  - qemu: Filter non SCSI hostdevs in qemuHostdevPrepareSCSIDevices (rhbz#1665244)
  - util: remove const specifier from nlmsghdr arg to virNetlinkDumpCallback() (rhbz#1583131)
  - util: add a function to insert new interfaces to IPv6CheckForwarding list (rhbz#1583131)
  - util: use nlmsg_find_attr() instead of an open-coded loop (rhbz#1583131)
  - util: check accept_ra for all nexthop interfaces of multipath routes (rhbz#1583131)
  - util: make forgotten changes suggested during review of commit d40b820c (rhbz#1583131)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-19
changelog:
  - qemu: Fix logic error in qemuSetUnprivSGIO (rhbz#1666605)
  - tests: qemuxml2argv: Add test case for empty CDROM with cache mode (rhbz#1553255)
  - qemu: command: Don't format image properties for empty -drive (rhbz#1553255)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-21
changelog:
  - docs: Drop /dev/net/tun from the list of shared devices (rhbz#1665400)
  - qemu: conf: Remove /dev/sev from the default cgroup device acl list (rhbz#1665400)
  - qemu: cgroup: Expose /dev/sev/ only to domains that require SEV (rhbz#1665400)
  - qemu: domain: Add /dev/sev into the domain mount namespace selectively (rhbz#1665400)
  - security: dac: Relabel /dev/sev in the namespace (rhbz#1665400)
  - qemu: caps: Use CAP_DAC_OVERRIDE for probing to avoid permission issues (rhbz#1665400)
  - qemu: caps: Don't try to ask for CAP_DAC_OVERRIDE if non-root (rhbz#1665400)
  - Revert "RHEL: Require firewalld-filesystem for firewalld rpm macros" (rhbz#1650320)
  - Revert "RHEL: network: regain guest network connectivity after firewalld switch to nftables" (rhbz#1650320)
  - configure: change HAVE_FIREWALLD to WITH_FIREWALLD (rhbz#1650320)
  - util: move all firewalld-specific stuff into its own files (rhbz#1650320)
  - util: new virFirewallD APIs + docs (rhbz#1650320)
  - configure: selectively install a firewalld 'libvirt' zone (rhbz#1650320)
  - network: set firewalld zone of bridges to "libvirt" zone when appropriate (rhbz#1650320)
  - network: allow configuring firewalld zone for virtual network bridge device (rhbz#1650320)
  - util: remove test code accidentally committed to virFirewallDZoneExists (rhbz#1650320)
  - qemu: command: Don't skip 'readonly' and throttling info for empty drive (rhbz#1670337)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-23.1.el8
changelog:
  - cpu_x86: Do not cache microcode version (CVE-2018-12130, CVE-2018-12126, CVE-2018-11091, CVE-2018-12127)
  - qemu: Don't cache microcode version (CVE-2018-12130, CVE-2018-12126, CVE-2018-11091, CVE-2018-12127)
  - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12130, CVE-2018-12126, CVE-2018-11091, CVE-2018-12127)
  - cpu_map: Define md-clear CPUID bit (CVE-2018-12130, CVE-2018-12126, CVE-2018-11091, CVE-2018-12127)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-23.2.el8
changelog:
  - admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
  - locking: restrict sockets to mode 0600 (CVE-2019-10132)
  - logging: restrict sockets to mode 0600 (CVE-2019-10132)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-23.3.el8
changelog:
  - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
  - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
  - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
  - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-27
changelog:
  - RHEL: spec: Disable gluster on i686 (rhbz#1722668)
  - rpc: virnetlibsshsession: update deprecated functions (rhbz#1722735)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-29
changelog:
  - cpu: allow include files for CPU definition (rhbz#1686895)
  - cpu: fix cleanup when signature parsing fails (rhbz#1686895)
  - cpu: push more parsing logic into common code (rhbz#1686895)
  - cpu: simplify failure cleanup paths (rhbz#1686895)
  - cpu_map: Add support for arch-capabilities feature (rhbz#1693433)
  - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1686895)
  - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1686895)
  - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1686895)
  - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1686895)
  - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1686895)
  - cpu_x86: Separate ancestor model parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Separate vendor parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Separate feature list parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Make sure CPU model names are unique in cpu_map (rhbz#1686895)
  - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1686895)
  - cpu_x86: Store CPU signature in an array (rhbz#1686895)
  - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1686895)
  - cpu_x86: Log decoded CPU model and signatures (rhbz#1686895)
  - qemu_capabilities: Inroduce virQEMUCapsGetCPUModelX86Data (rhbz#1686895)
  - qemu_capabilities: Introduce virQEMUCapsGetCPUModelInfo (rhbz#1686895)
  - qemu_capabilities: Use virQEMUCapsGetCPUModelInfo (rhbz#1686895)
  - cpu_x86: Add virCPUx86DataGetSignature for tests (rhbz#1686895)
  - cpu_map: Add hex representation of signatures (rhbz#1686895)
  - cputest: Test CPU signatures (rhbz#1686895)
  - cpu_map: Add more signatures for Conroe CPU model (rhbz#1686895)
  - cpu_map: Add more signatures for Penryn CPU model (rhbz#1686895)
  - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Westmere CPU model (rhbz#1686895)
  - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Haswell CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1686895)
  - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1686895)
  - cpu_x86: Require <cpuid> within <feature> in CPU map (rhbz#1697627)
  - cputest: Add data for Intel(R) Xeon(R) Platinum 8268 CPU (rhbz#1693433)
  - cpu_map: Add Cascadelake-Server CPU model (rhbz#1693433)
  - cpu_x86: Introduce virCPUx86DataItem container struct (rhbz#1697627)
  - cpu_x86: Rename virCPUx86Vendor.cpuid (rhbz#1697627)
  - cpu_x86: Rename virCPUx86DataItem variables (rhbz#1697627)
  - cpu_x86: Rename x86DataCpuidNext function (rhbz#1697627)
  - cpu_x86: Rename x86DataCpuid (rhbz#1697627)
  - cpu_x86: Rename virCPUx86CPUIDSorter (rhbz#1697627)
  - cpu_x86: Rename virCPUx86DataAddCPUIDInt (rhbz#1697627)
  - cpu_x86: Rename virCPUx86DataAddCPUID (rhbz#1697627)
  - cpu_x86: Rename virCPUx86VendorToCPUID (rhbz#1697627)
  - cpu_x86: Simplify x86DataAdd (rhbz#1697627)
  - cpu_x86: Introduce virCPUx86DataCmp (rhbz#1697627)
  - cpu_x86: Make x86cpuidSetBits more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidClearBits more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidAndBits more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidMatchMasked more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidMatch more general (rhbz#1697627)
  - cpu_x86: Store virCPUx86DataItem content in union (rhbz#1697627)
  - cpu_x86: Add support for storing MSR features in CPU map (rhbz#1697627)
  - cpu_x86: Move *CheckFeature functions (rhbz#1697627)
  - cputest: Add support for MSR features to cpu-parse.sh (rhbz#1697627)
  - util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1697627)
  - vircpuhost: Add support for reading MSRs (rhbz#1697627)
  - virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1697627)
  - cpu_x86: Fix placement of *CheckFeature functions (rhbz#1697627)
  - cpu_conf: Introduce virCPUDefFilterFeatures (rhbz#1697627)
  - qemu_command: Use consistent syntax for CPU features (rhbz#1697627)
  - tests: Add QEMU caps data for future 4.1.0 (rhbz#1697627)
  - tests: Add domain capabilities case for QEMU 4.1.0 (rhbz#1697627)
  - qemuxml2argvtest: Add test for CPU features translation (rhbz#1697627)
  - qemu: Add APIs for translating CPU features (rhbz#1697627)
  - qemu: Probe for max-x86_64-cpu type (rhbz#1697627)
  - qemu: Probe for "unavailable-features" CPU property (rhbz#1697627)
  - qemu: Probe host CPU after capabilities (rhbz#1697627)
  - qemu_command: Use canonical names of CPU features (rhbz#1697627)
  - qemu: Translate feature names from query-cpu-model-expansion (rhbz#1697627)
  - qemu: Don't use full CPU model expansion (rhbz#1697627)
  - qemu: Make qemuMonitorGetGuestCPU usable on x86 only (rhbz#1697627)
  - cpu: Introduce virCPUDataAddFeature (rhbz#1697627)
  - qemu: Add type filter to qemuMonitorJSONParsePropsList (rhbz#1697627)
  - util: string: Introduce macro for automatic string lists (rhbz#1697627)
  - util: json: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1697627)
  - qemu: Introduce generic qemuMonitorGetGuestCPU (rhbz#1697627)
  - qemu_process: Prefer generic qemuMonitorGetGuestCPU (rhbz#1697627)
  - util: Rework virStringListAdd (rhbz#1697627)
  - conf: Introduce virCPUDefCheckFeatures (rhbz#1697627)
  - cpu_x86: Turn virCPUx86DataIteratorInit into a function (rhbz#1697627)
  - cpu_x86: Introduce virCPUx86FeatureFilter*MSR (rhbz#1697627)
  - cpu_x86: Read CPU features from IA32_ARCH_CAPABILITIES MSR (rhbz#1697627)
  - cpu_map: Introduce IA32_ARCH_CAPABILITIES MSR features (rhbz#1697627)
  - qemu: Forbid MSR features with old QEMU (rhbz#1697627)
  - qemu: Drop MSR features from host-model with old QEMU (rhbz#1697627)
  - cpu_x86: Fix memory leak - virCPUx86GetHost (rhbz#1697627)
  - qemu: Use @tmpChr in qemuDomainDetachChrDevice to build device string (rhbz#1624204)
  - qemu: Drop "user-" prefix for guestfwd netdev (rhbz#1624204)
  - qemu_hotplug: Attach guestfwd using netdev_add (rhbz#1624204)
  - qemu_hotplug: Detach guestfwd using netdev_del (rhbz#1624204)
  - qemuhotplugtest: Test guestfwd attach and detach (rhbz#1624204)
  - daemon: Register secret driver before storage driver (rhbz#1685151)
  - bhyve: Move autostarting of domains into bhyveStateInitialize (rhbz#1685151)
  - Revert "virStateDriver - Separate AutoStart from Initialize" (rhbz#1685151)
  - Revert "Separate out StateAutoStart from StateInitialize" (rhbz#1685151)
  - util: moving 'type' argument to avoid issues with mount() syscall. (rhbz#1689297)
  - util: cgroup: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1689297)
  - vircgroup: Rename structs to start with underscore (rhbz#1689297)
  - vircgroup: Introduce standard set of typedefs and use them (rhbz#1689297)
  - vircgroup: Extract file link resolving into separate function (rhbz#1689297)
  - vircgroup: Remove unused function virCgroupKill() (rhbz#1689297)
  - vircgroup: Unexport unused function virCgroupAddTaskController() (rhbz#1689297)
  - vircgroup: Unexport unused function virCgroupRemoveRecursively (rhbz#1689297)
  - vircgroup: Move function used in tests into vircgrouppriv.h (rhbz#1689297)
  - vircgroup: Remove pointless bool parameter (rhbz#1689297)
  - vircgroup: Extract mount options matching into function (rhbz#1689297)
  - vircgroup: Use virCgroupMountOptsMatchController in virCgroupDetectPlacement (rhbz#1689297)
  - vircgroup: Introduce virCgroupEnableMissingControllers (rhbz#1689297)
  - vircgroup: machinename will never be NULL (rhbz#1689297)
  - vircgroup: Remove virCgroupAddTaskController (rhbz#1689297)
  - vircgroup: Introduce virCgroupGetMemoryStat (rhbz#1689297)
  - lxc: Use virCgroupGetMemoryStat (rhbz#1689297)
  - vircgroup: fix MinGW build (rhbz#1689297)
  - vircgroup: Duplicate string before modifying (rhbz#1689297)
  - vircgroup: Extract controller detection into function (rhbz#1689297)
  - vircgroup: Extract placement validation into function (rhbz#1689297)
  - vircgroup: Split virCgroupPathOfController into two functions (rhbz#1689297)
  - vircgroup: Call virCgroupRemove inside virCgroupMakeGroup (rhbz#1689297)
  - vircgroup: Simplify if conditions in virCgroupMakeGroup (rhbz#1689297)
  - vircgroup: Remove obsolete sa_assert (rhbz#1689297)
  - tests: Resolve possible overrun (rhbz#1689297)
  - vircgroup: cleanup controllers not managed by systemd on error (rhbz#1689297)
  - vircgroup: fix bug in virCgroupEnableMissingControllers (rhbz#1689297)
  - vircgroup: rename virCgroupAdd.*Task to virCgroupAdd.*Process (rhbz#1689297)
  - vircgroup: introduce virCgroupTaskFlags (rhbz#1689297)
  - vircgroup: introduce virCgroupAddThread (rhbz#1689297)
  - vircgroupmock: cleanup unused cgroup files (rhbz#1689297)
  - vircgroupmock: rewrite cgroup fopen mocking (rhbz#1689297)
  - vircgrouptest: call virCgroupDetectMounts directly (rhbz#1689297)
  - vircgrouptest: call virCgroupNewSelf instead virCgroupDetectMounts (rhbz#1689297)
  - util: introduce vircgroupbackend files (rhbz#1689297)
  - vircgroup: introduce cgroup v1 backend files (rhbz#1689297)
  - vircgroup: extract virCgroupV1Available (rhbz#1689297)
  - vircgroup: detect available backend for cgroup (rhbz#1689297)
  - vircgroup: extract virCgroupV1ValidateMachineGroup (rhbz#1689297)
  - vircgroup: extract virCgroupV1CopyMounts (rhbz#1689297)
  - vircgroup: extract v1 detect functions (rhbz#1689297)
  - vircgroup: extract virCgroupV1CopyPlacement (rhbz#1689297)
  - vircgroup: extract virCgroupV1ValidatePlacement (rhbz#1689297)
  - vircgroup: extract virCgroupV1StealPlacement (rhbz#1689297)
  - vircgroup: extract virCgroupV1DetectControllers (rhbz#1689297)
  - vircgroup: extract virCgroupV1HasController (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetAnyController (rhbz#1689297)
  - vircgroup: extract virCgroupV1PathOfController (rhbz#1689297)
  - vircgroup: extract virCgroupV1MakeGroup (rhbz#1689297)
  - vircgroup: extract virCgroupV1Remove (rhbz#1689297)
  - vircgroup: extract virCgroupV1AddTask (rhbz#1689297)
  - vircgroup: extract virCgroupV1HasEmptyTasks (rhbz#1689297)
  - vircgroup: extract virCgroupV1BindMount (rhbz#1689297)
  - vircgroup: extract virCgroupV1SetOwner (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioWeight (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetBlkioIoServiced (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetBlkioIoDeviceServiced (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWeight (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceReadIops (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWriteIops (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceReadBps (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWriteBps (rhbz#1689297)
  - vircgroup: extract virCgroupV1SetMemory (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetMemoryStat (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetMemoryUsage (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)Memory*Limit (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetMemSwapUsage (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Allow|Deny)Device (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Allow|Deny)AllDevices (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpuShares (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpuCfsPeriod (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpuCfsQuota (rhbz#1689297)
  - vircgroup: extract virCgroupV1SupportsCpuBW (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetCpuacct*Usage (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetCpuacctStat (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)FreezerState (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpusetMems (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpusetMemoryMigrate (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpusetCpus (rhbz#1689297)
  - vircgroup: rename virCgroupController into virCgroupV1Controller (rhbz#1689297)
  - vircgroup: rename controllers to legacy (rhbz#1689297)
  - vircgroup: remove VIR_CGROUP_SUPPORTED (rhbz#1689297)
  - vircgroup: include system headers only on linux (rhbz#1689297)
  - vircgroupv1: fix build on non-linux OSes (rhbz#1689297)
  - Revert "vircgroup: cleanup controllers not managed by systemd on error" (rhbz#1689297)
  - util: introduce cgroup v2 files (rhbz#1689297)
  - vircgroup: introduce virCgroupV2Available (rhbz#1689297)
  - vircgroup: introduce virCgroupV2ValidateMachineGroup (rhbz#1689297)
  - vircgroup: introduce virCgroupV2CopyMounts (rhbz#1689297)
  - vircgroup: introduce virCgroupV2CopyPlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2DetectMounts (rhbz#1689297)
  - vircgroup: introduce virCgroupV2DetectPlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2ValidatePlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2StealPlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2DetectControllers (rhbz#1689297)
  - vircgroup: introduce virCgroupV2HasController (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetAnyController (rhbz#1689297)
  - vircgroup: introduce virCgroupV2PathOfController (rhbz#1689297)
  - vircgroup: introduce virCgroupV2MakeGroup (rhbz#1689297)
  - vircgroup: introduce virCgroupV2Remove (rhbz#1689297)
  - vircgroup: introduce virCgroupV2AddTask (rhbz#1689297)
  - vircgroup: introduce virCgroupV2HasEmptyTasks (rhbz#1689297)
  - vircgroup: introduce virCgroupV2BindMount (rhbz#1689297)
  - vircgroup: introduce virCgroupV2SetOwner (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioWeight (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetBlkioIoServiced (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetBlkioIoDeviceServiced (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWeight (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceReadIops (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWriteIops (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceReadBps (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWriteBps (rhbz#1689297)
  - vircgroup: introduce virCgroupV2SetMemory (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetMemoryStat (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetMemoryUsage (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)MemoryHardLimit (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)MemorySoftLimit (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)MemSwapHardLimit (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetMemSwapUsage (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)CpuShares (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)CpuCfsPeriod (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)CpuCfsQuota (rhbz#1689297)
  - vircgroup: introduce virCgroupV2SupportsCpuBW (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetCpuacctUsage (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetCpuacctStat (rhbz#1689297)
  - vircgroup: register cgroup v2 backend (rhbz#1689297)
  - vircgroup: add support for hybrid configuration (rhbz#1689297)
  - vircgroupmock: change cgroup prefix (rhbz#1689297)
  - vircgroupmock: add support to test cgroup v2 (rhbz#1689297)
  - vircgrouptest: introduce initFakeFS and cleanupFakeFS helpers (rhbz#1689297)
  - vircgrouptest: prepare testCgroupDetectMounts for cgroup v2 (rhbz#1689297)
  - vircgrouptest: add detect mounts test for cgroup v2 (rhbz#1689297)
  - vircgrouptest: add detect mounts test for hybrid cgroups (rhbz#1689297)
  - vircgrouptest: prepare validateCgroup for cgroupv2 (rhbz#1689297)
  - vircgrouptest: add cgroup v2 tests (rhbz#1689297)
  - vircgrouptest: add hybrid tests (rhbz#1689297)
  - virt-host-validate: rewrite cgroup detection to use util/vircgroup (rhbz#1689297)
  - virt-host-validate: require freezer for LXC (rhbz#1689297)
  - virt-host-validate: Fix build on non-Linux (rhbz#1689297)
  - tests: Use correct function name in error path (rhbz#1689297)
  - util: Fix virCgroupGetMemoryStat (rhbz#1689297)
  - tests: Augment vcgrouptest to add virCgroupGetMemoryStat (rhbz#1689297)
  - vircgroup: introduce virCgroupKillRecursiveCB (rhbz#1689297)
  - vircgroupv2: fix virCgroupV2ValidateMachineGroup (rhbz#1689297)
  - util: implement virCgroupV2(Set|Get)CpusetMems (rhbz#1689297)
  - util: implement virCgroupV2(Set|Get)CpusetMemoryMigrate (rhbz#1689297)
  - util: implement virCgroupV2(Set|Get)CpusetCpus (rhbz#1689297)
  - util: enable cgroups v2 cpuset controller for threads (rhbz#1689297)
  - util: vircgroup: pass parent cgroup into virCgroupDetectControllersCB (rhbz#1689297)
  - internal: introduce a family of NULLSTR macros (rhbz#1689297)
  - util: vircgroup: improve controller detection (rhbz#1689297)
  - util: vircgroupv2: use any controller to create thread directory (rhbz#1689297)
  - util: vircgroupv2: enable CPU controller only if it's available (rhbz#1689297)
  - util: vircgroupv2: separate return values of virCgroupV2EnableController (rhbz#1689297)
  - util: vircgroupv2: don't error out if enabling controller fails (rhbz#1689297)
  - util: vircgroupv2: mark only requested controllers as available (rhbz#1689297)
  - Revert "util: vircgroup: pass parent cgroup into virCgroupDetectControllersCB" (rhbz#1689297)
  - util: vircgroupv2: stop enabling missing controllers with systemd (rhbz#1689297)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-30
changelog:
  - virWaitForDevices: Drop confusing part of comment (rhbz#1710575)
  - lib: Drop UDEVSETTLE (rhbz#1710575)
  - m4: Provide default value fore UDEVADM (rhbz#1710575)
  - m4: Drop needless string checks (rhbz#1710575)
  - util: vircgroup: introduce virCgroup(Get|Set)ValueRaw (rhbz#1658890)
  - util: vircgroup: move virCgroupGetValueStr out of virCgroupGetValueForBlkDev (rhbz#1658890)
  - util: vircgroupv1: add support for BFQ blkio files (rhbz#1658890)
  - util: vircgroupv2: add support for BFQ files (rhbz#1658890)
  - Handle copying bitmaps to larger data buffers (rhbz#1703160)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-31
changelog:
  - virDomainObjListAddLocked: fix double free (rhbz#1728530)
  - docs: schemas: Decouple the virtio options from each other (rhbz#1729675)
  - util: command: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1721434)
  - util: command: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1721434)
  - util: netdevopenvswitch: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1721434)
  - util: virnetdevopenvswitch: Drop an unused variable @ovs_timeout (rhbz#1721434)
  - util: netdevopenvswitch: use VIR_AUTOPTR for aggregate types (rhbz#1721434)
  - util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1721434)
  - virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1721434)
  - test: Introduce virnetdevopenvswitchtest (rhbz#1721434)
  - vircommand: Separate mass FD closing into a function (rhbz#1721434)
  - virCommand: use procfs to learn opened FDs (rhbz#1721434)
  - util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1721434)
  - util: Avoid possible error in virCommandMassClose (rhbz#1721434)
  - vircgroup: fix cgroups v2 controllers detection (rhbz#1689297)
  - vircgroupv2: store enabled controllers (rhbz#1689297)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32
changelog:
  - virDomainObjListAddLocked: Produce better error message than 'Duplicate key' (rhbz#1737790)
  - virdbus: Grab a ref as long as the while loop is executed (rhbz#1741900)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33
changelog:
  - vircgroupv2: fix parsing multiple values in single file (rhbz#1741825)
  - vircgroupv2: fix virCgroupV2GetCpuCfsQuota for "max" value (rhbz#1741837)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35.1.el8
changelog:
  - cpu_conf: Pass policy to CPU feature filtering callbacks (rhbz#1775133, rhbz#1775134, rhbz#1775137)
  - qemuxml2*test: Add tests for Icelake-Server, -pconfig (rhbz#1775133, rhbz#1775134, rhbz#1775137)
  - qemu: Drop disabled CPU features unknown to QEMU (rhbz#1775133, rhbz#1775134, rhbz#1775137)
  - cputest: Add data for Ice Lake Server CPU (rhbz#1775133, rhbz#1775134, rhbz#1775137)
  - cpu_map: Drop pconfig from Icelake-Server CPU model (rhbz#1775133, rhbz#1775134, rhbz#1775137)
  - qemu: Fix NULL ptr dereference caused by qemuDomainDefFormatBufInternal (rhbz#1775133, rhbz#1775134, rhbz#1775137)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35.2.el8
changelog:
  - cpu_map: Add TAA_NO bit for IA32_ARCH_CAPABILITIES MSR (CVE-2019-11135)
  - cpu_map: Add TSX_CTRL bit for IA32_ARCH_CAPABILITIES MSR (CVE-2019-11135)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36
changelog:
  - cpu_conf: Pass policy to CPU feature filtering callbacks (rhbz#1749672, rhbz#1756156, rhbz#1721608)
  - qemuxml2*test: Add tests for Icelake-Server, -pconfig (rhbz#1749672, rhbz#1756156, rhbz#1721608)
  - qemu: Drop disabled CPU features unknown to QEMU (rhbz#1749672, rhbz#1756156, rhbz#1721608)
  - cputest: Add data for Ice Lake Server CPU (rhbz#1749672, rhbz#1756156, rhbz#1721608)
  - cpu_map: Drop pconfig from Icelake-Server CPU model (rhbz#1749672, rhbz#1756156, rhbz#1721608)
  - qemu: Fix NULL ptr dereference caused by qemuDomainDefFormatBufInternal (rhbz#1749672, rhbz#1756156, rhbz#1721608)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-39
changelog:
  - selinux: Do not report an error when not returning -1 (rhbz#1788096)
  - qemu: Fix hyperv features with QEMU 4.1 (rhbz#1794868)
  - qemu: Prefer dashes for hyperv features (rhbz#1794868)
  - cpu: Drop KVM_ from hyperv feature macros (rhbz#1794868)
  - cpu: Drop unused KVM features (rhbz#1794868)
  - qemu: Fix KVM features with QEMU 4.1 (rhbz#1794868)
  - cpu: Drop CPUID definition for hv-spinlocks (rhbz#1794868)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-40
changelog:
  - process: wait longer on kill per assigned Hostdev (rhbz#1785338)
  - process: wait longer 5->30s on hard shutdown (rhbz#1785338)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-42
changelog:
  - RHEL: virscsi: Check device type before getting it's /dev node name (rhbz#1808388)
  - RHEL: virscsi: Support TAPEs in virSCSIDeviceGetDevName() (rhbz#1808388)
  - RHEL: virscsi: Introduce and use virSCSIDeviceGetUnprivSGIOSysfsPath() (rhbz#1808388)
  - RHEL: virutil: Accept non-block devices in virGetDeviceID() (rhbz#1808388)
  - RHEL: qemuSetUnprivSGIO: Actually use calculated @sysfs_path to set unpriv_sgio (rhbz#1808388)
  - RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1808399)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-25
changelog:
  - Upgrade components in virt:rhel module:stream for RHEL-8.3 release (rhbz#1828317)
  - conf: Don't format http cookies unless VIR_DOMAIN_DEF_FORMAT_SECURE is used (CVE-2020-14301)
  - util: Introduce a parser for kernel cmdline arguments (rhbz#1848997)
  - qemu: Check if s390 secure guest support is enabled (rhbz#1848997)
  - qemu: Check if AMD secure guest support is enabled (rhbz#1848997)
  - tools: Secure guest check on s390 in virt-host-validate (rhbz#1848997)
  - tools: Secure guest check for AMD in virt-host-validate (rhbz#1848997)
  - docs: Update AMD launch secure description (rhbz#1848997)
  - docs: Describe protected virtualization guest setup (rhbz#1848997)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-26
changelog:
  - qemu: blockjob: Don't base bitmap handling of active-layer block commit on QEMU_CAPS_BLOCKDEV_REOPEN (rhbz#1857779)
  - qemu: blockjob: Actually delete temporary bitmap on failed active commit (rhbz#1857779)
  - qemu: block: Remove 'active-write' bitmap even if there are no bitmaps to merge (rhbz#1857779)
  - qemuDomainBlockPivot: Rename 'actions' to 'bitmapactions' (rhbz#1857779)
  - qemuDomainBlockPivot: Ignore failures of creating active layer bitmap (rhbz#1857779)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-27
changelog:
  - src: assume sys/sysmacros.h always exists on Linux (rhbz#1860421)
  - virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1860421)
  - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1860421)
  - virdevmapper: Don't use libdevmapper to obtain dependencies (CVE-2020-14339, rhbz#1860421)
  - virDevMapperGetTargets: Don't ignore EBADF (rhbz#1860421)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-28
changelog:
  - virdevmapper: Don't cache device-mapper major (rhbz#1860421)
  - virdevmapper: Handle kernel without device-mapper support (rhbz#1860421)
  - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1860421)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-29
changelog:
  - qemu: substitute missing model name for host-passthrough (rhbz#1850680)
  - rpc: gendispatch: handle empty flags (CVE-2020-25637)
  - rpc: add support for filtering @acls by uint params (CVE-2020-25637)
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
  - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
  - qemu: Fix domfsinfo for non-PCI device information from guest agent (rhbz#1858771)
  - virDomainNetFindIdx: add support for CCW addresses (rhbz#1837495)
  - check for NULL before calling g_regex_unref (rhbz#1861176)
  - virhostcpu.c: fix 'die_id' parsing for Power hosts (rhbz#1876742)
  - qemuFirmwareFillDomain: Fill NVRAM template on migration too (rhbz#1880418)
  - node_device: refactor udevProcessCCW (rhbz#1853289, rhbz#1865932)
  - node_device: detect CSS devices (rhbz#1853289, rhbz#1865932)
  - virsh: nodedev: ability to filter CSS capabilities (rhbz#1853289, rhbz#1865932)
  - node_device: detect DASD devices (rhbz#1853289, rhbz#1865932)
  - udevProcessCSS: Check if def->driver is non-NULL (rhbz#1853289, rhbz#1865932)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-30
changelog:
  - cpu_map: Add missing x86 features in 0x7 CPUID leaf (rhbz#1861506)
  - cpu_map: Add missing x86 features in 0x80000008 CPUID leaf (rhbz#1861506)
  - cpu_map: Add missing AMD SVM features (rhbz#1861506)
  - Add testdata for AMD EPYC 7502 (rhbz#1861506)
  - cpu_map: Defined and enable EPYC-Rome model (rhbz#1861506)
  - cpu_map: Remove monitor feature from EPYC-Rome (rhbz#1861506)
  - tests: qemuxml2argv: Use existing machine type for 'numatune-distances' case (rhbz#1749518)
  - qemuxml2xmltest: Add "numatune-distance" test case (rhbz#1749518)
  - conf: Move and rename virDomainParseScaledValue() (rhbz#1749518)
  - numa_conf: Drop CPU from name of two functions (rhbz#1749518)
  - qemu_command: Rename qemuBuildNumaArgStr() (rhbz#1749518)
  - qemuBuildMachineCommandLine: Drop needless check (rhbz#1749518)
  - numa_conf: Make virDomainNumaSetNodeCpumask() return void (rhbz#1749518)
  - Allow NUMA nodes without vCPUs (rhbz#1749518)
  - conf: Parse and format HMAT (rhbz#1749518)
  - conf: Validate NUMA HMAT configuration (rhbz#1749518)
  - numa: expose HMAT APIs (rhbz#1749518)
  - qemu: Introduce QEMU_CAPS_NUMA_HMAT capability (rhbz#1749518)
  - qemu: Build HMAT command line (rhbz#1749518)
  - qemuBuildNumaCommandLine: Fix @masterInitiator check (rhbz#1749518)
  - numa_conf: Properly check for caches in virDomainNumaDefValidate() (rhbz#1749518)
  - RNG: Allow interleaving of /domain/cpu/numa/cell children (rhbz#1749518)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-31
changelog:
  - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1872610)
  - qemu: format 'ramfb' attribute for mediated devices (rhbz#1876297)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-32
changelog:
  - util: replace macvtap name reservation bitmap with a simple counter (rhbz#1874304)
  - util: assign tap device names using a monotonically increasing integer (rhbz#1874304)
  - util: virNetDevTapCreate: initialize fd to -1 (rhbz#1874304)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-33
changelog:
  - cpu_map: Fix Icelake Server model number (rhbz#1537734)
  - cputestdata: Add test data for Snowridge (rhbz#1537734)
  - cpu_map: Add support for fsrm CPU feature (rhbz#1537734)
  - cpu_map: Add support for core-capability CPU feature (rhbz#1537734)
  - cpu_map: Add support for split-lock-detect CPU feature (rhbz#1537734)
  - cpu_map: Define and enable Snowridge model (rhbz#1537734)
  - util: fix typo in VIR_MOCK_WRAP_RET_ARGS() (rhbz#1607929)
  - util/tests: enable locking on iptables/ebtables commandlines in unit tests (rhbz#1607929)
  - util/tests: enable locking on iptables/ebtables commandlines by default (rhbz#1607929)
  - tests: fix iptables test case commandline options in virfirewalltest.c (rhbz#1607929)
  - network: be more verbose about the reason for a firewall reload (rhbz#1607929)
  - util: always check for ebtables/iptables binaries, even when using firewalld (rhbz#1607929)
  - util: synchronize with firewalld before we start calling iptables directly (rhbz#1607929)
  - util: call iptables directly rather than via firewalld (rhbz#1607929)
  - util: virhostcpu: Fail when fetching CPU Stats for invalid cpu (rhbz#1915183)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-34
changelog:
  - qemu: move cgroup cpu period and quota defines to vircgroup.h (rhbz#1915733)
  - vircgroupv1: use defines for cpu period and quota limits (rhbz#1915733)
  - vircgroupv2: use defines for cpu period and quota limits (rhbz#1915733)
  - vircgroup: fix cpu quota maximum limit (rhbz#1915733)
  - util: add virNetDevGetPhysPortName (rhbz#1918708)
  - util: avoid manual VIR_FREE of a g_autofree pointer in virPCIGetName() (rhbz#1918708)
  - util: Add phys_port_name support on virPCIGetNetName (rhbz#1918708)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-35
changelog:
  - vircgroupv2: properly detect placement of running VM (rhbz#1798463)
  - virsystemd: export virSystemdHasMachined (rhbz#1798463)
  - virsystemd: introduce virSystemdGetMachineByPID (rhbz#1798463)
  - virsystemd: introduce virSystemdGetMachineUnitByPID (rhbz#1798463)
  - vircgroup: use DBus call to systemd for some APIs (rhbz#1798463)
  - vircgroupv1: refactor virCgroupV1DetectPlacement (rhbz#1798463)
  - vircgroupv2: move task into cgroup before enabling controllers (rhbz#1798463)
  - vircgroup: introduce virCgroupV1Exists and virCgroupV2Exists (rhbz#1798463)
  - vircgroup: introduce nested cgroup to properly work with systemd (rhbz#1798463)
  - tests: add cgroup nested tests (rhbz#1798463)
  - vircgroup: correctly free nested virCgroupPtr (rhbz#1798463)
  - qemu: Add virtio related options to vsock (rhbz#1931548)
  - domain_validate: use defines for cpu period and quota limits (rhbz#1798463)
  - docs: use proper cpu quota value in our documentation (rhbz#1798463)
  - vircgroup: enforce range limit for cpu.shares (rhbz#1798463)
  - cgroup: use virCgroupSetCpuShares instead of virCgroupSetupCpuShares (rhbz#1798463)
  - cpumap: Add support for ibrs CPU feature (rhbz#1926864)
  - cpumap: Add support for svme-addr-check CPU feature (rhbz#1926864)
  - cpu_map: Add EPYC-Milan x86 CPU model (rhbz#1926864)
  - cpu_map: Install x86_EPYC-Milan.xml (rhbz#1926864)
  - cpu_map: Fix spelling of svme-addr-chk feature (rhbz#1926864)


author: David Sloboda <david.x.sloboda@oracle.com> - 6.0.0-35.0.1
changelog:
  - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]
  - Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma)
  - Disable parallel builds (Karl Heubaum)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-35.1.el8
changelog:
  - network: make it safe to call networkSetupPrivateChains() multiple times (rhbz#1958301)
  - network: force re-creation of iptables private chains on firewalld restart (rhbz#1958301)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-36
changelog:
  - network: make it safe to call networkSetupPrivateChains() multiple times (rhbz#1942805)
  - network: force re-creation of iptables private chains on firewalld restart (rhbz#1942805)
  - hostdev: Update mdev pointer reference after checking device type (rhbz#1940449)
  - hostdev: mdev: Lookup mdevs by sysfs path rather than mdev struct (rhbz#1940449)
  - qemu_firmware: don't error out for unknown firmware features (rhbz#1961562)
  - docs: improve description of secure attribute for loader element (rhbz#1929357)
  - conf: introduce virDomainDefParseBootInitOptions (rhbz#1929357)
  - conf: introduce virDomainDefParseBootKernelOptions (rhbz#1929357)
  - conf: introduce virDomainDefParseBootFirmwareOptions (rhbz#1929357)
  - conf: introduce virDomainDefParseBootLoaderOptions (rhbz#1929357)
  - conf: introduce virDomainDefParseBootAcpiOptions (rhbz#1929357)
  - conf: use switch in virDomainDefParseBootOptions (rhbz#1929357)
  - conf: introduce support for firmware auto-selection feature filtering (rhbz#1929357)
  - qemu: implement support for firmware auto-selection feature filtering (rhbz#1929357)
  - domain_conf: Don't leak def->os.firmwareFeatures (rhbz#1929357)
  - conf: remove duplicated firmware type attribute (rhbz#1929357)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-37
changelog:
  - security: fix SELinux label generation logic (CVE-2021-3631)
  - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath (CVE-2021-3667)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-37.1.el8
changelog:
  - network: Implement virConnectSupportsFeature() (rhbz#2038812)
  - lib: Fix calling of virNetworkUpdate() driver callback (rhbz#2038812)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-2
changelog:
  - Revert "report error when virProcessGetStatInfo() is unable to parse data" (rhbz#2041610)
  - qemu: fix inactive snapshot revert (rhbz#2043584)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-3
changelog:
  - qemuDomainSetupDisk: Initialize 'targetPaths' (rhbz#2046172)
  - RHEL: Remove <glib-2.64.0 workaround for GSource race (rhbz#2045879)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-4
changelog:
  - qemu_command: Generate memory only after controllers (rhbz#2050697)
  - qemu: Validate domain definition even on migration (rhbz#2050702)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-5
changelog:
  - node_device: Rework udevKludgeStorageType() (rhbz#2056673)
  - node_device: Treat NVMe disks as regular disks (rhbz#2056673)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-6
changelog:
  - conf: Introduce memory allocation threads (rhbz#2067126)
  - qemu_capabilities: Detect memory-backend-*.prealloc-threads property (rhbz#2067126)
  - qemu_validate: Validate prealloc threads against qemuCpas (rhbz#2067126)
  - qemu_command: Generate prealloc-threads property (rhbz#2067126)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-7
changelog:
  - cpu_map: Disable cpu64-rhel* for host-model and baseline (rhbz#1851227)
  - cputest: Drop some old artificial baseline tests (rhbz#1851227)
  - cputest: Give better names to baseline tests (rhbz#1851227)
  - cputest: Add some real world baseline tests (rhbz#1851227)
  - cpu_x86: Consolidate signature match in x86DecodeUseCandidate (rhbz#1851227)
  - cpu_x86: Refactor feature list comparison in x86DecodeUseCandidate (rhbz#1851227)
  - cpu_x86: Penalize disabled features when computing CPU model (rhbz#1851227)
  - cpu_x86: Ignore enabled features for input models in x86DecodeUseCandidate (rhbz#1851227)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-8
changelog:
  - nwfilter: fix crash when counting number of network filters (CVE-2022-0897, rhbz#2063902)
  - virDomainDiskDefValidate: Improve error messages for 'startupPolicy' checks (rhbz#2095758)
  - domain_validate: Split out validation of disk startup policy (rhbz#2095758)
  - virDomainDiskDefValidateStartupPolicy: Validate disk type better (rhbz#2095758)
  - virDomainDiskTranslateSourcePool: Fix check of 'startupPolicy' definition (rhbz#2095758)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-9
changelog:
  - conf: virtiofs: add thread_pool element (rhbz#2079582)
  - qemu: virtiofs: format --thread-pool-size (rhbz#2079582)
  - conf: Move virDomainObj::originalMemlock into qemuDomainObjPrivate (rhbz#2089433)
  - qemu_domain: Format qemuDomainObjPrivate::originalMemlock (rhbz#2089433)
  - qemu: Add qemuDomainSetMaxMemLock helper (rhbz#2089433)
  - qemu_migration: Use qemuDomainSetMaxMemLock (rhbz#2089433)
  - qemu_migration: Restore original memory locking limit (rhbz#2089433)
  - Add VIR_MIGRATE_ZEROCOPY flag (rhbz#2089433)
  - virsh: Add support for VIR_MIGRATE_ZEROCOPY flag (rhbz#2089433)
  - qemu_migration: Implement VIR_MIGRATE_ZEROCOPY flag (rhbz#2089433)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-10
changelog:
  - security_selinux.c: Relabel existing mode="bind" UNIX sockets (rhbz#2101575)
  - RHEL: qemu_migration: Fix restoring memlock limit on destination (rhbz#2107954)


author: EL Errata <el-errata_ww@oracle.com> - 8.0.0-10.0.1
changelog:
  - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]
  - Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-10.1.el8
changelog:
  - qemu_process: Don't require a hugetlbfs mount for memfd (rhbz#2132176)
  - qemu_namespace: Tolerate missing ACLs when creating a path in namespace (rhbz#2132176)
  - qemu_namespace: Fix a corner case in qemuDomainGetPreservedMounts() (rhbz#2132176)
  - qemu_namespace: Introduce qemuDomainNamespaceSetupPath() (rhbz#2132176)
  - qemu_process.c: Propagate hugetlbfs mounts on reconnect (rhbz#2132176)
  - qemuProcessReconnect: Don't build memory paths (rhbz#2132176)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-10.2.el8
changelog:
  - util: json: Split out array->strinlist conversion from virJSONValueObjectGetStringArray (rhbz#2152079)
  - qemuAgentGetDisks: Don't use virJSONValueObjectGetStringArray for optional data (rhbz#2152079)
  - build: Only install libvirt-guests when building libvirtd (rhbz#2157091)
  - tools: Fix install_mode for some scripts (rhbz#2157091)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-11
changelog:
  - qemu_process: Don't require a hugetlbfs mount for memfd (rhbz#2123196)
  - qemu_namespace: Tolerate missing ACLs when creating a path in namespace (rhbz#2123196)
  - qemu_namespace: Fix a corner case in qemuDomainGetPreservedMounts() (rhbz#2123196)
  - qemu_namespace: Introduce qemuDomainNamespaceSetupPath() (rhbz#2123196)
  - qemu_process.c: Propagate hugetlbfs mounts on reconnect (rhbz#2123196)
  - qemuProcessReconnect: Don't build memory paths (rhbz#2123196)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-12
changelog:
  - util: json: Split out array->strinlist conversion from virJSONValueObjectGetStringArray (rhbz#2149752)
  - qemuAgentGetDisks: Don't use virJSONValueObjectGetStringArray for optional data (rhbz#2149752)
  - virpidfile: Add virPidFileReadPathIfLocked func (rhbz#2152188)
  - qemu: tpm: Get swtpm pid without binary validation (rhbz#2152188)
  - qemu_tpm: Do async IO when starting swtpm emulator (rhbz#2152188)
  - qemu: gpu: Get pid without binary validation (rhbz#2152188)
  - spec: libvirt-daemon: Add optional dependency on *-client (rhbz#2136591)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-13
changelog:
  - build: Only install libvirt-guests when building libvirtd (rhbz#2153688)
  - tools: Fix install_mode for some scripts (rhbz#2153688)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-15
changelog:
  - nodedev: fix reported error msg in css cap XML parsing (rhbz#2165011)
  - util: refactor virDomainDeviceCCWAddress into virccw.h (rhbz#2165011)
  - util: refactor virDomainCCWAddressAsString into virccw (rhbz#2165011)
  - util: make reuse of ccw device address format constant (rhbz#2165011)
  - util: refactor ccw address constants into virccw (rhbz#2165011)
  - util: refactor virDomainCCWAddressIncrement into virccw (rhbz#2165011)
  - util: refactor virDomainDeviceCCWAddressIsValid into virccw (rhbz#2165011)
  - util: refactor virDomainDeviceCCWAddressEqual into virccw (rhbz#2165011)
  - conf: adjust method name virDomainDeviceCCWAddressParseXML (rhbz#2165011)
  - util: add ccw device address parsing into virccw (rhbz#2165011)
  - util: add virCCWDeviceAddressFromString to virccw (rhbz#2165011)
  - nodedev: refactor css format from ccw format method (rhbz#2165011)
  - nodedev: refactor ccw device address parsing from XML (rhbz#2165011)
  - nodedev: refactor css XML parsing from ccw XML parsing (rhbz#2165011)
  - schemas: refactor out nodedev ccw address schema (rhbz#2165011)
  - nodedev: add optional device address of channel device to css device (rhbz#2165011)
  - nodedev: add tests for optional device address to css device (rhbz#2165011)
  - nodedev: prevent internal error on dev_busid parse (rhbz#2165011)
  - rpc: Fix memory leak of fds (rhbz#2165428)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-19
changelog:
  - qemu: domain: Fix logic when tainting domain (rhbz#2174447)
  - qemu: agent: Make fetching of 'can-offline' member from 'guest-query-vcpus' optional (rhbz#2174447)


author: David Sloboda <david.x.sloboda@oracle.com> - 8.0.0-19.0.2
changelog:
  - qemu: monitor: Drop old monitor fields from 'struct _qemuMonitorMessage'
  - qemu: Make 'struct _qemuMonitorMessage' private
  - qemu: monitor: Move declaration of struct _qemuMonitor to qemu_monitor_priv.h
  - qemu: qemuBlockGetNamedNodeData: Remove pointless error path
  - qemu: monitor: Store whether 'query-named-block-nodes' supports 'flat' parameter
  - qemuMonitorJSONBlockStatsUpdateCapacityBlockdev: Use 'flat' mode of query-named-block-nodes
  - virpci: Resolve leak in virPCIVirtualFunctionList cleanup [CVE-2023-2700]
  - node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap() [CVE-2023-2700]

  -* Tue May 16 2023 EL Errata <el-errata_ww@oracle.com> - 8.0.0-19.0.1
  -- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]
  -- Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-20
changelog:
  - qemu: monitor: Drop old monitor fields from 'struct _qemuMonitorMessage' (rhbz#2170472)
  - qemu: Make 'struct _qemuMonitorMessage' private (rhbz#2170472)
  - qemu: monitor: Move declaration of struct _qemuMonitor to qemu_monitor_priv.h (rhbz#2170472)
  - qemu: qemuBlockGetNamedNodeData: Remove pointless error path (rhbz#2170472)
  - qemu: monitor: Store whether 'query-named-block-nodes' supports 'flat' parameter (rhbz#2170472)
  - qemuMonitorJSONBlockStatsUpdateCapacityBlockdev: Use 'flat' mode of query-named-block-nodes (rhbz#2170472)
  - qemu: relax shared memory check for vhostuser daemons (rhbz#2177701)
  - virpci: Resolve leak in virPCIVirtualFunctionList cleanup (CVE-2023-2700)
  - node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap() (CVE-2023-2700)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-23.2.el8
changelog:
  - util: Fix error return for virProcessKillPainfullyDelay() (RHEL-36064)
  - rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-23.4.el8
changelog:
  - util: xml: Introduce virXMLNodeGetSubelementList (RHEL-88716)
  - util: xml: Return GPtrArray from virXMLNodeGetSubelement [partial] (RHEL-88716)
  - qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions (RHEL-88716)
  - qemu: parse deprecated-props from query-cpu-model-expansion response (RHEL-88716)
  - qemu_capabilities: query deprecated features for host-model (RHEL-88716)
  - libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES (RHEL-88716)
  - qemu_capabilities: filter deprecated features if requested (RHEL-88716)
  - virsh: add --disable-deprecated-features flag to domcapabilities (RHEL-88716)
  - conf: add deprecated_features attribute (RHEL-88716)


author: Jiri Denemark <jdenemar@redhat.com> - 7.8.0-1
changelog:
  - Rebased to libvirt-7.8.0 (rhbz#2012802)
  - The rebase also fixes the following bugs:
      rhbz#1839070, rhbz#1942275, rhbz#1995865, rhbz#1806857, rhbz#1924616
      rhbz#1978574, rhbz#1989457, rhbz#1965589, rhbz#1677608, rhbz#1926508
      rhbz#1810863, rhbz#1845468, rhbz#1738392, rhbz#1965140


author: Jiri Denemark <jdenemar@redhat.com> - 7.9.0-1
changelog:
  - Rebased to libvirt-7.9.0 (rhbz#2012802)
  - The rebase also fixes the following bugs:
      rhbz#2011731, rhbz#2012385, rhbz#2013539


author: Jiri Denemark <jdenemar@redhat.com> - 7.10.0-1
changelog:
  - Rebased to libvirt-7.10.0 (rhbz#2012802)
  - The rebase also fixes the following bugs:
      rhbz#1845468, rhbz#2017928, rhbz#2024419, rhbz#1953389, rhbz#1510237


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-0rc1.1
changelog:
  - Rebased to libvirt-8.0.0-rc1 (rhbz#2012802)
  - The rebase also fixes the following bugs:
      rhbz#1689202, rhbz#2014369, rhbz#2030119, rhbz#2029380, rhbz#2035237
      rhbz#2035714, rhbz#2034180


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-5.1.el8
changelog:
  - conf: Introduce memory allocation threads (rhbz#2075569)
  - qemu_capabilities: Detect memory-backend-*.prealloc-threads property (rhbz#2075569)
  - qemu_validate: Validate prealloc threads against qemuCpas (rhbz#2075569)
  - qemu_command: Generate prealloc-threads property (rhbz#2075569)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-5.2.el8
changelog:
  - cpu_map: Disable cpu64-rhel* for host-model and baseline (rhbz#2084030)
  - cputest: Drop some old artificial baseline tests (rhbz#2084030)
  - cputest: Give better names to baseline tests (rhbz#2084030)
  - cputest: Add some real world baseline tests (rhbz#2084030)
  - cpu_x86: Consolidate signature match in x86DecodeUseCandidate (rhbz#2084030)
  - cpu_x86: Refactor feature list comparison in x86DecodeUseCandidate (rhbz#2084030)
  - cpu_x86: Penalize disabled features when computing CPU model (rhbz#2084030)
  - cpu_x86: Ignore enabled features for input models in x86DecodeUseCandidate (rhbz#2084030)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-5.3.el8
changelog:
  - virDomainDiskDefValidate: Improve error messages for 'startupPolicy' checks (rhbz#2109571)
  - domain_validate: Split out validation of disk startup policy (rhbz#2109571)
  - virDomainDiskDefValidateStartupPolicy: Validate disk type better (rhbz#2109571)
  - virDomainDiskTranslateSourcePool: Fix check of 'startupPolicy' definition (rhbz#2109571)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-5.4.el8
changelog:
  - conf: Move virDomainObj::originalMemlock into qemuDomainObjPrivate (rhbz#2117272)
  - qemu_domain: Format qemuDomainObjPrivate::originalMemlock (rhbz#2117272)
  - qemu: Add qemuDomainSetMaxMemLock helper (rhbz#2117272)
  - qemu_migration: Use qemuDomainSetMaxMemLock (rhbz#2117272)
  - qemu_migration: Restore original memory locking limit (rhbz#2117272)
  - Add VIR_MIGRATE_ZEROCOPY flag (rhbz#2117272)
  - virsh: Add support for VIR_MIGRATE_ZEROCOPY flag (rhbz#2117272)
  - qemu_migration: Implement VIR_MIGRATE_ZEROCOPY flag (rhbz#2117272)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-5.5.el8
changelog:
  - qemu_process: Don't require a hugetlbfs mount for memfd (rhbz#2132177)
  - qemu_namespace: Tolerate missing ACLs when creating a path in namespace (rhbz#2132177)
  - qemu_namespace: Fix a corner case in qemuDomainGetPreservedMounts() (rhbz#2132177)
  - qemu_namespace: Introduce qemuDomainNamespaceSetupPath() (rhbz#2132177)
  - qemu_process.c: Propagate hugetlbfs mounts on reconnect (rhbz#2132177)
  - qemuProcessReconnect: Don't build memory paths (rhbz#2132177)


author: Fabiano Fidêncio <fidencio@redhat.com> 3.0.0-1
changelog:
  - Update to 3.0.0 release
  - Resolves: rhbz#1754396 - Provide support for getting "firmwares" info from Domain Capabilities
  - Resolves: rhbz#1753670 - Enable bochs-display for UEFI guests (libvirt-glib)


author: Daniel P. Berrange <berrange@redhat.com> - 3.6.0-2
changelog:
  - Rename sub-RPMs to python2-libvirt & python3-libvirt
  - Re-add py3 conditionals for benefit of RHEL/CentOS builds


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-2
changelog:
  - [RFE] RFE backport allow enabling ZEROCOPY live migration to libvirt-python on RHEL8 to be consumed by VDSM (rhbz#2092756)


author: David Tardon <dtardon@redhat.com> - 0.1.5-5
changelog:
  - fix char background color in some cases
  - fix handling of bitmaps in Windows Bitmap format that contain a color
    palette


author: Donald Dutile <ddutile@redhat.com> - 8.1.1-1
changelog:
  - Rebase to 8.1.1, re-apply patch to 8.0.1-2
  - Add (Build)Requires of libibverbs to 1.2.2
  - Resolves: rhbz#1353704


author: Jarod Wilson <jarod@redhat.com> - 8.1.3-1
changelog:
  - Patch in additional coverity fixes from upstream git tree
  - Rebase to 8.1.3 to pick up copious coverity corrections
  - Related: rhbz#1271624


author: Jarod Wilson <jarod@redhat.com> - 8.1.4-1
changelog:
  - Rebase to 8.1.4 after latest round of coverity fixes upstream
    reduced reported defects to 0
  - Related: rhbz#1271624


author: Jarod Wilson <jarod@redhat.com> - 8.6.10-0.1
changelog:
  - Rebase to upstream v8.6.10 pre-release, use 0.x release number scheme
    as means to differentiate pre-release from release


author: Petr Pisar <ppisar@redhat.com> - 0.9.11-9
changelog:
  - Fix CVE-2018-15127 (Heap out-of-bounds write in
    rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662997)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 0.9.11-16
changelog:
  - Fix CVE-2019-20839
    Resolves: #1851032
  - Fix CVE-2018-21247
    Resolves: #1852516
  - Fix CVE-2020-14405
    Resolves: #1860527
  - Fix CVE-2020-14397
    Resolves: #1861152


author: Rex Dieter <rdieter@fedoraproject.org> - 0.9.11-2
changelog:
  - libvncclient sets +SRP in priority string (#1449605)
  - libvncserver blocks gtk-vnc clients >= 0.7.0 (#1451321)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.8-6
changelog:
  - Python 2 binary package renamed to python2-libvoikko
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-1
changelog:
  - Rebase to 4.1.1 from Fedora 29 (provides only python3-libvoikko,
    removes python2-libvoikko)
  - Resolves: rhbz#1636062


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-2
changelog:
  - Fix man file names for Flatpak builds, exclude __pycache__ files from Flatpak builds
  - Resolves: rhbz#1896322


author: David King <amigadave@amigadave.com> - 1.3.5-1
changelog:
  - Update to 1.3.5 (#1197923)
  - Use license macro for COPYING
  - Tighten subpackage dependencies
  - Use make_install and make_build macros
  - Use pkgconfig for BuildRequires
  - Remove unnecessary Requires from devel subpackage
  - Remove obsolete Obsoletes


author: Wim Taymans <wtaymans@redhat.com> - 1.7.0-7
changelog:
  - Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126
  - Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454
  - Remove php-cli BR


author: Darren Archibald <darren.archibald@oracle.com> - 1.7.0-10
changelog:
  - Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)
    Resolves: rhbz#2241191
  - crash related to VP9 encoding in libvpx (CVE-2023-44488)
    Resolves: rhbz#2241806


author: Wim Taymans <wtaymans@redhat.com> - 1.7.0-11
changelog:
  - Add patch to fix integer overflows.
  - Fix compilation by including limits.h
  - Resolves: RHEL-40650


author: Kalev Lember <klember@redhat.com> - 1.14.91-1
changelog:
  - Update to 1.14.91
  - Add new libwayland-egl subpackage and obsolete mesa-libwayland-egl
  - Remove ldconfig scriptlets


author: Tomas Popela <tpopela@redhat.com> - 1.0.0-8
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "8" to accommodate the 8.7.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.0.0-9
changelog:
  - Bump the release to "9" to accommodate the 9.1.0.z release bumps as
    libwebp-1.0.0-8.el9 < libwebp-1.0.0-8.el8_7


author: Caolán McNamara <caolanm@redhat.com> - 0.2.8.4-49
changelog:
  - Resolves: rhbz#1388451 (CVE-2016-9011) check max claimed record len
              against max seekable position


author: Caolán McNamara <caolanm@redhat.com> - 0.2.9-1
changelog:
  - Resolves: rhbz#1602602 new version with covscan warnings fixed
  - all cve fixes merged to that new upstream


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-1
changelog:
  - Update to openwsman-2.6.5
  - Simplify python binding build and drop python2 subpackage
  - Fix malformed HTTP 200 status line


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-3
changelog:
  - Fix wrong SSL_CTX_set_cipher_list() retval check
  - Explicitly disable build of java bindings (build fails if java-devel is installed)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.6.3-6.git4391e5c
changelog:
  - Python 2 binary package renamed to python2-openwsman
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.3-8.git4391e5c
changelog:
  - Spec file clean up (removed RPM Groups tags, removed obsolete chkconfig/initscripts
    dependencies, improved readability, fixed indentation)
  - Updated openssl-1.1 patch to support builds with older openssl versions


author: David King <dking@redhat.com> - 2.9.7-10
changelog:
  - Fix CVE-2021-3516 (#1956976)
  - Fix CVE-2021-3517 (#1957001)
  - Fix CVE-2021-3518 (#1957028)
  - Fix CVE-2021-3537 (#1957284)


author: David King <dking@redhat.com> - 2.9.7-21.1
changelog:
  - Fix CVE-2025-6021 (RHEL-96498)
  - Fix CVE-2025-49794 (RHEL-96398)
  - Fix CVE-2025-49796 (RHEL-96424)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.9.4-5
changelog:
  - Python 2 binary package renamed to python2-libxml2
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.9.7-5.0.1
changelog:
  - Update doc/redhat.gif in tarball
  - Add libxml2-oracle-enterprise.patch and update logos in tarball


author: David King <dking@redhat.com> - 2.9.7-9.1
changelog:
  - Fix CVE-2021-3516 (#1956975)
  - Fix CVE-2021-3517 (#1957000)
  - Fix CVE-2021-3518 (#1957027)
  - Fix CVE-2021-3537 (#1957283)


author: Tomas Korbar <tkorbar@redhat.com> - 0.16.105-1
changelog:
  - Change specfile accordingly to mosvald's review
  - Remove obsolete ldconfig scriptlets
  - libyang-devel-doc changed to noarch package
  - Add python_provide macro to python3-libyang subpackage
  - Remove obsolete Requires from libyang-cpp-devel
  - Start using cmake with smp_mflags macro


author: Michal Ruprich <mruprich@redhat.com> - 0.16.105-3.1
changelog:
  - Resolves: #1779573 - CVE-2019-19333 libyang: stack-based buffer overflow in make_canonical when bits leaf type is used
  - Resolves: #1779576 - CVE-2019-19334 libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used


author: Michal Ruprich <mruprich@redhat.com> - 0.16.105-4
changelog:
  - Resolves: #1780311 - CVE-2019-19333 libyang: stack-based buffer overflow in make_canonical when bits leaf type is used
  - Resolves: #1780313 - CVE-2019-19334 libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used


author: Remi Collet <remi@remirepo.net> - 1.3.2-1
changelog:
  - update to 1.3.2
  - drop multilib header hack
  - change URL to https://libzip.org/
  - test suite now ok on all arch


author: Remi Collet <remi@remirepo.net> - 1.5.1-1
changelog:
  - update to 1.5.1
  - drop dependency on zlib-devel and bzip2-devel no more
    referenced in libzip.pc
  - drop rpath patch merged upstream


author: Remi Collet <rcollet@redhat.com> - 1.5.2-1
changelog:
  - update to 1.5.2
  - add all explicit cmake options to ensure openssl is used
    even in local build with other lilbraries available


author: Miroslav Lichvar <mlichvar@redhat.com> 2.0-3
changelog:
  - add support for active-backup team interface (#1685467)
  - add support for more accurate synchronization to phc2sys (#1677217)
  - add hwts_filter option to ptp4l (#1708554)
  - limit unicast message rate per address and grant duration (#1707395)
  - fix comparing of unicast addresses (#1707395)
  - fix building with new kernel headers (#1707395)
  - update testsuite (#1707395)
  - don't leak memory when allocation fails (#1707395)


author: Miroslav Lichvar <mlichvar@redhat.com> 2.0-5
changelog:
  - fix sample timestamps when synchronizing PHC to system clock (#1787376)
  - fix handling of zero-length messages (#1827275)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1895005 CVE-2021-3571)
  - add read-only UDS port (#1929797)
  - add option to set clockClass threshold (#1980386)
  - don't repeat some log messages in multi-port configuration (#1980377)
  - increase default TX timestamp timeout to 10 ms (#1977136)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-21326 RHEL-21328 RHEL-21329)
  - fix ts2phc to handle large NMEA delay (RHEL-23278)
  - fix loading and reloading of leapfile


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 16.0.6-2
changelog:
  - Improve error messages for unsupported relocs on s390x (rhbz#2216906)
  - Disable LLVM_UNREACHABLE_OPTIMIZE


author: Tilmann Scheller <tschelle@redhat.com> - 5.0.1-4
changelog:
  - Add %enable_llvmtoolset7 macro to make it easier to activate llvm-toolset-7
    during package builds.


author: Tilmann Scheller <tschelle@redhat.com> - 5.0.1-5
changelog:
  - Move %enable_llvmtoolset7 macro to the -build subpackage to avoid conflicts
    between multiple definitions of %scl when using llvm-toolset-7 to build a SCL


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-21.20180522git70f7e08
changelog:
  - Fix printing CPU info on non-x86 architectures in sensors-detect
  - Resolves: rhbz#1752854
  - Fix printing lm_sensors version in sensors-detect and pwmconfig
  - Resolves: rhbz#1677414


author: Artem Egorenkov <aegorenk@redhat.com> - 3.4.0-23
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Pravin Satpute <psatpute@redhat.com> - 2.91.5-1
changelog:
  - Upstream new release 2.91.5
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.91.1-1
changelog:
  - Upstream new release with critical bugfixes.
  - Resolves #1170135 Conjuncts rendering issue for some glyphs


author: Pravin Satpute <psatpute@redhat.com> - 2.91.4-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423901 - FTBFS in rawhide.
  - Migrated upstream from fedorahosted to pagure.


author: Pravin Satpute <psatpute@redhat.com> - 2.95.1-1
changelog:
  - Upstream release 2.95.1
  - Update U+0960 shape as per patch from Shriramana Sharma. #1113968
  - Changed hex id of i-matra (65514...65528,65531 65533) to 65537 onwards


author: Pravin Satpute <psatpute@redhat.com> - 2.95.3-1
changelog:
  - Added  BuildRequires: python2-devel.
  - Resolves: #1423902 - FTBFS in rawhide.
  - Migrated from fedorahosted to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.95.4-1
changelog:
  - Upstream new release 2.95.4
  - Update metainfo file and fixing minor fixes
  - Removed patch, installing 59-lohit-devanagari.conf.
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.92.3-1
changelog:
  - Added  BuildRequires: python2-devel.
  - Resolves: #1423903 - FTBFS in rawhide
  - Migrated from Fedorahosted.org to pagure.io


author: Pravin Satpute <psatpute@redhat.com> - 2.91.1-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423904 - FTBFS in rawhide.
  - Migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.2-1
changelog:
  - Upstream new release 2.91.2
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.5.4-1
changelog:
  - Upstream new release 2.5.4
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo
  - Removed patch already included in upstream


author: Pravin Satpute <psatpute@redhat.com> - 2.92.0-1
changelog:
  - Upstream release 2.92.0
  - Further removal 12 not required glyphs from fonts.
  - Added reference of glyph instead of full glyphs points wherever possible.
  - Resolved 10 issues reported on github: #35,#36,#37,#38,.#39,#40.#41,#42,#43,#44.
  - More test cases in test file
  - Renamed Anchor to MLAnchor


author: Pravin Satpute <psatpute@redhat.com> - 2.92.1-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423905 - FTBFS in rawhide
  - Migrated from fedorahosted.org to pagure.io


author: Pravin Satpute <psatpute@redhat.com> - 2.92.2-1
changelog:
  - Upstream new release 2.92.2
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Parag Nemade <pnemade AT redhat DOT com> - 2.94.0-7
changelog:
  - Fix the apply_featurefile.py to use fontforge python3 module
  - use %license
  - Drop obsolete Group tag


author: Pravin Satpute <psatpute@redhat.com> - 2.94.1-1
changelog:
  - Upstream new release 2.94.1 with python3 support.
  - Resolves: #1423906 - FTBFS in rawhide
  - Migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.94.2-1
changelog:
  - Upstream new release 2.94.2
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.94.0-1
changelog:
  - Upstream release 2.94.0
  - Positioning lookup clean-up.
  - Improved grid fitting(GASP) table.
  - Renamed anchors to DVAnchor.
  - Using glyph reference (copy reference) instead of whole glyph points.
  - Auto test integrated with Makefile ($make test).
  - Resolved #32: "सर्व्हिस does not render correctly"
  - Resolved #33: "improper rendering for word : "मञ्यांच्या""


author: Pravin Satpute <psatpute@redhat.com> - 2.94.1-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423907 - FTBFS in rawhide.
  - Upstream new release, migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.0-1
changelog:
  - Updated with upstream release 2.91.0
  - First release of Lohit Odia after re-writing GSUB rules.
  - Open type rules are available in .fea file for easy reusability.
  - Feature file compiled with AFDKO.
  - Supports orya and ory2 both.
  - Developer friendly glyphs names with AGL syntax format.
  - Corrected glyph class for all glyphs. 
  - Improved shape of ka-viramasignodia-taodia.
  - Added Glyph positioning rules for below based matra.
  - Test file available with release tarball.
  - Auto testing support with harfbuzz hb-shape.
  - Tested with Harfbuzz and Uniscribe (W8 and XP)
  - Corrected feature rules for conjucts ଖ୍ର ଗ୍ର କ୍ଷ୍ଯ


author: Pravin Satpute <psatpute@redhat.com> - 2.91.1-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423908 - FTBFS in rawhide.
  - Upstream new release, migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.0-1
changelog:
  - Resolves 1152203 :- Upstream release 2.91.0
  - Rewritten all Open type tables with supporting taml and tml2 tags.
  - Renamed all the glyphs by following AGL syntax.
  - Open type tables are available in .fea file and this time it is compiled with AFDKO.
  - Reusing glyphs by "COPY REFERENCE"
  - Added GRID FITTING table and auto-hinting by fontforge.
  - Tested with Harfbuzz NG and Uniscribe (W8).
  - Auto test module available with test files.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.2-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423909 - FTBFS in rawhide
  - Upstream new release, migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.3-1
changelog:
  - Upstream new release 2.91.3
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.5.4-1
changelog:
  - Upstream release 2.5.4
  - Added support for Unicode 8.0 characters U0C00, U0C34 and U0C5A
  - Added support for Latin characters
  - Using TTFAUTOHINT now while building ttf file.
  - Resolves #985343, #1229213 and #1258123.


author: Pravin Satpute <psatpute@redhat.com> - 2.5.5-1
changelog:
  - Upstream new release 2.5.5
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Brian C. Lane <bcl@redhat.com> - 8.0-18
changelog:
  - re-add temporarily removed packages (bcl)
    Related: rhbz#1622395
  - Use google-noto-sans-cjk-ttc-fonts (bcl)
    Resolves: rhbz#1626368


author: EL Errata <el-errata_ww@oracle.com> - 8.0-20.0.1
changelog:
  - Add bug28945615-to-reset-permission-under-efi-boot.patch [Orabug: 28945615]
  - Allow to create UEK boot iso
  - Dropped libreport-rhel-anaconda-bugzilla


author: Brian C. Lane <bcl@redhat.com> - 8.1-2
changelog:
  - Install redhat-release-eula package (bcl)
    Related: rhbz#1700465
  - Don't remove chmem and lsmem from install.img (bcl)
    Resolves: rhbz#1691472
  - Include the hid-multitouch kernel module (bcl)
    Resolves: rhbz#1670182
  - Add extra boot args to the livemedia-creator iso templates (bcl)
    Resolves: rhbz#1694180
  - Add a ppc64le template for live iso creation (bcl)
    Related: rhbz#1694180
  - Add live-install.tmpl (bcl)
    Related: rhbz#1694180


author: Tianyue Lan <tianyue.lan@oracle.com> - 8.1-3.0.1
changelog:
  - Dropped redhat-release-eula.
  - Updated description and Summary.
  - Add bug28945615-to-reset-permission-under-efi-boot.patch [Orabug: 28945615]
  - Allow to create UEK boot iso
  - Dropped libreport-rhel-anaconda-bugzilla


author: Brian C. Lane <bcl@redhat.com> - 8.6-3
changelog:
  - Enable sftp when using inst.sshd (bcl)
    Resolves: rhbz#2035050
  - Revert "Drop ia32 uefi package installation" (bcl)
    Related: rhbz#2035050


author: Brian C. Lane <bcl@redhat.com> - 8.10-1
changelog:
  - Makefile: Bump the release version to 8.10 (bcl)
    Related: RHEL-24418
  - Restore missing ppc files (bcl)
    Resolves: RHEL-24619


author: Darren Archibald <darren.archibald@oracle.com> - 8.10-1.0.1
changelog:
  - Remove RHCK initrd from runtime image when creating the UEK
    boot ISO. (mark.will@oracle.com) [Orabug: 34085357]
  - Dropped redhat-release-eula.
  - Updated description and Summary.
  - Add bug28945615-to-reset-permission-under-efi-boot.patch [Orabug: 28945615]
  - Allow to create UEK boot iso
  - Dropped libreport-rhel-anaconda-bugzilla


author: Brian C. Lane <bcl@redhat.com> - 8.2-1
changelog:
  - Update package version for 8.2 release
  - Drop unneeded uboot-tools, and remove iso-graft from the aarch64.tmpl
    Resolves: rhbz#1763922
  - Add live iso support to s390
    Resolves: rhbz#1746424


author: Brian C. Lane <bcl@redhat.com> - 8.2-2
changelog:
  - Update ppc64le isolabel to match x86_64 logic (bcl)
    Resolves: rhbz#1757338
  - set inst.stage2 for ppc64le image (bcl)
    Resolves: rhbz#1757338


author: Brian C. Lane <bcl@redhat.com> - 8.2-6
changelog:
  - Restore the 98dracut-systemd service files to the install.img (bcl)
    Related: rhbz#1805405
  - Add eject back into the boot.iso (bcl)
    Resolves: rhbz#1805405


author: Brian C. Lane <bcl@redhat.com> - 8.4-2
changelog:
  - Switch to using upstream mk-s390image for s390 cdboot.img creation (bcl)
    Resolves: rhbz#1892404
  - Remove mdmonitor service from boot.iso (bcl)
    Resolves: rhbz#1888728


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 8.6-3.0.2
changelog:
  - Remove RHCK initrd from runtime image when creating the UEK
    boot ISO. (mark.will@oracle.com) [Orabug: 34085357]


author: Lianbo Jiang <lijiang@redhat.com> - B.02.18-18
changelog:
  - Fix:59a8e99ab22d ("Porting the code from /CoreOS/lshw/sanity/check-output for the CI gating")
  - Resolves: rhbz#1680623


author: Lianbo Jiang <lijiang@redhat.com> - B.02.18-22
changelog:
  - Display proper logical name of network device
  - Resolves: rhbz#1724087
  - Add DIMM running speed and Print dimm rank information
  - Resolves: rhbz#1725199


author: Omair Majid <omajid@redhat.com> - 2.8.1-9
changelog:
  - Build with standard distro-wide optimization flags even on s390 and s390x
  - Resolves: rhbz#1630591


author: Mat Booth <mat.booth@redhat.com> - 0:7.7.0-1
changelog:
  - Update to latest upstream release
  - Drop deprecated uima analyzers sub-package
  - Added nori Korean analyzers sub-package


author: Mat Booth <mat.booth@redhat.com> - 0:8.1.1-3
changelog:
  - Drop spatial, morfologik, replicator, demo and benchmark modules due to missing deps
  - Fix obsoletes when built in minimal mode


author: Alex Macdonald <almacdon@redhat.com> 1.7.1-7
changelog:
  - cleanup whitespace in the local patch to remove comments from templates
  - use system lz4 and xxhash instead of bundling the dependencies


author: Alex Macdonald <almacdon@redhat.com> 1.7.1-9
changelog:
  - run unit tests on classes that do not require randomizedtesting
  - add liblz4-java.so generation step to Makefile
  - remove mvn_file macro for lz4


author: Parag Nemade <pnemade AT redhat DOT com> - 1.7.0-7
changelog:
  - Add missing BuildRequires: glibc-locale-source
  - Resolves:rh#996429 - Mapping of ਠ is improper as per standard
  - Resolves:rh#903272 - [gu_IN] use Devanagari U0965 instead of U0AE5 in inscript2 map


author: Parag Nemade <pnemade AT redhat DOT com> - 1.8.0-0.1.RC1
changelog:
  - Update to 1.8.0 (#1523967)
  - Resolves:rh#1487512 - Can't enter words beginning "ld" with Tibetan-ewts keyboard


author: Nikola Forró <nforro@redhat.com> - 8.1.0.0-1
changelog:
  - Upload new tarball
  - rpc.3: indicate that <rpc/rpc.h> is provided by libtirpc-devel, not glibc
    resolves: #1706882


author: Nikola Forró <nforro@redhat.com> - 8.2.0.0-1
changelog:
  - Upload new tarball
  - kernel_lockdown.7: add new manpage
    resolves: #1781945
  - copy_file_range.2: update ERRORS
    resolves: #1673142


author: Nikola Forró <nforro@redhat.com> - 8.3.0.0-1
changelog:
  - Upload new tarball
  - Use unversioned docdir
    resolves: #1824824
  - xattr.7: add attr(1) as a relevant page to SEE ALSO
    resolves: #1828296
  - execve.2: clarify signal sent to the process on late failure
    resolves: #1829031


author: Nikola Forró <nforro@redhat.com> - 8.5.0.0-1
changelog:
  - Upload new tarball
  - statx.2: add STATX_ATTR_DAX
    resolves: #1899552
  - resolv.conf.5: update information about search list and
    attempt to clarify domain/search interaction
    resolves: #1928160


author: Honza Horak <hhorak@redhat.com> - 3:10.3.8-3
changelog:
  - Move config files mysql-clients.cnf and enable_encryption.preset to correct
    sub-packages, similar to what upstream does


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.8-6
changelog:
  - Use openssl-devel instead of pkgconfig(openssl)
  - Enable conflicts against mysql (instead of community-mysql)
    Related: #1581034


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.9-1
changelog:
  - Rebase to 10.3.9
  - Add workaround for short SSL certificates
  - Fix parallel installability for x86_64 and i686 devel packages
  - CVEs fixed: #1603531
    CVE-2018-3058 CVE-2018-3063 CVE-2018-3064 CVE-2018-3066


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.10-3
changelog:
  - Fix "-fstack-protector-strong" static analysis errors
    Resolves: #1624139
  - Add wsrep_sst_rsync_tunnel script, add README
    Resolves: #1650463
  - Fix few covscan issues
    Resolves: #1649707
  - Fix galera_new_cluster script
    Resolves: #1641663


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.11-1
changelog:
  - Rebase to 10.3.11
  - Remove README.mysql-cnf as we don't ship example configuration files anymore
    Resolves: #1653318
  - CVEs fixed:
    CVE-2018-3282, CVE-2016-9843, CVE-2018-3174, CVE-2018-3143, CVE-2018-3156
    CVE-2018-3251, CVE-2018-3185, CVE-2018-3277, CVE-2018-3162, CVE-2018-3173
    CVE-2018-3200, CVE-2018-3284


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.17-1
changelog:
  - Rebase to 10.3.17
    Resolves: #1711265
    Resolves: #1701687
  - Add patch for server pkgconfig file location
  - Use logrotatedir macro on one more spot
  - Fix building of TokuDB with Jemalloc 5
  - Fix building with / without lz4
  - Fix "ggsapi" -> "gssapi" typo but keep the broken behaviour
  - Control building of the CACHING_SHA2_PASSWORD plugin
  - Fix the license tag
    Resolves: #1702707


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.23-1
changelog:
  - Rebase to 10.3.23
  - Make conflicts between corresponding mariadb and mysql packages explicit
  - Get rid of the Conflicts macro, it was intended to mark conflicts with
    *upstream* packages
    Resolves: #1853159


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-1
changelog:
  - Rebase to 10.3.27
  - mariadb-debug_build.patch is no more needed, upstream did the changes:
    https://github.com/MariaDB/server/commit/31eaa2029f3c2a4f8e5609ce8b87682286238d9a#diff-32766783af7cac683980224d63c59929
    https://github.com/MariaDB/server/commit/23c6fb3e6231b8939331e2d9f157092f24ed8f4f#diff-78f3162f137407db5240950beb2bcd7c


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-2
changelog:
  - Disable building of the ed25519 client plugin.
    From now on it will be shipped by 'mariadb-connector-c' package


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-3
changelog:
  - Remove mariadb_rpl.h from includedir
    This file is shipped in mariadb-connector-c package
  - Require matching version of mariadb-connector-c package


author: Alan Steinberg <alan.steinberg@oracle.com> - 3:10.3.39-1
changelog:
  - [MariaDB 10.3.32] socat: E Failed to set SNI host "" (SST failure)
  - Rebase to 10.3.39
  - CVEs fixed:
    CVE-2022-47015, CVE-2018-25032, CVE-2022-32091, CVE-2022-32084


author: Honza Horak <hhorak@redhat.com> - 3.0.5-2
changelog:
  - Add -config sub-package that delivers system-wide /etc/my.cnf and
    /etc/my.cnf.d directory, that other packages should use
    This package also obsoletes mariadb-config


author: Michal Schorm <mschorm@redhat.com> - 3.0.8-2
changelog:
  - Add "zlib-devel" requirement in "-devel" subpackage. MariaDB requires
    linking with "-lz", which will fail without the zlib library
  - Resolves: #1710471


author: Michal Schorm <mschorm@redhat.com> - 3.0.10-1
changelog:
  - Rebase to 3.0.10
  - Use macro for tarball name
  - Use macro to set build flags
  - Use macros for make commands
  - Remove the scriptlets non relevant for RHEL-8
  - Add info for the testsuite execution
  - Remove glob from library version
  - Remove info about the upstream issues


author: Michal Schorm <mschorm@redhat.com> - 3.1.2-1
changelog:
  - Rebase to 3.1.2
  - Introducing ED25519 plugin
  - Plugindir issues (from 3.0.9 release) fixed by upstream
    Resolves: #1691176


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.1.9-1
changelog:
  - Rebase to 3.1.9
  - Overlinking issues fixed by upstream in 3.1.3 release
  - Add explicit confict between mariadb-connector-c-devel and mysql-devel packages


author: Augusto Caringi <acaringi@fedoraproject.org> - 3.0.1-2
changelog:
  - Update to top of 3.0 branch from GitHub 860e7f8b754f (version supporting dynamic linking)
  - Source tarball composed from upstream GitHub, because the latest version solves the issues
    with dynamic linking.


author: Michal Schorm <mschorm@redhat.com> - 3.0.6-1
changelog:
  - Rebase to 3.0.6
  - Raise the minimal version of the connector-c required, because of a fixed bug
    which affected connector-odbc builds


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.1.11-1
changelog:
  - Rebase to 3.1.11
  - Add updates for paths in libraries_include_path.patch
  - Patch add_docs_license_dir_option upstreamed


author: Zuzana Miklankova <zmiklank@redhat.com> - 2.7.1-1
changelog:
  - Update to 2.7.1
  - Retain compatibility with jna4
  - Adjust pom.xml, so that the rpm Requires jna and jna-platform
    Resolves: #2043212


author: Zuzana Miklankova <zmiklank@redhat.com> - 2.7.1-2
changelog:
  - autogenerate the Requires only for jna, not jna-platform
  - change required version of jna-platform to 'any' in pom.xml
    Resolves: #2089627


author: Parag Nemade <pnemade AT redhat DOT com> - 0.2.4-27
changelog:
  - Correct the conditional builds for fedora and rhel
  - Remove Group tag as its no longer needed
  - added %license macro for license files
  - Correct the license tag
  - Added fileslists more verbose for subpackages


author: Parag Nemade <pnemade AT redhat DOT com> - 0.2.4-38
changelog:
  - Resolves:rh#2180735 - move marisa-devel in rhel8 CRB repository
    also fix missing gating test execution


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.2-9
changelog:
  - Turn hard dependency on java-devel into a weak dependencny
  - Add missing Requires on which
  - Resolves: rhbz#2129825, rhbz#2008121


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1:4.8.19-1
changelog:
  - updated to 4.8.19
  - drop use slang and use ncurses. There are only few packages which are using
    slang. As ncurses support is fully working now it makes more sense to
    use it instead slang (Solaris 11.3 mc uses now ncurses)
  - instead passing -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE to CFLAGS use
    --enable-largefile autoconf param
  - removed Group, BuildRoot and %clear (new packaging policy)
  - added pkgconfig to BuildRequires
  - replaced groff by groff-base in BuildRequires (only nfroff is used)
  - use %autosetup in %prep
  - added using %{make_build} and %{make_build} macros
  - "rm -rf $RPM_BUILD_ROOT" on beginning %install is no longer needed
  - mcfs is no longer supported (removed --enable-vfs-mcfs autoconf option)
  - added explicit enabled other VFSesess to force necessary checks


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1:4.8.19-2
changelog:
  - go back to slang as it is serious issue with shift-f6 when ncurses is used
    displaying "Delete" instead "Move As" dialog (#1436394)
  - added slang %bcond to simplify experiments with switching to ncurses
  - reformat %description to 80 cols
  - really remove Group
  - %defattr() is no longer needed
  - simplifications in %files
  - use %{buildroot} macro
  - build --with-x (it does not add X11 libraries dependencies)
  - cons.saver no longer need to be 711 (changed to 755)


author: Alex Williamson <alex.williamson@redhat.com> - 0.57-1
changelog:
  - 13f1322e576c ("Remove systemd support")
  - d84a2737e79c ("Fix device udev tagging")
  - 68c92c7beaca ("Tag before generating spec file")
  - c34c4f1ade60 ("Update mdevctl.spec.in for lsmdev.8")
  - ed86d345aae0 ("Fix systemd UUID escaping")
  - d4e83f08161d ("Merge pull request #13 from cpaelzer/fix-lsmdev-man-page")
  - 3c0d285b75ab ("lsmdev - add the alternative name to the man page")


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 1.1.0-2
changelog:
  - Create additonal directories required by installation.
  - Fix sporadic callout test failures
    Related: rhbz#1999687


author: Michal Schorm <mschorm@redhat.com> - 0.996-2.12
changelog:
  - Bump version for 'mysql' module rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'AppStream' repo
  - Resolves: #2180411


author: Rafael Aquini <aquini@redhat.com> - 1.10.0-1
changelog:
  - Update to memkind source file to 1.10.0 upstream (1780394)
  - add Tier1 tests for CI gating (1688933)


author: Sebastian Kisela <skisela@redhat.com> - 4.6.2-1
changelog:
  - New release 4.6.2.
  - Convert deprecated specfile python macros to use python2 macros.
  - Explicitly depend on gcc, as it was removed from buildroot default packages.


author: Adam Jackson <ajax@redhat.com> - 18.3.0-0.2
changelog:
  - Mesa 18.3.0 RC2
  - Drop python3 build system backport
  - Drop no-longer-necessary big-endian build fix
  - Re-enable 10bpc fbconfigs


author: José Expósito <jexposit@redhat.com> - 23.1.4-3
changelog:
  - Fix off-by-one error for newblock allocation in dlist_alloc
    Resolves: https://issues.redhat.com/browse/RHEL-40566


author: Francisco Trivino <ftrivino@redhat.com> 1.6.1-9
changelog:
  - Add missing repos to the osci tests
  - Fix gss localname test to work with older gssapi version
  - Resolves: #2083122
  - Add ability to expose the used mechanism
  - Resolves: #2046231


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-4
changelog:
  - Resolves: rhbz#1702695 - fresh install of mod_auth_mellon shows rpm
                             verification warnings


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-5
changelog:
  - Resolves: rhbz#1692457 - CVE-2019-3878 mod_auth_mellon: authentication
                             bypass in ECP flow [rhel-8.1.0]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-6
changelog:
  - Resolves: rhbz#1692471 - CVE-2019-3877 appstream/mod_auth_mellon: open
                             redirect in logout url when using URLs with
                             backslashes [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-7
changelog:
  - Apply the patch from the previous commit
  - Resolves: rhbz#1692471 - CVE-2019-3877 appstream/mod_auth_mellon: open
                             redirect in logout url when using URLs with
                             backslashes [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-9
changelog:
  - Just bump the release number
  - Related: rhbz#1718238 - mod_auth_mellon-diagnostics RPM not in product
                            listings


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-10
changelog:
  - Resolves: rhbz#1761774 - mod_auth_mellon fix for AJAX header name
                             X-Requested-With


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-11
changelog:
  - Resolves: rhbz#1731053 - CVE-2019-13038 mod_auth_mellon: an Open Redirect
                             via the login?ReturnTo= substring which could
                             facilitate information theft [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-12
changelog:
  - Resolves: rhbz#1791262 - Backport SameSite=None cookie from upstream to
                             support latest browsers


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-12.1
changelog:
  - Resolves: rhbz#1986805 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                             vulnerability in logout URLs [rhel-8]


author: John Dennis <jdennis@redhat.com> - 0.13.1-2
changelog:
  - Resolves: rhbz#1481330 Add diagnostic logging
  - Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
    signature method used to sign SAML messages sent by Mellon.
    Defaults to original sha1.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-3.2
changelog:
  - Resolves: rhbz#1696197 - CVE-2019-3878 mod_auth_mellon: authentication
                             bypass in ECP flow [rhel-8.0.0.z]


author: <jdennis@redhat.com> - 2.3.7-3
changelog:
  - Resolves: rhbz# 1614977 - fix unit test segfault,
    the problem was not limited exclusively to s390x, but s390x provoked it.


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-5
changelog:
  - Resolves: rhbz#1805749 - CVE-2019-14857 mod_auth_openidc:2.3/mod_auth_openidc:
                             Open redirect in logout url when using URLs with
                             leading slashes
  - Resolves: rhbz#1805068 - CVE-2019-20479 mod_auth_openidc:2.3/mod_auth_openidc:
                             open redirect issue exists in URLs with slash and
                             backslash


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-6
changelog:
  - Fix the previous backport
  - Related: rhbz#1805749 - CVE-2019-14857 mod_auth_openidc:2.3/mod_auth_openidc:
                            Open redirect in logout url when using URLs with
                            leading slashes
  - Related: rhbz#1805068 - CVE-2019-20479 mod_auth_openidc:2.3/mod_auth_openidc:
                            open redirect issue exists in URLs with slash and
                            backslash


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-7
changelog:
  - Resolves: rhbz#1897992 - OIDCStateInputHeaders &
                             OIDCStateMaxNumberOfCookies in existing
                             mod_auth_openidc version
  - Backport the OIDCStateMaxNumberOfCookies option
  - Configure which header value is used to calculate the fingerprint of
    the auth state


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-8
changelog:
  - Resolves: rhbz#1823756 - Backport SameSite=None cookie from
                             mod_auth_openidc upstream to support latest browsers


author: Tomas Halman <thalman@redhat.com> - 2.3.7-9
changelog:
  - Resolves: rhbz#2001853 - CVE-2021-39191 open redirect by supplying a crafted URL
                             in the target_link_uri parameter


author: Tomas Halman <thalman@redhat.com> - 2.3.7-10
changelog:
  - Resolves: rhbz#1987216 - CVE-2021-32791 hardcoded static IV and AAD with a
                             reused key in AES GCM encryption [rhel-8] (edit)


author: John Dennis <jdennis@redhat.com> - 1.8.10.1-3
changelog:
  - Resolves: #1423956 fails to build with openssl 1.1.x
    Also rolls up all fixes to jose library before the change over to cjose


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-4.1
changelog:
  - Resolves: rhbz#1820666 - CVE-2019-14857 mod_auth_openidc:2.3/mod_auth_openidc:
                             Open redirect in logout url when using URLs with
                             leading slashes [rhel-8.2.0.z]
  - Resolves: rhbz#1820662 - CVE-2019-20479 mod_auth_openidc:2.3/mod_auth_openidc:
                             open redirect issue exists in URLs with slash and
                             backslash [rhel-8.2.0.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-4.2
changelog:
  - Fix the previous backport
  - Related: rhbz#1820666 - CVE-2019-14857 mod_auth_openidc:2.3/mod_auth_openidc:
                            Open redirect in logout url when using URLs with
                            leading slashes [rhel-8.2.0.z]
  - Related: rhbz#1820662 - CVE-2019-20479 mod_auth_openidc:2.3/mod_auth_openidc:
                            open redirect issue exists in URLs with slash and
                            backslash [rhel-8.2.0.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-4.3
changelog:
  - Actually apply the previous patch, sigh
  - Related: rhbz#1820666 - CVE-2019-14857 mod_auth_openidc:2.3/mod_auth_openidc:
                            Open redirect in logout url when using URLs with
                            leading slashes [rhel-8.2.0.z]
  - Related: rhbz#1820662 - CVE-2019-20479 mod_auth_openidc:2.3/mod_auth_openidc:
                            open redirect issue exists in URLs with slash and
                            backslash [rhel-8.2.0.z]


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153659 - CVE-2022-23527 - Open Redirect in
        oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184144 - CVE-2023-28625 NULL pointer dereference
        when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-6
changelog:
  - Resolves: RHEL-36492 Race condition in mod_auth_openidc filecache
  - Resolves: RHEL-25421 mod_auth_openidc: DoS when using
      `OIDCSessionType client-cookie` and manipulating cookies
      (CVE-2024-24814)


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-7
changelog:
  - Resolves: RHEL-86218 - mod_auth_openidc allows OIDCProviderAuthRequestMethod
              POSTs to leak protected data (CVE-2025-31492)


author: Jan Pazdziora <jpazdziora@redhat.com> - 1.1.0-1
changelog:
  - Logging improvements; success logging moved from notice to info level.
  - Fix redirect for AuthPAMExpiredRedirect with Basic Auth.
  - Fix AuthPAMExpiredRedirect %s escaping on Apache 2.2.


author: Joe Orton <jorton@redhat.com> - 1.10.0-6
changelog:
  - really disable Berkeley DB support if required by bcond
  - add build conditional to disable swig binding subpackages


author: Lubos Uhliarik <luhliari@redhat.com> - 1.10.2-1.1
changelog:
  - Resolves: #1733442 - CVE-2019-0203 subversion:1.10/subversion: remote
    unauthenticated denial-of-service in subversion svnserve


author: Lubos Uhliarik <luhliari@redhat.com> - 1.10.2-2
changelog:
  - Resolves: #1733443 - CVE-2019-0203 subversion:1.10/subversion: remote
    unauthenticated denial-of-service in subversion svnserve


author: Joe Orton <jorton@redhat.com> - 1.14.0~rc2-2
changelog:
  - switch subpackages to lock-step requires on -libs rather than subversion
  - fixed the build-requires (Jitka Plesnikova)


author: Paul Howarth <paul@city-fan.org> - 2.3.9-7
changelog:
  - Use /usr/bin/sed rather than /bin/sed for fixconf script on modern releases
  - Drop %defattr, redundant since rpm 4.4
  - Use %license where possible


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-17
changelog:
  - Resolves: #1876525 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-1
changelog:
  - new version 1.11.3
  - Resolves: #1633401 - CVE-2018-11763 mod_http2: httpd:  DoS for HTTP/2
    connections by continuous SETTINGS


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-3.1
changelog:
  - Resolves: #1869072 - CVE-2020-9490 httpd:2.4/mod_http2: httpd: Push diary
    crash on specifically crafted HTTP/2 header


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-1
changelog:
  - new version 1.15.7
  - Resolves: #1814236 - RFE: mod_http2 rebase 
  - Resolves: #1747289 - CVE-2019-10082 httpd:2.4/mod_http2: httpd: 
    read-after-free in h2 connection shutdown
  - Resolves: #1696099 - CVE-2019-0197 httpd:2.4/mod_http2: httpd: 
    mod_http2: possible crash on late upgrade
  - Resolves: #1696094 - CVE-2019-0196 httpd:2.4/mod_http2: httpd:
    mod_http2: read-after-free on a string compare
  - Resolves: #1677591 - CVE-2018-17189 httpd:2.4/mod_http2: httpd: 
    mod_http2: DoS via slow, unneeded request bodies


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-2
changelog:
  - Resolves: #1869073 - CVE-2020-9490 httpd:2.4/mod_http2: httpd: 
    Push diary crash on specifically crafted HTTP/2 header


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-4
changelog:
  - Resolves: #1966728 - CVE-2021-33193 httpd:2.4/mod_http2: httpd:
    Request splitting via HTTP/2 method injection and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-9.3
changelog:
  - Resolves: RHEL-13367 - httpd:2.4/mod_http2: reset requests exhaust memory
    (incomplete fix of CVE-2023-44487)(CVE-2023-45802)


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-10.1
changelog:
  - Resolves: RHEL-46214 - Access logs and ErrorDocument don't work when HTTP431
    occurs using http/2 on RHEL8


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-10.3
changelog:
  - Resolves: RHEL-58454 - mod_proxy_http2 failures after CVE-2024-38477 fix
  - Resolves: RHEL-59017 - random failures in other requests on http/2 stream
    when client resets one request


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-10.4
changelog:
  - Resolves: RHEL-105186 - httpd:2.4/httpd: untrusted input from a client causes
    an assertion to fail in the Apache mod_proxy_http2 module (CVE-2025-49630)


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.7-1
changelog:
  - 1347490 - Rebase to upstream version 0.9.7.
  - Ensure lookup_user_by_certificate runs after mod_nss as well.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.9-1
changelog:
  - 1434814 - Rebase to upstream version 0.9.9.
  - Add support for multiple users mapped to single certificate.


author: Jan Pazdziora <jpazdziora@redhat.com> - 1.0.0-1
changelog:
  - 1439711 - Rebase to upstream version 1.0.0.
  - Make LookupUserGECOS optional (no default) to support non-POSIX
    user identities.


author: Lubos Uhliarik <luhliari@redhat.com> - 1:2.0.8-8
changelog:
  - Resolves: #1832844 - mod_md does not work with ACME server that does not
    provide keyChange or revokeCert resources


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.0.8-8.2
changelog:
  - Resolves: RHEL-134487 - httpd:2.4/httpd: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (CVE-2025-55753)


author: Lubos Uhliarik <luhliari@redhat.com> - 2.9.2-9
changelog:
  - Resolves: #1824859 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules


author: Athmane Madjoudj <athmane@fedoraproject.org> - 3.0.0-2
changelog:
  - Fix the install part since extra and experimental rules are not longer included in 3.x
  - Remove EL5 bits since EL5/EPEL5 are OEL-ed
  - Bump reqs


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-3.2
changelog:
  - Resolves: RHEL-78711 - A form data, "鹿沼市御成橋"(a name of street/city
    in Japanese) is forbade by mod_security_crs-3.3.4-3.el8.noarch


author: Lubos Uhliarik <luhliari@redhat.com> - 4.6.4-4
changelog:
  - Resolves: #1779705 - python3-mod_wsgi: Remove the Provides and Obsoletes for
    the name `mod_wsgi`


author: Tom Stellard <tstellar@redhat.com> - 4.6.8-3
changelog:
  - Use make_build macro instead of just make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Luboš Uhliarik <luhliari@redhat.com> - 4.7.1-7.1
changelog:
  - Resolves: RHEL-87514 - CVE-2022-2255 python39:3.9/mod_wsgi: Trusted
    Proxy Headers Removing Bypass


author: Jakub Kadlcik <frostyx@email.cz> 0.7-1
changelog:
  - Generate manpages on the fly
  - Automated test builds incl. Docker/Travis
  - Fix PEP8 in all tools
  - modulemd_tools: temporarily skip some tests on EPEL8 or Fedora
  - Drop libmodulemd dependency in favor of python3-libmodulemd


author: Jakub Kadlčík <jkadlcik@redhat.com> - 0.7-2
changelog:
  - Do not generate manpages on the fly
  - Drop python-parameterized dependency
  - Fix python3 macro for running tests


author: Jakub Kadlcik <frostyx@email.cz> 0.8-1
changelog:
  - modulemd_tools: drop python3-parameterized dependency (frostyx@email.cz)
  - Package modulemd_tools helper lib (fvalder@redhat.com)
  - Add modulemd-merge tests (fvalder@redhat.com)
  - Add createrepo_mod tests (fvalder@redhat.com)
  - Replace master in fedora releaser to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.11-1
changelog:
  - modulemd_tools: compatibility for upgrade_ext on EPEL8 (frostyx@email.cz)
  - modulemd_tools: compatibility for read_packager_string on EPEL8
    (frostyx@email.cz)
  - dir2module: generate also profiles and modulemd-defaults file
    (frostyx@email.cz)
  - modulemd_tools: use upgrade_ext instead of upgrade (frostyx@email.cz)
  - modulemd_tools: use read_packager_string instead of read_string
    (frostyx@email.cz)
  - Add installation instructions (frostyx@email.cz)
  - bld2repo: do not create empty repos when --result-dir is used
    (kdudka@redhat.com)
  - bld2repo: print status in a more intuitive format (kdudka@redhat.com)
  - tito: stop releasing for Fedora 32 (frostyx@email.cz)


author: Jakub Kadlcik <jkadlcik@redhat.com> 0.7-6
changelog:
  - Do not install bld2repo as RHEL8 doesn't have python3-koji
    (jkadlcik@redhat.com)
  - Drop the Patch1 and make the change directly in this repository
    (jkadlcik@redhat.com)
  - Use UpstreamBuilder instead of DistributionBuilder (jkadlcik@redhat.com)
  - Skip some tests because they require binary files (jkadlcik@redhat.com)


author: Jakub Kadlcik <jkadlcik@redhat.com> 0.7-8
changelog:
  - modulemd_tools: fix tests for new libmodulemd version 2.15.0
    (frostyx@email.cz)
  - createrepo: replace deprecated LooseVersion (mkulik@redhat.com)


author: José Expósito <jexposit@redhat.com> - 2.3.4-20
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Olivier Fourdan <ofourdan@redhat.com> - 2.3.4-22
changelog:
  - Keep drop-down menus on the same monitor as the pull-down button with
    Xinerama
    Resolves: RHEL-91951


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: James Paul Turner <jamesturner246@fedoraproject.org> - 3.1.6-1
changelog:
  - Update to MPFR version 3.1.6
  - Use autosetup specfile macro for applying patches (patches 1 and 2 applied)
  - Removed iconv calls, as they were breaking .info files, which are now unicode
    resolves #1299649
  - Other minor cleanups
  - BuildRequire gcc per https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires


author: Wim Taymans <wtaymans@redhat.com> - 1.23.8-3
changelog:
  - Remove pointless Enhances:
  - Fix splelling mistake
  - change package name from libs-devel to devel and add Obsolete:
  - see rhbz#1394147


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.2.1-2
changelog:
  - Update $modincdir in mpifort after moving .mod files (#1301533)
  - Move compiler wrappers to mpich-devel (#1353621)
  - Remove bogus rpath (#1361586)


author: Jarod Wilson <jarod@redhat.com> - 3.2.1-8
changelog:
  - Remove python2 bits entirely, fix mpi lib dependencies
  - Remove obsolete Provides/Obsoletes for mpich2
  - Resolves: rhbz#1628628


author: Honggang Li <honli@redhat.com> - 3.3.2-8
changelog:
  - Sync with Fedora build
  - Update to latest upstream release 3.3.2
  - Resolves: rhbz#1657316, rhbz#1732982, rhbz#1850080


author: Honggang Li <honli@redhat.com> - 5.6.2-1
changelog:
  - Update OSU benchmarks to upstream release 5.6.2
  - Update IMB benchmarks to upstream release v2019.6
  - Resolves: rhbz#1817837


author: Honggang Li <honli@redhat.com> - 5.7-2
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960078


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2008517


author: Honggang Li <honli@redhat.com> - 4.10.0.2
changelog:
  - Rebase to latest upstream release v4.10.0-2
  - Fix license issue of mtcr_ul.c
  - Resolves: bz1541741


author: Olivier Fourdan <ofourdan@redhat.com> - 3.28.3-11
changelog:
  - Fix a new crash in recordwindow related to behavior changes in
    recent backport additions (rhbz#1657661)


author: Ray Strode <rstrode@redhat.com> - 3.28.3-12
changelog:
  - Drop "Always update monitor for non user op" patch. It's already
    in tree and getting misapplied
    Related: #1663440
  - Fix suspend and resume corruption on NVidia
    Resolves: #1663440


author: Ray Strode <rstrode@redhat.com> - 3.28.3-17
changelog:
  - Fix bug in suspend/resume corruption patch leading to inhibit fd
    not getting fetched
    Related: #1663440


author: Jonas Ådahl <jadahl@redhat.com> - 3.32.2-52
changelog:
  - Support polyinstantiation
    Resolves: #1861769
  - Mitigate nouveau misidentifying connectors
    Resolves: #1786496


author: Jan Grulich <jgrulich@redhat.com> - 3.32.2-71.1
changelog:
  - Do not use DMA buffers for screencast when the client doesn't support it
  - Use DMA buffers only for i195 drivers
    Resolves: RHEL-11227


author: Jan Grulich <jgrulich@redhat.com> - 3.32.2-72
changelog:
  - Do not use DMA buffers for screencast when the client doesn't support it
  - Use DMA buffers only for i195 drivers
    Resolves: RHEL-4405


author: Jarod Wilson <jarod@redhat.com> 2.3-1
changelog:
  - Update to upstream v2.3 release
  - Initial build for RHEL-8, featuring v2.3 only
  - Resolves: #1483744


author: Jarod Wilson <jarod@redhat.com> 2.3-4
changelog:
  - Clean up build/linker commands to better propagate distro-wide flags
  - Explicitly disable ftb, blcr and fuse to prevent rpath flag creep
  - Related: rhbz#1624147


author: Jarod Wilson <jarod@redhat.com> 2.3-5
changelog:
  - Add missing Provides: mpi and Requires: environment-modules to base mvapich2 package
  - Resolves: rhbz#1647177


author: Honggang Li <honli@redhat.com> - 2.3.3-1
changelog:
  - Update to upstream stable point release v2.3.3
  - Fix floating point exception for non-NUMA machine
  - Resolves: rhbz#1815962, rhbz#1814296


author: Honggang Li <honli@redhat.com> - 2.3.4-1
changelog:
  - Update to upstream stable point release v2.3.4
  - Build against hwloc-2.2.0
  - Resolves: rhbz#1850084


author: Michal Schorm <mschorm@redhat.com> - 8.0.12-1
changelog:
  - Rebase to MySQL 8.0.12
  - Fix the SYS_NICE capabilities
  - Add requires for the semanage binary
  - CVEs fixed: CVE-2018-3054 CVE-2018-3056 CVE-2018-3060 CVE-2018-3062
    CVE-2018-3064 CVE-2018-3065 CVE-2018-3077 CVE-2018-3081 CVE-2018-3067
    CVE-2018-3073 CVE-2018-3074 CVE-2018-3075 CVE-2018-3078 CVE-2018-3079
    CVE-2018-3080 CVE-2018-3082 CVE-2018-3084


author: Michal Schorm <mschorm@redhat.com> - 8.0.12-3
changelog:
  - Add bundled ICU version
  - Add a patch for the 'mysql_com.h' header file
  - Use system mecab tool
  - Use RPATH for mysqld, so we can later set capabilities


author: Michal Schorm <mschorm@redhat.com> - 8.0.12-6
changelog:
  - Fix the default configuration of the server, so it uses same authentication
    method as MySQL 5.7
    Resolves: #1631400


author: Michal Schorm <mschorm@redhat.com> - 8.0.13-1
changelog:
  - Rebase to 8.0.13
  - ICU patch removed; upstreamed
  - Patch for MySQL Router introduced. Do not build it.
  - Fixes for annocheck hardening
    Resolves: #1624148
  - CVEs fixed:
    CVE-2018-3276 CVE-2018-3200 CVE-2018-3137 CVE-2018-3284 CVE-2018-3195
    CVE-2018-3173 CVE-2018-3212 CVE-2018-3279 CVE-2018-3162 CVE-2018-3247
    CVE-2018-3156 CVE-2018-3161 CVE-2018-3278 CVE-2018-3174 CVE-2018-3282
    CVE-2018-3285 CVE-2018-3187 CVE-2018-3277 CVE-2018-3144 CVE-2018-3145
    CVE-2018-3170 CVE-2018-3186 CVE-2018-3182 CVE-2018-3133 CVE-2018-3143
    CVE-2018-3283 CVE-2018-3171 CVE-2018-3251 CVE-2018-3286 CVE-2018-3185
    CVE-2018-3280 CVE-2018-3203 CVE-2018-3155


author: Matej Mužila <mmuzila@redhat.com> - 8.0.17-1
changelog:
  - Rebase to 8.0.17
  - Resolves: #1732042
  - CVEs fixed:
    CVE-2019-2737 CVE-2019-2738 CVE-2019-2739 CVE-2019-2740 CVE-2019-2741
    CVE-2019-2743 CVE-2019-2746 CVE-2019-2747 CVE-2019-2752 CVE-2019-2755
    CVE-2019-2757 CVE-2019-2758 CVE-2019-2774 CVE-2019-2778 CVE-2019-2780
    CVE-2019-2784 CVE-2019-2785 CVE-2019-2789 CVE-2019-2791 CVE-2019-2795
    CVE-2019-2796 CVE-2019-2797 CVE-2019-2798 CVE-2019-2800 CVE-2019-2801
    CVE-2019-2802 CVE-2019-2803 CVE-2019-2805 CVE-2019-2808 CVE-2019-2810
    CVE-2019-2811 CVE-2019-2812 CVE-2019-2814 CVE-2019-2815 CVE-2019-2819
    CVE-2019-2822 CVE-2019-2826 CVE-2019-2830 CVE-2019-2834 CVE-2019-2879


author: Matej Mužila <mmuzila@redhat.com> - 8.0.17-1
changelog:
  - Rebase to 8.0.17
  - Resolves: #1732043
  - CVEs fixed:
    CVE-2019-2737 CVE-2019-2738 CVE-2019-2739 CVE-2019-2740 CVE-2019-2741
    CVE-2019-2743 CVE-2019-2746 CVE-2019-2747 CVE-2019-2752 CVE-2019-2755
    CVE-2019-2757 CVE-2019-2758 CVE-2019-2774 CVE-2019-2778 CVE-2019-2780
    CVE-2019-2784 CVE-2019-2785 CVE-2019-2789 CVE-2019-2791 CVE-2019-2795
    CVE-2019-2796 CVE-2019-2797 CVE-2019-2798 CVE-2019-2800 CVE-2019-2801
    CVE-2019-2802 CVE-2019-2803 CVE-2019-2805 CVE-2019-2808 CVE-2019-2810
    CVE-2019-2811 CVE-2019-2812 CVE-2019-2814 CVE-2019-2815 CVE-2019-2819
    CVE-2019-2822 CVE-2019-2826 CVE-2019-2830 CVE-2019-2834 CVE-2019-2879


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.21-1
changelog:
  - Rebase to 8.0.21
  - Use bundled libzstd and libevent for RHSCL and RHEL-8.0.0
  - Check that we have correct versions in bundled(*) Provides
  - Remove re2 bundled dependency


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.22-1
changelog:
  - Update to MySQL 8.0.22
  - mysql-certs-expired.patch patched by upstream
  - New zlib_decompress binary file in test package


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, s390 and robin hood
  - Add a new plugin 'conflicting_variables.so'


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Michal Schorm <mschorm@redhat.com> - 1.0.1-1
changelog:
  - Rebase to 1.0.1 release
    This release is just a sync-up with upstream selinux-policy
  - URL changed to a new upstream repository


author: Caolán McNamara <caolanm@redhat.com> - 3.0-22
changelog:
  - Related: rhbz#1604911 convert python2 to python3, verified
    that output th_en_US_v2.dat and th_en_US_v2.idx are identical
    before and after


author: Caolán McNamara <caolanm@redhat.com> - 0.20150304-1
changelog:
  - Resolves: rhbz#1197184 berlios has disappeared, but rla-es seems
    active, and using e.g. "a priori" as an example LibreOffice suggests
    a non-corrupted set of suggestions


author: Carlos Soriano <csoriano@redhat.com> - 3.28.1-7
changelog:
  - Disable extension doc generation, since generated files differ and
    rpmlint fails when checking that both architectures of the -devel
    library generate the same files.
    It's an issue in docbook, used by gtk-doc, and althought fixed upstream
    they didn't have a new release yet.
    https://github.com/docbook/xslt10-stylesheets/issues/54
    Resolves: RHBZ#1667136


author: Ondrej Holy <oholy@redhat.com> - 3.28.1-9
changelog:
  - Fix criticals when connecting to remote locations (rhbz#1643175)
  - Remove geometry option from man page (rhbz#1612852)


author: Ondrej Holy <oholy@redhat.com> - 3.28.1-10
changelog:
  - Add screenshots for GNOME Software in Appdata file (rhbz#1725107)
  - Add website link to About dialog (rhbz#1725101)
  - Use Files instead of Nautilus in Appdata file (rhbz#1725120)
  - Add nautilus-autorun-software man page (rhbz#1725766)


author: Ondrej Holy <oholy@redhat.com> - 3.28.1-11
changelog:
  - Fix criticals when moving file to trash (rhbz#1721133)
  - Fix criticals when closing properties window (rhbz#1721124)


author: Ondrej Holy <oholy@redhat.com> - 3.28.1-13
changelog:
  - Clear selection if any files don't match the pattern (rhbz#1207179)
  - Fix endless content size calculations (rhbz#1566027)
  - Honor umask when creating new files (rhbz#1778579)
  - Close "There is no application..." dialog after response (rhbz#1816070)


author: Richard W.M. Jones <rjones@redhat.com> - 1.4.2-4
changelog:
  - Remove misguided LDFLAGS hack which removed server hardening.
    https://bugzilla.redhat.com/show_bug.cgi?id=1624149#c6
    resolves: rhbz#1624149


author: Richard W.M. Jones <rjones@redhat.com> - 1.4.0-1
changelog:
  - New upstream version 1.4.0.
  - New plugins: random, zero.
  - New bash tab completion subpackage.
  - Remove unused build dependencies.


author: Josef Ridky <jridky@redhat.com> - 1:5.8-2
changelog:
  - fix default configuration file (#1589480 and #1594147)
  - modify permissions for /var/log files (#1601060)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-12.1
changelog:
  - fix double free or corruption error caused by freeing security context (#1802055)
  - remove deprecated CFLAG


author: Josef Ridky <jridky@redhat.com> - 1:5.8-14
changelog:
  - fix double free or corruption error when freeing security context (#1809077)
  - remove deprecated CFLAG


author: Josef Ridky <jridky@redhat.com> - 1:5.8-15
changelog:
  - proxied OIDs unspecified in proxy statement in snmpd.conf (#1658134)
  - UCD-SNMP-MIB::dskTable doesn't update dynamically (#1658185)
  - expand SNMPCONFPATH variable (#1660146)
  - remove file with Apple license (#1690936)
  - log meningful message on duplicate IP address (#1692286)
  - memory reporting adjustment (#1695497 and #1766521)
  - fix typos in man page (#1700262)
  - speedup ipAddressTable loading(#1700391)
  - fix memory leak when shut down librpm (#1763008)
  - services starts after network-online.target (#1775304)
  - add missing part of memory leak patch (#1829860)
  - add support for AES192 and AES256 (#1846252)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-19
changelog:
  - revert permission of config files to 600 (#1601060)
  - fix error message when the address specified by clientaddr option
    is wrong or cannot be bound (#1877375)
  - log error with /proc/net/if_inet6 only when IPv6 is enabled (#1824367)
  - fix issue with quoting empty passphrase (#1817225)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-21
changelog:
  - prevent parsing IP address twice (#1768908)
  - add support for digests detected from ECC certs (#1919714)
  - fix broken ErrorMsg at ucd-snmp (#1933150)
  - add support for intermediate certs (#1914656)
  - fix crash of certs with longer extension (#1908718)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-27
changelog:
  - fix memory leak due of proc file creating (#2105957)
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905)
  - fix memory leak when ipv6 disable set to 1 (#2151537)
  - fix proxy timeout issue (#2160723)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-30
changelog:
  - fix crash when configured as proxy - issue 82 (RHEL-14454)
  - log once truncating issue (RHEL-13597)
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26650)


author: David Sloboda <david.x.sloboda@oracle.com> - 2:1.5.1-2
changelog:
  - Update to 1.5.1 version
  - --dns-add get error logs when there is no container attached to the network (2210117)
  - netavark: support new "bclim" parameter for macvlan without CAP_NET_ADMIN on the container


author: Laine Stump <laine@redhat.com>
changelog:
  - Improve performance with large number of interfaces
     (Bug 1268384, Bug 1271341)
   - recognize bond devices with no slaves


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.3-5
changelog:
  - Removed executables from the library to allow parallel installation
    of x86-64 and x86 packages. The executables had testing purpose, and
    may be re-introduced in a separate package if needed.


author: Tomáš Mráz <tmraz@redhat.com> - 3.4-4
changelog:
  - Cover the gaps in annotation coverage for assembler sources
  - Add .hmac checksums for FIPS mode integrity checking


author: Daiki Ueno <dueno@redhat.com> - 3.4.1-5
changelog:
  - Backport powerpc64 optimization patches from upstream (#1855228)
    Patch from Christopher M. Riedl.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.52.20-4
changelog:
  - Python 2 binary package renamed to python2-newt
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.20-8
changelog:
  - rename newt-python3 subpackage to python3-newt
  - build python3 subpackage unconditionally
  - don't use unversioned python_sitearch macro
  - drop static subpackage
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - fix description of python2-newt


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.20-10
changelog:
  - move snack provides to python3-newt subpackage (#1640153)
  - fix radio button selection check in snack (#1714517)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.14.0-1
changelog:
  - Resolves: #1558420 - directory permissions are now correct after processing
    USR1 signal
  - Resolves: #1601414 - nginx: drop GeoIP support


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1
changelog:
  - new version 1.14.1
  - Resolves: #1647257 - CVE-2018-16845 nginx: Denial of service and
    memory disclosure via mp4 module
  - Resolves: #1647262 - CVE-2018-16844 nginx: Excessive CPU usage
    via flaw in HTTP/2 implementation
  - Resolves: #1647263 - CVE-2018-16843 nginx: Excessive memory consumption
    via flaw in HTTP/2 implementation


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-9
changelog:
  - Resolves: #1744811 - CVE-2019-9511 nginx:1.14/nginx: HTTP/2: large amount of
    data request leads to denial of service
  - Resolves: #1744325 - CVE-2019-9513 nginx:1.14/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745094 - CVE-2019-9516 nginx:1.14/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.0-1
changelog:
  - new version 1.16.0
  - enable ngx_stream_ssl_preread module
  - main package does NOT require all-modules package


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-1
changelog:
  - update to 1.16.1
  - Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-1.1
changelog:
  - Resolves: #1898952 - CVE 2019-20372 nginx:1.16/nginx: HTTP request smuggling
    via error pages in http/ngx_http_special_response.c


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-2
changelog:
  - Resolves: #1798230 - CVE-2019-20372 nginx:1.16/nginx: HTTP request smuggling
    via error pages in http/ngx_http_special_response.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.16.1-2.1
changelog:
  - Resolves: #1963174 - CVE-2021-23017 nginx:1.16/nginx: Off-by-one in
    ngx_resolver_copy() when labels are followed by a pointer to a root
    domain name


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-2
changelog:
  - new version 1.18.0
  - Resolves: #1668717 - [RFE] Support loading certificates from hardware token
    (PKCS#11)
  - Increased types_hash_max_size to 4096 in default config
  - Drop location / from default config (rhbz#1564768)
  - Drop default_sever from default config (rhbz#1373822)


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-3
changelog:
  - Resolves: #1651377 - centralizing default index.html on nginx
  - Resolves: #1825683 - Outdated Red Hat branding used in nginx default pages


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.18.0-3.1
changelog:
  - Resolves: #1963178 - CVE-2021-23017 nginx:1.18/nginx: Off-by-one in
    ngx_resolver_copy() when labels are followed by a pointer to a root
    domain name


author: David Sloboda <david.x.sloboda@oracle.com> - 1:1.20.1-1.0.1.1
changelog:
  - Resolves: RHEL-12732 - nginx:1.20/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2112345 - nginx:1.22 for RHEL 8
  - add stream_geoip_module and stream_realip_module
  - remove obsolete --with-ipv6


author: David Sloboda <david.x.sloboda@oracle.com> - 1:1.22.1-1.0.1.1
changelog:
  - Resolves: RHEL-12728 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack)(CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-2
changelog:
  - Resolves: RHEL-146517 - nginx:1.24/nginx: NGINX: Data injection via
    man-in-the-middle attack on TLS proxied connections (CVE-2026-1642)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.24.0-3
changelog:
  - Resolves: RHEL-157877 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of
    Service or Code Execution via specially crafted MP4 files
  - Resolves: RHEL-159436 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of
    Service via undisclosed requests when ngx_mail_auth_http_module is enabled
  - Resolves: RHEL-159549 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of
    Service or file modification via buffer overflow in ngx_http_dav_module
  - Resolves: RHEL-159528 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of
    Service due to memory corruption via crafted MP4 file


author: Martin Osvald <mosvald@redhat.com> - 2:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2166178 - Nmap much slower after libpcap fix
  - Resolves: #2169766 - Rebase nmap for TLS v1.3 support


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 0.3.4-26
changelog:
  - New patch do not activating SR-IOV VFs automatically. RHBZ#1931290
  - New patch fixing Nmstate waits when SR-IOV VFs are decreased. RHBZ#1931784
  - New patch fixing Nmstate activating unmanaged bridge ports. RHBZ#1932247


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1.0.2-13
changelog:
  - Fix SR-IOV BCM57416 failure when creating VFs. RHBZ#1979515
  - Fix applying route rule changes over ovs interface. RHBZ#1979943


author: Gris Ge <fge@redhat.com> - 1.1.0-3
changelog:
  - Fix state=ignore for OVS interface. RHBZ#1944054
  - Fix verification for next hop address 0.0.0.0. RHBZ#1985879


author: Ana Cabral <acabral@redhat.com> - 1.1.1-0.1.alpha1
changelog:
  - Upgrade to 1.1.1 alpha1.
  - Canonicalize ipv6 addresses for dns nameservers. RHBZ#1911241
  - Throw better error when peer is missing for veth interfaces. RHBZ#1973973


author: Fernando Fernandez Mancera - 1.2.1-2
changelog:
  - Fix ovs vxlan base-iface error. RHBZ#2080528
  - Fix clear linux bridge vlan filtering. RHBZ#2080530


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1.3.3-2
changelog:
  - Do not remove SR-IOV that is not in desired state. RHBZ#2139698
  - Allow extra IP addresses found in verification stage. RHBZ#2128555


author: Stephen Gallagher <sgallagh@redhat.com> - 1:10.4.1-1
changelog:
  - Update to 10.4.1 to address security issues
  - https://nodejs.org/en/blog/release/v10.4.1/
  - Resolves: rhbz#1590801
  - Resolves: rhbz#1591014
  - Resolves: rhbz#1591019


author: Stephen Gallagher <sgallagh@redhat.com> - 1:10.7.0-2
changelog:
  - Update to 10.7.0
  - https://nodejs.org/en/blog/release/v10.7.0/
  - https://nodejs.org/en/blog/release/v10.6.0/


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.7.0-5
changelog:
  - Import sources from fedora
  - Allow using python2 at %build and %install
  - turn off debug for aarch64


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.21.0-1
changelog:
  - Security update to 10.21.0
  - Resolves: RHBZ#1845306
  - Fixes CVE-2020-11080, CVE-2020-8174, CVE-2020-10531
  - Bundle brotli, because --shared-brotli configure option is missing
  - Add i18n subpackage


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.21.0-1
changelog:
  - Security update to 10.21.0
  - Resolves: RHBZ#1845307
  - Fixes CVE-2020-11080, CVE-2020-8174, CVE-2020-10531
  - Bundle brotli, because --shared-brotli configure option is missing
  - Add i18n subpackage


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.23.1-1
changelog:
  - January Security release
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Rebase to 10.23.1
  - Resolves: RHBZ#1916461, RHBZ#1914789
  - Resolves: RHBZ#1914783, RHBZ#1916462, RHBZ#1916395, RHBZ#1916459
  - Resolves: RHBZ#1916691, RHBZ#1916689, RHBZ#1916388
  - Remove dot-prop patch, as it is fixed by npm rebase


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.24.0-1
changelog:
  - Resolves: RHBZ#1932373, RHBZ#1932426
  - Resolves CVE-2021-22883 and CVE-2021-22884
  - remove -debug-nghttp2 flag (1930775)
  - remove ini patch merged upstream


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.13.1-1
changelog:
  - Resolves: RHBZ# 1773503, update to 12.13.1
  - minor clean up and sync with Fedora spec
  - turn off debug builds


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.19.1-1
changelog:
  - Resolves: RHBZ#1901044, #1901045, #1901046, #1901047
  - c-ares, ajv and y18n CVEs and yarn installability issues


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.20.1-1
changelog:
  - Security rebase for January security release
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Resolves: RHBZ#1916460, RHBZ#1914786
  - Resolves: RHBZ#1914784, RHBZ#1916396


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.21.0-1
changelog:
  - Resolves: RHBZ#1932315, RHBZ#1932424
  - remove --debug-nghttp2 option
  - remove ini patch
  - Backport patch to use getauxval


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.19.1-1
changelog:
  - Resolves: RHBZ#1861602, #1874302, #1898598, #1898765
  - c-ares, ajv and y18n CVEs and yarn installability issues


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.20.1-1
changelog:
  - Security rebase for January security release
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Resolves: RHBZ#1913000, RHBZ#1912952
  - Resolves: RHBZ#1912635, RHBZ#1893984


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.21.0-1
changelog:
  - Resolves: RHBZ#1934566, RHBZ#1934598
  - remove --debug-nghttp2 option
  - remove ini patch
  - Backport patch to use getauxval


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-1
changelog:
  - Resolves: RHBZ#1979843, RHBZ#1977759
  - Resolves: RHBz#1952915
  - Resolves CVE-2021-22918(libuv), use system cipher list


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-2
changelog:
  - Resolves: RHBZ#1979843, RHBZ#1977759
  - Resolves: RHBz#1952915
  - Fix typo, BR systemtap-sdt-level always, remove y18n patch


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-3
changelog:
  - Resolves CVE-2021-23362 CVE-2021-27290
  - Resolves: RHBZ#1945512, RHBZ#1945286
  - Add missing CVE trackers


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.5-1
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940,
  - Resolves CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves: RHBZ#1951621 (make FIPS always available)
  - Resolves: RHBZ#1988596, RHBZ#1993814, RHBZ#1993808, RHBZ#1993094
  - Resolves: RHBZ#1986742, RHBZ#1993946, RHBZ#1993939, RHBZ#1989426


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.12-1
changelog:
  - Resolves: RHBZ#2084651
  - Resolves: #2086773, #2086777, #2086781, #2086786, #2086790
  - Resolves: #2086795, #2086799, #2086804, #2086809, #2086813
  - Rebase to last v12.x release
  - Remove patch for CVE-2021-23343


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.21.0-1
changelog:
  - Resolves: RHBZ#1932316, RHBZ#1932365
  - remove --debug-nghttp2 option
  - remove ini patch
  - Backport patch to use getauxval


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-1
changelog:
  - Resolves: RHBZ#1980031, RHBZ#1978201
  - Resolves #1952915
  - Resolves CVE-2021-22918(libuv), use system cipher list


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-3
changelog:
  - Resolves CVE-2021-23362 CVE-2021-27290
  - Resolves: RHBZ#1991584, RHBZ#1991578
  - Add missing CVE trackers


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.5-1
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940,
  - CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves RHBZ#1951621 (make FIPS always available)
  - Resolves: RHBZ#1988595, RHBZ#1993992, RHBZ#1993989, RHBZ#1993093
  - Resolves: RHBZ#1994025, RHBZ#1994403, RHBZ#1994407, RHBZ#1994399
  - Resolves: RHBZ#1993927 (make FIPS always available)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.15.4-1
changelog:
  - Security rebase to 14.15.4
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Resolves: RHBZ#1916463, RHBZ#1914788
  - Resolves: RHBZ#1914785, RHBZ#1916387, RHBZ#1916389, RHBZ#1916390, RHBZ#1916690


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.15.4-1
changelog:
  - Security rebase to 14.15.4
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Resolves: RHBZ#1913001, RHBZ#1912953
  - Resolves: RHBZ#1912636, RHBZ#1898602, RHBZ#1898768, RHBZ#1893987, RHBZ#1893184


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.3-1
changelog:
  - Resolves: RHBZ#1980032, RHBZ#1978203
  - Resolves RHBZ#1842826
  - Resolves CVE-2021-22918(libuv), use system cipher list


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.3-3
changelog:
  - Resolves: RHBZ#1991584, RHBZ#1991578
  - Resolves CVE-2021-23362 CVE-2021-27290
  - Bump for missing mentions of CVEs


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.5-1
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940,
  - CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves RHBZ#1847529 (make FIPS always available)
  - Resolves: RHBZ#1988599, RHBZ#1994000, RHBZ#1993998, RHBZ#1993095
  - Resolves: RHBZ#1994028, RHBZ#1994402, RHBZ#1994406, RHBZ#1994398
  - Resolves: RHBZ#1993924 (make FIPS always available)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.16.0-1
changelog:
  - Resolves CVE-2021-22883 CVE-2021-22884
  - Resolves: RHBZ#1934566, RHBZ#1934599
  - Rebase, remove ini patch


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.3-1
changelog:
  - Resolves: RHBZ#1979844, RHBZ#1977829
  - Resolves: RHBZ#1842826
  - Resolves CVE-2021-22918(libuv), use system cipher list


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.3-3
changelog:
  - Resolves: RHBZ#1945513, RHBZ#1945287
  - Resolves CVE-2021-23362 CVE-2021-27290
  - Bump for missing mentions of CVEs


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.5-1
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940,
  - CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves RHBZ#1847529 (make FIPS always available)
  - Resolves: RHBZ#1988600, RHBZ#1993815, RHBZ#1993809, RHBZ#1993096
  - Resolves: RHBZ#1986743, RHBZ#1993947, RHBZ#1993940, RHBZ#1989427
  - Resolves: RHBZ#1951620 (make FIPS always available)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.18.2-1
changelog:
  - Resolves: RHBZ#2027609
  - Resolves: RHBZ#2027649, RHBZ#2027646, RHBZ#2027642, RHBZ#2027635
  - Rebase to new version to fix CVEs


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.18.2-1
changelog:
  - Resolves: RHBZ#2026325
  - Resolves: RHBZ#2014130, RHBZ#2014124, RHBZ#2013826, RHBZ#2024921
  - Rebase to new version to fix CVEs


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.20.0-1
changelog:
  - Rebase to latest version
  - Resolves: RHBZ#2106367
  - CVE fixes for CVE-2022-32212/3/4/5
  - Resolves: #2109576, #2109579, #2109582, #2109585


author: Zuzana Svetlikova <zsvetlik@redhat.com - 1:14.20.0-2
changelog:
  - Replace with_* macros with RPM confitionals
  - Unify configure calls into single command
  - Refactor bootstrap-related parts
  - Decouple dependency bundling from bootstrapping
  - Resolves: RHBZ#2111417


author: Jan Staněk <jstanek@redhat.com> - 1:14.20.1-2
changelog:
  - Record issues fixed in the current version
    Resolves: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824
    Resolves: CVE-2022-0235


author: Jan Staněk <jstanek@redhat.com> - 1:14.18.2-2
changelog:
  - Replace with_* macros with RPM confitionals
  - Unify configure calls into single command
  - Refactor bootstrap-related parts
  - Decouple dependency bundling from bootstrapping


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.20.0-1
changelog:
  - Rebase to latest release
  - Resolves: #2106281, #2108056, #2108061, #2108066, #2108071, #2108139
  - Remove libs patch
  - Build without corepack


author: Jan Staněk <jstanek@redhat.com> - 1:14.20.1-2
changelog:
  - Record issues fixed in the current version
    Resolves: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824


author: Jan Staněk <jstanek@redhat.com> - 1:14.21.1-2
changelog:
  - Apply upstream fix for CVE-2022-24999
    Resolves: CVE-2022-24999
  - Record CVEs fixed by current or previous upstream releases
    Resolves: CVE-2021-44906


author: Jan Staněk <jstanek@redhat.com> - 1:14.21.3-1
changelog:
  - Rebase to 14.21.3
    Resolves: rhbz#2153712
    Resolves: CVE-2022-25881 CVE-2023-23918 CVE-2023-23920 CVE-2022-38900
    Resolves: CVE-2022-4904


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.1.0-1
changelog:
  - Resolves: RHBZ#1953991
  - Rebase to v16.x
  - Update version of gcc and gcc-c++ needed
  - Remove libs conditionals
  - Remove unused patches
  - Bundle nghttp3 and ngtcp2


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.4.2-1
changelog:
  - Resolves: RHBZ#1979847
  - Resolves CVE-2021-22918(libuv)
  - Use system cipher list(1842826, 1952915)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.7.0-1
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939,
  - CVE-2021-22940, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves: RHBZ#1988608, RHBZ#1993816, RHBZ#1993810
  - Resolves: RHBZ#1993097, RHBZ#1993948, RHBZ#1993941, RHBZ#1994963


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.7.0-2
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939,
  - CVE-2021-22940, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves: RHBZ#1988608, RHBZ#1993816, RHBZ#1993810
  - Resolves: RHBZ#1993097, RHBZ#1993948, RHBZ#1993941, RHBZ#1994963
  - fix python3 in gyp


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.8.0-1
changelog:
  - Resolves CVE-2021-32803, CVE-2021-32804, CVE-2021-37701, CVE-2021-37712
  - Resolves: RHBZ#1993948, RHBZ#1993941, RHBZ#2000151, RHBZ#2002176


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.13.1-1
changelog:
  - Resolves: RHBZ#2027644, RHBZ#2027643, RHBZ#2027638, RHBZ#2027633
  - Resolves: RHBZ#2027610
  - Rebase to LTS release and to fix multiple low and medium CVEs


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.13.1-1
changelog:
  - Resolves: RHBZ#2014132, RHBZ#2014126, RHBZ#2013828, RHBZ#2024920
  - Resolves: RHBZ#2026329
  - Rebase to LTS release and to fix multiple low and medium CVEs


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.16.0-1
changelog:
  - Rebase to latest version
  - Resolves: RHBZ#2106369
  - CVE fixes for CVE-2022-32212/3/4/5
  - Resolves: #2109578, #2109581, #2109584, #2109588


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.17.1-1
changelog:
  - Rebase to version 16.17.1
  - Resolves: CVE-2022-35255 CVE-2022-35256
  - Resolves: #2132004, #2130552
  - Resolves #2121095


author: Jan Staněk <jstanek@redhat.com> - 1:16.14.0-5
changelog:
  - Unify configure calls into single command
  - Refactor bootstrap-related parts
  - Decouple dependency bundling from bootstrapping


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.16.0-1
changelog:
  - Resolves: #2104754, #2108057, #2108062, #2108067, #2108072
  - Resolves CVE-2022-29244, CVE-2022-32212/3/4/5
  - Resolves: #2106285
  - Rebase to latest release


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.17.1-1
changelog:
  - Rebase to version 16.17.1
  - Resolves: CVE-2022-35255 CVE-2022-35256
  - Resolves: #2130553
  - Resolves #2132003
  - Resolves #2121095


author: Jan Staněk <jstanek@redhat.com> - 1:16.18.1-2
changelog:
  - Record CVE references already addressed in this or previous upstream versions
    Resolves: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
    Resolves: rhbz#2153713
    Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
    Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188289
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222288


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 1:16.20.2-2
changelog:
  - Rebase to 16.20.2
    Resolves: rhbz#2231866
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559


author: David Sloboda <david.x.sloboda@oracle.com> - 1:16.20.2-4.0.1
changelog:
  - reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks
    Resolves: CVE-2024-22019


author: Jan Staněk <jstanek@redhat.com> - 1:18.6.0-1
changelog:
  - Rebase to version 18.6.0
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
    Resolves: CVE-2022-29244


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2178087
  - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2178086
  - Resolves: CVE-2022-25881, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Jan Staněk <jstanek@redhat.com> - 1:18.14.2-3
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2022-4904
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188290 rhbz#2166926
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222287


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228939
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: Filip Janus <fjanus@redhat.com> - 1:18.20.2-1
changelog:
  - Removes .ps1 files
  - Rebase to 18.20.2
  - Fixes: CVE-2024-27983, CVE-2024-28182, CVE-2024-27982, CVE-2024-25629


author: Andrei Radchenko <aradchen@redhat.com> - 1:18.20.6-2
changelog:
  - Disable npm's update-notifier
    Resolves: RHEL-81075
  - Remove obsolete scriplets
    Resolves: RHEL-81120


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.0-1
changelog:
  - Update to v20.5.0
  - Remove dtrace support
  - bcond corepack, so we don't provide it by default
  - Decrease debuginfo verbosity for all arches
  - Resolves: #2186718
  - Resolves RHELPLAN-155624


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.1-1
changelog:
  - Rebase to new security release
  - Address CVE-2023-32002, CVE-2023-32004, CVE-2023-32558 (high)
  - Address CVE-2023-32006, CVE-2023-32559 (medium)
  - Address CVE-2023-32005, CVE-2023-32003 (low)
  - Resolves: #2186718
  - Resolves RHELPLAN-155624


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.8.1-1
changelog:
  - Update node and nghttp
  - Add fips patch
  - Fixes CVE-2023-44487 (nghttp)
  - Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:20.11.1-1
changelog:
  - Rebase to version 20.11.1
  - Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium)


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:20.11.1-1
changelog:
  - Rebase to version 20.11.1
  - Resolves: RHEL-26017 RHEL-26266 RHEL-26685 RHEL-26686 RHEL-26004 RHEL-26596 RHEL-26688


author: Jan Staněk <jstanek@redhat.com> - 1:20.12.2-1
changelog:
  - Rebase to version 20.12.0
    Fixes: CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
    Fixes: CVE-2024-25629 (c-ares)


author: Jan Staněk <jstanek@redhat.com> - 1:20.12.2-1
changelog:
  - Rebase to version 20.12.0
    Addresses CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
    Addresses CVE-2024-25629 (c-ares)


author: Tomáš Juhász <tjuhasz@redhat.com> - 1:20.18.2-1
changelog:
  - Update to version 20.18.2
    Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76001 RHEL-76146


author: Jan Staněk <jstanek@redhat.com> - 22.13.1-1
changelog:
  - Upgrade to version 22.13.1
    Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76362 RHEL-76897


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove obsolete lua pretransaction script from spec file
    Resolves: RHEL-81117 RHEL-71410
  - Disable npm update notifications for users
    Resolves: RHEL-81080


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.22.2-1
changelog:
  - Update to version 22.22.2
    Resolves: RHEL-154019
    Fixes: CVE-2026-1528 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-27135 CVE-2026-1528


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2027630
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2027632, RHBZ#2028131
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#1991322, RHBZ#1948030
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.19-2
changelog:
  - Switched from autosetup
  - Removed CODE_OF_CONDUCT.md and faq.md which is not present in npmjs package, might switch to GH sources in the future
  - Resolves: RHBZ#2109919


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.19-2
changelog:
  - Switched from autosetup
  - Removed CODE_OF_CONDUCT.md and faq.md which is not present in npmjs package, might switch to GH sources in the future
  - Resolves: RHBZ#2109921


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.19-2
changelog:
  - Switched from autosetup
  - Removed CODE_OF_CONDUCT.md and faq.md which is not present in npmjs package, might switch to GH sources in the future
  - Resolves: RHBZ#2108141


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.19-2
changelog:
  - Switched from autosetup
  - Removed CODE_OF_CONDUCT.md and faq.md which is not present in npmjs package, might switch to GH sources in the future
  - Resolves: RHBZ#2108140


author: Tom Hughes <tom@compton.nu> - 16-1
changelog:
  - Rewrite nodejs.req to better match npm versioning rules
  - Add tests for nodejs.req and nodejs.prov


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Masahiro Matsuya <mmatsuya@redhat.com> - 26-1
changelog:
  - nodejs.prov: find namespaced bundled dependencies
  - Apply https://src.fedoraproject.org/rpms/nodejs-packaging/c/e24e7df


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - update the restore defaults for pkcs12


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Daiki Ueno <dueno@redhat.com> - 3.39.0-1.2
changelog:
  - Update nss-dsa.patch to not advertise DSA signature algorithm
  - Update PayPal test certs for testing


author: Daiki Ueno <dueno@redhat.com> - 3.39.0-1.3
changelog:
  - Backport upstream fixes for rhbz#1649026, rhbz#1608895, rhbz#1644854
  - Document PKCS #11 URI
  - Add warning when adding module with modutil while p11-kit is enabled


author: Bob Relyea <rrelyea@redhat.com> - 3.39.0-1.4
changelog:
  - Support for IKE/IPsec typical PKIX usage so libreswan can use nss
    without rejecting certs based on EKU


author: Daiki Ueno <dueno@redhat.com> - 3.41.0-3
changelog:
  - Fix the last change
  - Add --no-reload option to update-crypto-policies to avoid
    unnecessary restart of daemons


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-6
changelog:
  - Add continuous RNG test required by FIPS
  - fipstest: use CKM_TLS12_MASTER_KEY_DERIVE instead of vendor specific mechanism


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-8
changelog:
  - CKM_NSS_IKE1_APP_B_PRF_DERIVE was missing from the mechanism list, preventing
    PK11_Derive*() from using it. Add gtests for the PK11_Derive interface for
    all the CKM_NSS_IKE*_DERIVE mechanism.


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-12
changelog:
  - Install cmac.h required by blapi.h (#1764513)
  - Fix out-of-bounds write in NSC_EncryptUpdate (#1775913)


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-1
changelog:
  - Update to NSS 3.44
  - Define NSS_SEED_ONLY_DEV_URANDOM=1 to exclusively use getentropy
  - Use %autosetup
  - Clean up manual pages generation
  - Clean up %check
  - Remove prelink dependency, which is not available in RHEL-8
  - Remove upstreamed patches


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-3
changelog:
  - Disable TLS 1.3 under FIPS mode
  - Disable RSASSA-PKCS1-v1_5 in TLS 1.3
  - Fix post-handshake auth transcript calculation if
    SSL_ENABLE_SESSION_TICKETS is set
  - Revert the change to use XDG basedirs (mozilla#818686)


author: Daiki Ueno <dueno@redhat.com> - 3.53.1-2
changelog:
  - Fix regression in MD5 disablement (#1849938)
  - Include rsa_pkcs1_* in signature_algorithms extension (#1847945)


author: Daiki Ueno <dueno@redhat.com> - 3.53.1-3
changelog:
  - Disable NSS_HASH_ALG_SUPPORT as well for MD5 (#1849938)
  - Adjust for update-crypto-policies packaging change (#1848649)
  - Fix compilation with -Werror=strict-prototypes (#1843417)


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-7
changelog:
  - Fix attribute decryption issue where the private key components
    integrity check on private attributes where not being checked.


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-11
changelog:
  - Fix issue with upgradedb where upgradedb expects standard to
    generate dbm databases, not sql databases (default in RHEL8)


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-12
changelog:
  - fips need to reject small primes even if they are approved
  - code to autodetect whether or not to use the cache needs to do so
    in a way that doesn't mess with filesystem negative file caching.
  - add kdf selftests


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-14
changelog:
  - Add support for enable/disable in policy. Now if your policy
    file has disallow=x enable=y it will act just like our other 
    libraries.


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-16
changelog:
  - Fix the following CVE
  - CVE-2020-12403 chacha-poly issues
  - CVE-2020-12400 constant time ECC.
  - CVE-2020-6829  constant time ECC.


author: Bob Relyea <rrelyea@redhat.com> - 3.67.0-4
changelog:
  - Better fix for the sdb timeout. The issue wasn't a race, it was
    the sqlite timeout waiting to begin a transaction under heavy
    thread usage.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-1
changelog:
  - Rebase to NSS 3.79
  - Set FIPS Module ID
  - skip attribute verification on attributes with default values
  - don't export trust objects if they are default trust objects from dbm
  - add dbtool to nss-tools


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-5
changelog:
  - FIPS 140-3 changes
  -  Reject Small RSA keys, 1024 bit keys are marked as FIP OK when verifying, reject
     signature keys by policy
  -  Allow applications to retrigger selftests on demand.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-8
changelog:
  - Update fips default for pk12util to AES rather than TDES
  - Fix bug in pkcs12 files with null passwords


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-11
changelog:
  - Fix QA found failures:
  -  remove extra '+' from sslpolicy.txt file causing test error values
  -  only use GRND_RANDOM if the kernel is in FIPS mode.


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 3.90.0-3
changelog:
  - add indicators for pbkdf2
  - add camellia to pkcs12 doc files
  - fix ems policy bug
  - disable ech
  - rebase to NSS 3.90


author: Nalin Dahyabhai <nalin@redhat.com> 0.8.14-7
changelog:
  - move the packaged tmpfiles.d file from /etc/tmpfiles.d to %{_tmpfilesdir},
    per heads-up from Ville Skyttä on devel@


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.14-12
changelog:
  - Get rid of all conditions that are always true for both EPEL-7 and Fedora
    as it's quite unlikely we'd use this specfile on EPEL-6
  - Remove the sysvinit script and all the scriptlets around it
  - Unconditionally use systemd scriptlet macros and systemd_requires
  - Unconditionally build the PAM module as the PADL module is long dead
  - Remove the auto-migration of settings from nss_ldap as it's been
    long gone from Fedora
  - Don't check /etc/sysconfig/authconfig as authconfig is on its way
    out from Fedora
  - Use only spaces, not tabs, to stop my editor from looking like a
    Christmas tree
  - Remove the obsolete Group stanza
  - Make nscd Recommended, not Required


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.9-1
changelog:
  - Upgrade to the latest upstream
    - Disable the python utilities
    - Don't bother with failing pylint test as we don't ship the python
      utilities
  - Drop unused validname and exitcode patches, port strtoid overflow
    patch


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.9-2
changelog:
  - Apply a patch by Lukas Slebodnik to allow root to write to the
    /var/run/nslcd directory
  - Resolves: rhbz#1583211 - nslcd, the local LDAP daemon, fails to start
                             with SELinux enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.9-3
changelog:
  - Also change the pemissions on tmpfiles
  - Related: rhbz#1583211 - nslcd, the local LDAP daemon, fails to start
                            with SELinux enabled


author: Tomas Halman <thalman@redhat.com> - 0.9.9-4
changelog:
  - moving temp files from /var/run to /run
  - Resolves: rhbz#1969826 - tmpfiles snippet needs updated path for
                             nss-pam-ldapd


author: Andreas Schneider <asn@redhat.com> - 1.1.12-1
changelog:
  - resolves: rhbz#2139665 - Rebase to version 1.1.12
  - resolves: rhbz#2124635 - Reduce dependencies of the package


author: Michael Adam <madam@redhat.com> - 1.0.3-2
changelog:
  - Fix format of changelog entries.
  - Require cmake.
  - Don't own _libdir/pkgconfig, and require pkgconfig instead.


author: Andreas Schneider <asn@redhat.com> - 1.1.0-1
changelog:
  - Update to version 1.1.0
    * Added support for initgroups()
    * Added support for shadow files (getspnam(), etc.)
    * Improved support for multi address handling in getaddrinfo()
    * Improved file parser
    * Fixed compilation on machines without IPv4 support
    * Fixed service string sanity check in getaddrinfo() (bso #11501)
    * Fixed AI_NUMERICHOST handling in getaddrinfo() (bso #11477)


author: Andreas Schneider <asn@redhat.com> - 1.1.3-1
changelog:
  - Update to version 1.1.3
    * Added support for BSD 'struct passwd' members
    * Replaced strcpy() with snprintf()
    * Fixed segfault while reloading hosts file
    * Fixed issue where are not fault tolerant if an alias has already
      been added
    * Fixed nss_wrapper build on Solaris


author: Charalampos Stratakis <cstratak@redhat.com> - 1.14.2-12
changelog:
  - Set proper build flags for https://fedoraproject.org/wiki/Changes/Python_Extension_Flags
  - Resolves: rhbz#1715036


author: Tomas Orsava <torsava@redhat.com> - 1:1.14.3-5
changelog:
  - Switch runtime dependency of the python3-numpy-f2py package from
    python3-devel (that's now buildroot-only) to python3-libs-devel
  Resolves: rhbz#1610863


author: Richard W.M. Jones <rjones@redhat.com> - 4-1
changelog:
  - s390x is now a native architecture with OCaml 4.04 in Fedora >= 26.
  - Add riscv64 as a native arch using out of tree backend.


author: Jindrich Novy <jnovy@redhat.com> - 1.1.1-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.1.1
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.1.2
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to
    https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - require crun >= 0.17
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.2.7-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.7
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-2
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 1.2.3-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.3
  - fix build
  - Related: #1934415


author: Dan Walsh <dwalsh@redhat.com> - 1:0.1.15-1.git
changelog:
  - Fix issue with oci-systemd-hook running in user namespaces
  - fix json file to run container with proper stage field.


author: Dan Walsh <dwalsh@redhat.com> - 2:2.2.0-2.git0a4dcd6
changelog:
  * Thu Sep 21 2017 Dan Walsh <dwalsh@redhat.com> - 2:2.2.0-2.git0a4dcd6
  - Add support for multiple configuration files.
    oci-umount will still read config file /etc/oci-umount.conf if it
    exists, but will also read config files in /usr/share/oci-umount/oci-umount.d
    and config files in /etc/oci-umount/oci-umount.d.  If the same file name exists
    in both directories, then oci-umount will only use the content in /ect/oci-umount/oci-umount.d.
  - Make Logs less noisy
  - Improve logs output, adding containier id, and needed file information
  - Add support for specifying submounts PATH/* will unmount all mountpoints 
    under PATH in a container
  - Support for oci configuration files to specify when to run the plugin


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.3-1
changelog:
  - tweak initialization so that we set up for providing our D-Bus APIs before we
    register our names with the bus, so that we can handle any requests that
    arrive before the acknowledgement of that registration, which should make
    system activation a viable option


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.4-1
changelog:
  - when "prepend_user_name" is used, the user name is now added to the helper's
    command line after arguments that were specified in the helper "exec"
    attribute
  - resync with Fedora packaging


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.4-7
changelog:
  - Drop Python 2 build-time dependency, which hasn't been used since we turned
    off building the python bindings years ago (#1595853, #1642502).


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.5-1
changelog:
  - Upstream release 0.34.5
  - Resolves: rhbz#1833289 - Rebase oddjob to 0.34.5
  - Resolves: rhbz#1833052 - CVE-2020-10737 
    oddjob: race condition in oddjob_selinux_mkdir function in mkhomedir.c can lead to symlink attack


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-1
changelog:
  - Upstream release 0.34.7
  - Force LC_ALL=C.UTF-8 in oddjobd systemd service environment
  - Resolves: rhbz#1907481 - oddjob locale issue
  - Resolves: rhbz#1907541 - rebase oddjob to 0.34.7


author: Jan Friesse <jfriesse@redhat.com> - 0.0.4-15
changelog:
  - Modernize spec file a bit
  - Fix spec file changelog dates
  - Add gcc build requirement

  - Related rhbz#1682115


author: Craig Guiller <craig.guiller@oracle.com> - 6.8.2-2.1
changelog:
  - Fix CVE-2019-13224
    Resolves: RHEL-6970
  - Fix CVE-2019-16163
    Resolves: RHEL-9506
  - Fix CVE-2019-19012
    Resolves: RHEL-9511
  - Fix CVE-2019-19203
    Resolves: RHEL-9510
  - Fix CVE-2019-19204
    Resolves: RHEL-9509


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.2.0-3
changelog:
  - Patch for a Wayland related crash in the desktopEvents plugin (RHBZ#1526952).
  - gdk_set_allowed_backends() is available in version 3.10 and later only.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.2.5-1
changelog:
  - Package new upstream version open-vm-tools-10.2.5-8068406 (RHBZ#1431376).
  - Added use-tirpc.patch to use libtirpc instead of deprecated Sun RPC.
  - Removed wayland-crash.patch which is no longer needed.


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.3.0-1
changelog:
  - Rebase to 10.3.0 [bz#1626578]
  - Resolves: bz#1626578
    ([ESXi][RHEL8]Rebase open-vm-tools to 10.3.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.3.0-2.el8
changelog:
  - ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1660713]
  - Resolves: bz#1660713
    ([ESXi][RHEL8.0]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)


author: EL Errata <el-errata_ww@oracle.com> - 10.3.0-2.0.1
changelog:
  - Fix spaces in vmware udev rule for scsi devices
  - Orabug 24461968
  - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file.
  - Orabug 22815019
  - Increase timeout for scsi devices on VMWare guests by adding a udev rule.
  - Created a new file 99-vmware-scsi-timeout.rules
  - Modified spec file to install this new file.
  - Orabug 21819156


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.3.10-3
changelog:
  - ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1602648]
  - ovt-Fix-memory-leak-in-GetFormattedCommandLine-function-.patch [bz#1602648]
  - ovt-Fix-a-leak-if-VGAuth-setup-fails.-Coverity-issue.patch [bz#1602648]
  - ovt-Fix-minor-leak-in-FileRotateByRenumber-Coverity-scan.patch [bz#1602648]
  - ovt-Fix-memory-leak-in-SNEBuildHash-function.patch [bz#1602648]
  - ovt-Fix-Coverity-reported-issues-in-i18n.c-code-VMTools-.patch [bz#1602648]
  - ovt-Fix-a-memory-leak-in-the-unicode-library.patch [bz#1602648]
  - ovt-Fix-a-trivial-Coverity-reported-memory-leak-in-vgaut.patch [bz#1602648]
  - ovt-Fixes-for-few-leaks-and-improved-error-handling.patch [bz#1602648]
  - ovt-Fix-Coverity-reported-double-memory-free-errors.patch [bz#1602648]
  - ovt-Fix-a-trivial-Coverity-reported-memory-leak.patch [bz#1602648]
  - ovt-Fix-RH-Covscan-Coverity-reported-memory-leaks-in-too.patch [bz#1602648]
  - ovt-Fix-Using-uninitialized-value-issue-reported-by-Cove.patch [bz#1602648]
  - ovt-copyPasteCompatX11.c-code-generating-unnecessary-Cov.patch [bz#1602648]
  - ovt-Fix-a-Coverity-issue-reported-in-vgauth-serviceImpl-.patch [bz#1602648]
  - ovt-Fix-two-coverity-issues-reported-by-a-customer.patch [bz#1602648]
  - Resolves: bz#1602648
    ([ESXi][RHEL8]Please review important issues found by covscan in "open-vm-tools-10.2.5-2.el8+7" package)


author: Edward Leung <edward.leung@oracle.com> - 10.3.10-3.0.1
changelog:
  - Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968]
  - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019]
  - Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 21819156]


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.3.10-3.el8_1_0.1
changelog:
  - ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1773903]
  - ovt-End-VGAuth-impersonation-in-the-case-of-error2.patch [bz#1773903]
  - ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1773903]
  - Resolves: bz#1773903
    ([ESXi][RHEL8.0]Need to backport some severe memory leak fixes from upstream [rhel-8.1.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.0-1.el8
changelog:
  - Rebase to 11.0.0 [bz#1754658]
  - Resolves: bz#1754658
    (Rebase open-vm-tools to 11.0 for 8.2.0)
  - Resolves: bz#1760891
    (Need to backport some severe memory leak fixes from upstream)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.0-3.el8
changelog:
  - ovt-Address-Coverity-issues-reported-in-bora-lib-file-fi.patch [bz#1769881]
  - ovt-Fix-a-potential-NULL-pointer-dereference-in-the-vmba.patch [bz#1769881]
  - ovt-Address-two-Coverity-reported-issues-in-hostinfoPosi.patch [bz#1769881]
  - ovt-Fix-a-resource-leak-issue-in-deployPkg.patch [bz#1769881]
  - Resolves: bz#1769881
    ([ESXi][RHEL8.2]Important issues found by covscan in "open-vm-tools-11.0.0-2.el8" package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.0-4.el8
changelog:
  - ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1800812]
  - Resolves: bz#1800812
    ([ESXi][RHEL8]Log spew "[ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-1.el8
changelog:
  - Rebase to 11.0.5 (bz#1798285)
  - Resolves: bz#1798285
    ([ESXi][RHEL8.2.1]Rebase open-vm-tools to 11.0.5 for 8.2.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-3.el8
changelog:
  - ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1811729]
  - ovt-Update-copyright-to-reflect-previous-change.patch [bz#1811729]
  - ovt-add-appinfo-plugin.patch [bz#1809751]
  - Resolves: bz#1809751
    ([ESXi][RHEL8.2.1]open-vm-tools add appinfo plugin patch)
  - Resolves: bz#1811729
    ([ESXi][RHEL8.2.1]open-vm-tools coverity scan issue)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-3.el8
changelog:
  - [ESXi][RHEL8.2.1]open-vm-tools add appinfo plugin patch
  - [ESXi][RHEL8.2.1]open-vm-tools coverity scan issue


author: Mirosalv Rezanina <mrezanin@redhat.com> - 11.1.0-1.el8
changelog:
  - Rebase to 11.1.0 [bz#1806677]
  - Added open-vm-tools-sdmp package [bz#1833157)
  - Resolves: bz#1806677
    ([ESXi][RHEL8]Rebase open-vm-tools to 11.1.0 for RHEL 8.3)
  - Resolves: bz#1833157
    ([ESXi][RHEL8]Add new open-vm-tools-sdmp package for RHEL 8.3)


author: Miroslav Rezanina <mrezanin@redaht.com> - 11.1.0-2.el8
changelog:
  - Remove net-tools dependency [bz#1849459]
  - Resolves: bz#1849459
    ([ESXi][RHEL8]Incorporate SDMP related fixes and removal of net-tools dependency)


author: Miroslav Rezanina <mrezanin@redaht.com> - 11.1.5-1.el8
changelog:
  - Rebase to 11.1.5 [bz#1870781]
  - Resolves: bz#1870781
    ([ESXi][RHEL8]Rebase open-vm-tools to 11.1.5 for 8.4)


author: Miroslav Rezanina <mrezanin@redaht.com> - 11.2.0-1.el8
changelog:
  - Rebase to 11.2.0 [bz#1890831]
  - Resolves: bz#1890831
    ([ESXi][RHEL8]Rebase open-vm-tools to 11.2.0 for 8.4)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.0-2.el8
changelog:
  - ovt-Fix-memory-leaks.patch [bz#1896804]
  - Resolves: bz#1896804
    ([ESXi][open-vm-tools] Coverity detected important defects in open-vm-tools-11.2.0 rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-1.el8
changelog:
  - Rebase to 11.2.5 [bz#1916561]
  - Resolves: bz#1916561
    ([ESXi][RHEL8.5]Open-vm-tools update release 11.2.5 has been released)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-2.el8
changelog:
  - ovt-Fix-a-memory-leak-reported-by-a-partner-from-their-C.patch [bz#1935807]
  - Resolves: bz#1935807
    ([ESXi][RHEL-8.5][open-vm-tools] Coverity detected an important defect in open-vm-tools-11.2.5 rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-1.el8
changelog:
  - Rebase to 11.2.5 [bz#1916561]
    ([ESXi][RHEL8.5]Open-vm-tools update release 11.2.5 has been released)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.3.0-1.el8
changelog:
  - Rebase to open-vm-tools 11.3.0 [bz#1974468]
  - Resolves: bz#1974468
    ([ESXi][RHEL8]Open-vm-tools release 11.3.0 has been released - please rebase)


author: Miroslav Rezanian <mrezanin@redhat.com> - 11.3.5-1.el9
changelog:
  - Rebase to open-vm-tools 11.3.5 [bz#2008244]
  - Resolves: bz#2008244
    ([ESXi][RHEL8]Open-vm-tools release 11.3.5 has been released - please rebase)


author: Jon Maloy <jmaloy@redhat.com> - 11.3.5-1.el8_6.1
changelog:
  - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119283]
  - Resolves: bz#2119283
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-8.6.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.0-1
changelog:
  - Rebase to open-vm-tools 12.0.0 [bz#2061189]
  - Resolves: bz#2061189
    ([ESXi][RHEL8]Open-vm-tools release 12.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.5-1
changelog:
  - Rebase to open-vm-tools 12.0.5 [bz#2090273]
  - Resolves: bz#2090273
    ([ESXi][RHEL8]Open-vm-tools release 12.0.5 has been released - please rebase)


author: Jon Maloy <jmaloy@redhat.com> - 12.0.5-2
changelog:
  - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119284]
  - Resolves: bz#2119284
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-8.7.0])


author: Miroslav Rezanina <mrezanin@redhat.com> 12.1.0-1
changelog:
  - Rebase to open-vm-tools 12.1.0
  - Resolves: bz#2121196
    ([ESXi][RHEL8]Open-vm-tools release 12.1.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> 12.1.5-1
changelog:
  - Rebase to open-vm-tools 12.1.5 [bz#2150188]
  - Resolves: bz#2150188
    (ESXi][RHEL8]Open-vm-tools release 12.1.5 has been released - please rebase)


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 12.1.5-1.0.2
changelog:
  - [CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-1
changelog:
  - Rebase to open-vm-tools 12.2.0 [bz#2177068]
  - Resolves: bz#2177068
    ([ESXi][RHEL8]open-vm-tools version 12.2.0 has been released - please rebase)


author: Jon Maloy <jmaloy@redhat.com> - 12.2.0-3
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2215563]
  - Resolves: bz#2215563
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
changelog:
  - Rebase to open-vm-tools 12.2.5 [bz#2214861]
  - Resolves: bz#2214861
    ([ESXi][RHEL8]open-vm-tools version 12.2.5 has been released - please rebase)
  - Resolves: bz#2216415
    ([ESXi][RHEL8] URL in service unit files are started from http instead of https)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-2.el8_9
changelog:
  - ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [bz#2236543]
  - Resolves: bz#2236543
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 12.2.5-3.el8_9
changelog:
  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-2447]
  - Resolves: RHEL-2447
    ([RHEL8.9][ESXi]Latest version of open-vm-tools breaks VM backups)


author: Darren Archibald <darren.archibald@oracle.com> - 12.2.5-3.0.1.1
changelog:
  - Fix CVE-2023-34058 open-vm-tools: SAML token signature bypass
  - Fix CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3
changelog:
  - Rebuild CVE-2023-20900 for 8.10
  - Resolves: RHEL-4584
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-8.10.0])


author: Jon Maloy <jmaloy@redhat.com> - 12.2.5-4
changelog:
  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-7012]
  - Resolves: RHEL-7012
    ([RHEL8.10][ESXi]Latest version of open-vm-tools breaks VM backups)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-1
changelog:
  - Rebase to 12.3.5 [RHEL-15059]
  - Fix CVE-2023-34058 [RHEL-14649]
  - Fix CVE-2023-34059 [RHEL-14683]
  - Resolves: RHEL-15059
    ([ESXi][RHEL8]open-vm-tools version 12.3.5 has been released - please rebase)
  - Resolves: RHEL-14649
    (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-8.10.0])
  - Resolves: RHEL-14683
    (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-8.10.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
changelog:
  - ovt-Restart-tools-on-failure.patch [RHEL-17683]
  - Resolves: RHEL-17683
    (Add Restart=on-failure to vmtoolsd.service [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2.el8.1
changelog:
  - ovt-SDMP-Service-Discovery-Plugin.patch [RHEL-117388]
  - Resolves: RHEL-117388
    ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-8.10.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2.el8_10.2
changelog:
  - ovt-Validate-user-names-and-file-paths.patch [RHEL-129361]
  - Resolves: RHEL-129361
    (Backport of CVE-2025-22247 to 8.10)


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1.18.2-4
changelog:
  - remove support for no longer supported Fedora versions (<=25)
  - fix: add %{_libdir}/cmake/OpenAL directory to devel
  - fix: s/_datarootdir/_datadir/ as this package does not uses datarootdir
    but datadir
  - fix: add %{_datadir}/openal to main package as well and to %exclude
    %{_datadir}/openal/{alsoftrc.sample,presets/presets.txt} as those files
    are not needed
  - removed Group fields
    (https://fedoraproject.org/wiki/Packaging:Guidelines#Tags_and_Sections)
  - add use more macros (%autosetup, %make_build, %make_install)


author: Hans de Goede <hdegoede@redhat.com> - 1.18.2-5
changelog:
  - Allow pulseaudio to move openal-soft output streams (rhbz#1544381)
  - Fix release -4 not building (rhbz#1544012)
  - Drop unnecessary qt-devel BuildRequires (we also BuildRequire qt5-devel)


author: Nikola Forró <nforro@redhat.com> - 0.3.15-1
changelog:
  - Rebase to version 0.3.15
  - Use gcc-toolset-11 to benefit from POWER 10 optimizations
    resolves: #1983218


author: Nikola Forró <nforro@redhat.com> - 0.3.15-3
changelog:
  - Fix missing header files in openblas-devel subpackage by enabling
    gcc-toolset-11 in %install as well
    related: #1983218


author: Nikola Forró <nforro@redhat.com> - 0.2.20-12
changelog:
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Enable optimizations for all LAPACK sources
    resolves: #1624156


author: Nikola Forró <nforro@redhat.com> - 0.2.20-13
changelog:
  - Fix detection of generic ARMv8 CPUs
  - Get rid of executable stack in libRblas.so
    related: #1624156


author: Josef Ridky <jridky@redhat.com> - 3.4.1-1
changelog:
  - Spec clean up (remove Group tag, add ldconfig scriptlets, escape macros in comments)
  - Remove unused patch
  - Add gcc and gcc-c++ requirements
  - Rebase to version 3.4.1


author: Sérgio Basto <sergio@serjux.com> - 3.4.1-2
changelog:
  - Enable VA
  - Do not use -f on rm because it silences errors
  - Opencv sub-package don't need ldconfig because don't have any so


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-2
changelog:
  - fix cmakes location
  - remove -DENABLE_PKG_CONFIG=OFF (it was neither defined nor used)
  - remove confusing comment
  - WITH_GDAL=OFF (gdal dependency has been already removed)
    Related: #1694647


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-5
changelog:
  - Move libopencv_{calib3d,cvv,hfs}.so.* to their proper packages
  - Fix issues found by rpmdiff
    Related: #1694647


author: Paul Wouters <pwouters@redhat.com> - 1.4.7-2
changelog:
  - Resolves rhbz#1219746 ods-signerd.service misplaced After= in section Service
  - Resolves rhbz#1220443 OpenDNSSEC fails to initialise a slot in softhsm on first install


author: Paul Wouters <pwouters@redhat.com> - 1.4.9-3
changelog:
  - Resolves: rbz#1303965 upgrade to opendnssec-1.4.9-1.fc23 breaks old installations
  - On initial install, after token init, also run ods-ksmutil setup


author: Paul Wouters <pwouters@redhat.com> - 1.4.14-1
changelog:
  - Update to 1.4.14 as first steop to migrating to 2.x
  - Resolves: rhbz#1413254 Move tmpfiles.d config to %{_tmpfilesdir}, install LICENSE as %license


author: Nikola Forró <nforro@redhat.com> - 2.4.0-1
changelog:
  - Rebase to 2.4.0
  - Resolves: CVE-2018-5727 (#1538467)
  - Resolves: CVE-2018-5785 (#1538556)
  - Resolves: CVE-2018-20845 (#1730679)
  - Resolves: CVE-2018-20847 (#1734337)
  - Resolves: CVE-2019-12973 (#1739076)
  - Resolves: CVE-2020-15389 (#1855115)
  - Resolves: CVE-2020-27814 (#1908965)
  - Resolves: CVE-2020-27823 (#1906222)
  - Resolves: CVE-2020-27824 (#1906216)
  - Resolves: CVE-2020-27842 (#1908165)
  - Resolves: CVE-2020-27843 (#1908164)
  - Resolves: CVE-2020-27845 (#1908168)


author: Jarod Wilson <jarod@redhat.com> - 3.1.2-1
changelog:
  - Update to upstream 3.1.2 bug fix release
  - Fix some paths in module file, strip out python2 bits
  - Related: rhbz#1623441


author: Jarod Wilson <jarod@redhat.com> - 3.1.2-4
changelog:
  - Further tweaks to compile/linker flag usage
  - Related: rhbz#1624157
  - Move modulefiles under /etc like our other suppored mpi providers
  - Resolves: rhbz#1632399


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - fbtl-posix: link to common_ompio
  - Require environment(modules)
  - Revert upstream commit c36d7459b6331c4da82
  - Resolves: rhbz#1974780, rhbz#1971771


author: Matěj Týč <matyc@redhat.com> - 1.3.0-4
changelog:
  - Fixed a sudo regression in oscap-ssh.
  - Updated test to work with newer versions of procps.
  - Updated the man page.


author: Gabriel Becker <ggasparb@redhat.com> - 1.3.0-6
changelog:
  - Removed containers package as RHEL-8.0.0 will not support it.
  - Removed oscap-chroot binary and manpage from utils package as RHEL-8.0.0 will not support it.


author: Gabriel Becker <ggasparb@redhat.com> - 1.3.0-7
changelog:
  - Removed oscap-vm binary and manpage files from build as they will not be supported by RHEL-8.0.0.
  - Explicitly specify which files should be in openscap-utils subpackage.


author: Evgeny Kolesnikov <ekolesni@redhat.com> - 1.3.1-0
changelog:
  - Upgrade to the latest upstream release (rhbz#1718826)
  - Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation) (rhbz#1709429)
  - Tailoring files are included in ARF result files
  - Remote filesystems mounted using `autofs` direct maps are not recognized as local filesystems (rhbz#1655943)
  - Offline scan utilizing rpmverifyfile probe fails in fchdir and aborts (rhbz#1636431)


author: Jan Černý <jcerny@redhat.com> - 1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041781)
  - Select and exclude groups of rules on the command line
  - The boot-time remediation service for systemd's Offline Update mode


author: Jan Černý <jcerny@redhat.com> - 1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2111040)
  - Remove oscap-remediate service (rhbz#2111360)


author: Jan Černý <jcerny@redhat.com> - 1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159290)
  - Fix error when processing OVAL filters (rhbz#2126882)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2139060)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217441)
  - Add offline support for sysctl probe (rhbz#2185791)
  - Fix systemd* probes unit enumeration (rhbz#2219533)


author: Jan Černý <jcerny@redhat.com> - 1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-31221)
  - Add ability to define a limit of collected items (RHEL-11925)
  - Add option --references that can select rules based on their reference (RHEL-1479)


author: John McWalters <john.mcwalters@oracle.com> - 1.3.10-2.0.1
changelog:
  - Update the replacing URL for upstream reference [Orabug: 35478873]
  - Add oracle cpe names to internal cpe dictionary [Orabug: 33493979]
  - Add bug29870387-fix-redhat-reference.patch [Orabug: 29870387]


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1:1.3.12-1
changelog:
  - Upgrade to the latest upstream release (RHEL-88842)
  - Fix error when tailoring DISA content (RHEL-34104)
  - Fix OSCAP_PROBE_IGNORE_PATHS handling (RHEL-67297)


author: Matthew Burket <mburket@redhat.com> - 1.3.13-1
changelog:
  - Rebase to the latest upstream version (RHEL-133977)
  - Add note that oscap xccdf eval --local-file only works with SCAP 1.3 data streams (RHEL-74343)


author: Evgeny Kolesnikov <ekolesni@redhat.com> - 1.3.2-1
changelog:
  - Upgrade to the latest upstream release (rhbz#1778296)
  - Offline mode support for environmentvariable58 probe (rhbz#1493614)
  - The oscap-docker wrapper is available without Atomic
  - Improved support of multi-check rules (report, remediations, console output) (rhbz#1771438)
  - Improved HTML report look and feel, including printed version (rhbz#1640839)
  - Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels
  - Probe rpmverifyfile uses and returns canonical paths (rhbz#1776308)
  - Improved a11y of HTML reports and guides (rhbz#1767382)
  - Fixes and improvements for SWIG Python bindings (rhbz#1753603)
  - #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity)
  - Fixed URL link mechanism for Red Hat Errata
  - New STIG Viewer URI: public.cyber.mil
  - Probe selinuxsecuritycontext would not check if SELinux is enabled
  - Scanner would provide information about unsupported OVAL objects
  - Added more tests for offline mode (probes, remediation) (rhbz#1618489)
  - #528 fixed: Eval SCE script when /tmp is in mode noexec
  - #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage (rhbz#1636431)


author: Jan Černý <jcerny@redhat.com> - 1.3.2-7
changelog:
  - Fix segmentation fault in systemdunitdependency_probe (RHBZ#1793050)
  - Fix crash in textfilecontent probe (RHBZ#1686467)
  - Do not drop empty lines from Ansible remediations (RHBZ#1795563)
  - Fix oscap-ssh --sudo (RHBZ#1803116)
  - Remove useless warnings (RHBZ#1764139)


author: Evgeny Kolesnikov <ekolesni@redhat.com> - 1.3.3-1
changelog:
  - Upgrade to the latest upstream release (rhbz#1829761)
  - Added a Python script that can be used for CLI tailoring (autotailor)
  - Added timezone to XCCDF TestResult start/end time
  - Added yamlfilecontent independent probe (proposal/draft implementation)
  - Added ability to generate `machineconfig` fix
  - Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF
  - Fixed filepath pattern matching in offline mode in textfilecontent58 probe
  - Fixed #170: The rpmverifyfile probe can't verify files from '/bin' directory
  - Fixed #1512: Severity refinement lost in generated guide
  - Fixed #1453: Pointer lost in Swig API
  - The data system_info probe return for offline and online modes is consistent and actual
  - Evaluation Characteristics of the XCCDF report are now consistent with OVAL entities
    from system_info probe


author: Evgeny Kolesnikov <ekolesni@redhat.com> - 1.3.3-6
changelog:
  - Enable profile composition with a specific platform (RHBZ#1896676)
  - Enable YAML probe to work with sets of values (RHBZ#1895715)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.4-1
changelog:
  - Upgrade to the latest upstream release (RHBZ#1887794)
  - Treat GPFS as a remote file system (RHBZ#1840578, RHBZ#1840579)
  - Fixed the most problematic memory issues that were causing OOM situations
    for systems with large amount of files (RHBZ#1824152)
  - Proper handling of OVALs with circular dependencies between definitions (RHBZ#1812476)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.5-1
changelog:
  - Upgrade to the latest upstream release (RHBZ#1953092)
  - Fix segfault when using --stig-viewer option and latest XML file from DoD (RHBZ#1912000)
  - Improve doc about --stig-viewer (RHBZ#1918759)
  - Backport an upstream patch adding CentOS CPE (RHBZ#1907935)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.5-3
changelog:
  - Waive known issue with hugepages in upstream testsuite (RHBZ#1912000)
  - Fix issues reported by the coverity scan
  - Introduce OSBuild 'blueprint' fix type


author: Jan Černý <jcerny@redhat.com> - 1.3.5-8
changelog:
  - Allow local DS components (rhbz#1970529)
  - Fix hostname detection in offline scan of UBI 9 images (rhbz#1893888)
  - Add an alternative source of hostname (rhbz#1977668)
  - Fix oscap-chroot errors in process58_probe caused by empty /proc (rhbz#2008922)


author: Jan Černý <jcerny@redhat.com> - 1.3.5-9
changelog:
  - Lower memory limits and improve their checking (rhbz#2021851)
  - Remove timestamp from the user manual (rhbz#2022364)


author: Federico Ramírez <federico.r.ramirez@oracle.com> - 1.3.6-3.0.1
changelog:
  - Add bug29870387-fix-redhat-reference.patch [Orabug: 29870387]
  - Add oracle cpe names to internal cpe dictionary [Orabug: 33493979]


author: Federico Ramírez <federico.r.ramirez@oracle.com> - 1.3.6-4.0.1
changelog:
  - Add oracle cpe names to internal cpe dictionary [Orabug: 33493979]
  - Add bug29870387-fix-redhat-reference.patch [Orabug: 29870387]


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.0.0-15
changelog:
  - Removed dependency on net-tools
    Resolves: #1496138
  - Removed init script, Group tag and macro from changelog in spec file
  - Slightly modified openssl-1.1 fix to be able build the package
    with OpenSSL version lower than 1.1


author: Jakub Jelen <jjelen@redhat.com> - 7.7p1-1 + 0.10.3-4
changelog:
  - New upstream release (#1563223)
  - Add support for ECDSA keys in PKCS#11 (#1354510)
  - Add support for PKCS#11 URIs


author: Jakub Jelen <jjelen@redhat.com> - 7.7p1-6 + 0.10.3-4
changelog:
  - Fix listing of kex algoritms in FIPS mode
  - Allow aes-gcm cipher modes in FIPS mode
  - Coverity fixes


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-2 + 0.10.3-5
changelog:
  - New upstream release fixing CVE 2018-15473
  - Remove unused patches
  - Remove reference to unused enviornment variable SSH_USE_STRONG_RNG
  - Address coverity issues
  - Unbreak scp between two IPv6 hosts (#1620333)
  - Unbreak GSSAPI key exchange (#1624323)
  - Unbreak rekeying with GSSAPI key exchange (#1624344)


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-3 + 0.10.3-5
changelog:
  - Disable OpenSSH hardening flags and use the ones provided by system (#1630615)
  - Ignore unknown parts of PKCS#11 URI (#1631478)
  - Do not fail with GSSAPI enabled in match blocks (#1580017)
  - Fix the segfaulting cavs test (#1629692)


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-4 + 0.10.3-5
changelog:
  - Unbreak PKCS#11 URI tests (#1648262)
  - Allow to disable RSA signatures with SHA1 (#1648898)
  - Dump missing GSS options from client configuration (#1649505)
  - Minor fixes from Fedora related to GSSAPI and keberos
  - Follow the system-wide PATH settings


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-1 + 0.10.3-7
changelog:
  - New upstream release (#1691045)
  - Remove support for unused VendorPatchLevel configuration option
  - Fix kerberos cleanup procedures (#1683295)
  - Do not negotiate arbitrary primes with DH GEX in FIPS (#1685096)
  - Several GSSAPI key exchange improvements and sync with Debian
  - Allow to use labels in PKCS#11 URIs even if they do not match on private key (#1671262)
  - Do not fall back to sshd_net_t SELinux context (#1678695)
  - Use FIPS compliant high-level signature OpenSSL API and KDF
  - Mention crypto-policies in manual pages
  - Do not fail if non-FIPS approved algorithm is enabled in FIPS
  - Generate the PEM files in new PKCS#8 format without the need of MD5 (#1712436)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-2 + 0.10.3-7
changelog:
  - Allow specifying a pin-value in PKCS #11 URI in ssh-add (#1639698)
  - Whitelist another syscall variant for s390x cryptographic module (ibmca engine) (#1714915)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-3 + 0.10.3-7
changelog:
  - Fix typos in manual pages (#1668325)
  - Use the upstream support for PKCS#8 PEM files alongside with the legacy PEM files (#1712436)
  - Unbreak ssh-keygen -A in FIPS mode (#1732424)
  - Add missing RSA certificate types to offered hostkey types in FIPS mode (#1732449)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-5 + 0.10.3-7
changelog:
  - Do not print "no slots" warning by default (#1744220)
  - Unbreak connecting using gssapi through proxy commands (#1749862)
  - Document in manual pages that CASignatureAlgorithms are handled by crypto policies (#1790604)
  - Use SHA2-based signature algorithms by default for signing certificates (#1790610)
  - Prevent simple ProxyJump loops in configuration files (#1804099)
  - Teach ssh-keyscan to use SHA2 RSA variants (#1744108)
  - Do not fail hard if getrandom() is not available and no SSH_USE_STRONG_RNG is specified (#1812120)
  - Improve wording of crypto policies references in manual pages (#1812854)
  - Do not break X11 forwarding if IPv6 is disabled (#1662189)
  - Enable SHA2-based GSSAPI key exchange algorithms by default (#1816226)
  - Mark RDomain server configuration option unsupported in RHEL (#1807686)
  - Clarify crypto policies defaults in manual pages (#1724195)
  - Mention RSA SHA2 variants in ssh-keygen manual page (#1665900)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-7 + 0.10.3-7
changelog:
  - SFTP sort upon the modification time (#1909988)
  - ssh-keygen printing fingerprint issue with Windows keys (#1901518)
  - PIN is lost when iterating over tokens when adding pkcs11 keys to ssh-agent (#1843372)
  - ssh-agent segfaults during ssh-add -s pkcs11 (#1868996)
  - ssh-copy-id could not resolve ipv6 address ends with colon (#1933517)
  - sshd provides PAM an incorrect error code (#1879503)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-9
changelog:
  - CVE-2020-14145 openssh: Observable Discrepancy leading to an information
    leak in the algorithm negotiation (#1882252)
  - Hostbased ssh authentication fails if session ID contains a '/' (#1944125)


author: Zoltan Fridrich <zfridric@redhat.com> - 8.0p1-14
changelog:
  - Upstream: add a local implementation of BSD realpath() for sftp-server (#2064249)
  - Change product name from Fedora to RHEL in openssh-7.8p1-UsePAM-warning.patch (#1953807)
  - Include caveat for crypto-policy in sshd manpage (#2044354)
  - Change log level of FIPS specific log message to verbose (#2050511)
  - Clarify force_file_perms (-m) documentation in sftp-server manpage (#1862504)
  - Minimize the use of SHA1 as a proof of possession for RSA key (#2093897)


author: Dmitry Belyavskiy - 8.0p1-17
changelog:
  - Fix parsing of IPv6 IPs in sftp client (#2151334)
  - Avoid ssh banner one-byte overflow (#2138344)
  - Avoid crash of sshd when Include folder does not exist (#2133087)


author: Alan Steinberg <alan.steinberg@oracle.com> - 8.0p1-19.2
changelog:
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385
  - Fix Terrapin attack
    Resolves: CVE-2023-48795


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-20
changelog:
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-1684
  - Add comment to OpenSSH server config about FIPS-incompatible key
    Resolves: RHEL-5221
  - Avoid killing all processes on system in case of race condition
    Resolves: RHEL-11548
  - Avoid sshd_config 256K limit
    Resolves: RHEL-5279
  - Using DigestSign/DigestVerify functions for better FIPS compatibility
    Resolves: RHEL-5217
  - Fix GSS KEX causing ssh failures when connecting to WinSSHD
    Resolves: RHEL-5321


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-22
changelog:
  - Fix Terrapin attack
    Resolves: RHEL-19308
  - Forbid shell metasymbols in username/hostname
    Resolves: RHEL-19788


author: Antonio Vieiro <avieirov@redhat.com> - 8.0p1-26
changelog:
  - Fix missing invalid error code checks in OpenSSH. It prevents
    a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465)
    Resolves: RHEL-109228


author: Zoltan Fridrich <zfridric@redhat.com> - 8.0p1-27
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128400
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128390


author: Zoltan Fridrich <zfridric@redhat.com> - 8.0p1-28
changelog:
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155814


author: Vasundhara V <vasundhara.venkatasubramanian@oracle.com> [1.0-0.2.el8]
changelog:
  - Look for exact match in /etc/group [Orabug: 30106011]
   - Fix for picking the next available uid/gid [Orabug: 30108093]
   - Spec made modular 
   - Code moved to git


author: Vasundhara V <vasundhara.venkatasubramanian@oracle.com> [1.0-0.4.el8]
changelog:
  - Do not install on an EXADATA system [Orabug: 31230333]
   - Removed compat-openssl10, compat-libstdc++, compat-libcap1 and added openssl-libs, libnsl [Orabug: 29529333]


author: Vasundhara V <vasundhara.venkatasubramanian@oracle.com> [1.0-1.el8]
changelog:
  - BUILDINFO: commit=4c98123f6080dadb15bdade78a6b34829313a7e5
   - Update boot options when grubby is used with blscfg [Orabug: 31316405]


author: Vasundhara V <vasundhara.venkatasubramanian@oracle.com> [1.0-2.el8]
changelog:
  - BUILDINFO: commit=d095e60294c2dbaf49b3129446ddf210f736e537
   - Remove special characters from rpm metadata and added license file [Orabug: 32289949]
   - Remove Group from spec file [Orabug: 32289949]


author: Vasundhara V <vasundhara.venkatasubramanian@oracle.com> [1.0-0.2.el8]
changelog:
  - Run grub2-mkconfig when params are already present in /etc/default/grub [Orabug: 31926757]
   - Fix for change in default kernel during reboot [Orabug: 31926777]


author: Vasundhara V <vasundhara.venkatasubramanian@oracle.com> [1.0-1.el8]
changelog:
  - Added LICENSE file and modified description [Orabug: 32778727]
   - Fixed error during reinstall [Orabug: 32783735]


author: Vasundhara V <vasundhara.venkatasubramanian@oracle.com> [1.0-1.el8]
changelog:
  - Redirect output to logfile [Orabug: 35469223]
   - Remove libnsl from dependencies [Orabug: 35448960]
   - Add parameter kernel.panic [Orabug: 35172009]
   - Add fontconfig to the dependencies [ Orabug: 35577976]


author: Vasundhara V <vasundhara.venkatasubramanian@oracle.com> [1.0-2.el8]
changelog:
  - Use grubby for setting boot parameters [Orabug: 36487360]
   - Do not set /etc/sysconfig/network parameter for Database versions 23 and 19 [Orabug: 36519881]
   - Fix error in verify script [Orabug: 36454074]
   - Change name to 23ai [Orabug: 36434761]
   - Set transparent_hugepage to madvise [Orabug: 35978247]
   - Set ip_local_port_range to different polarity [Orabug 35580094]
   - Add systemd file for firstboot [Orabug: 35236424]


author: Vasundhara V <vasundhara.venkatasubramanian@oracle.com> [1.0-4.el8]
changelog:
  - Added minimum versions for some of the dependencies [Orabug: 37001816]
   - Added minimum versions for aarch64 [Orabug: 37187987]
   - Remove ethtool from dependencies [Orabug: 37222009]


author: Michael Mraka <michael.mraka@redhat.com> 5.11.99-1
changelog:
  - removed %%defattr from specfile
  - remove install/clean section initial cleanup
  - removed Group from specfile
  - removed BuildRoot from specfiles


author: Tomas Kasparek <tkasparek@redhat.com> 5.11.99-4
changelog:
  - remove osad files when packaging only for python3 (tkasparek@redhat.com)
  - osa-dispatcher is dependent on spacewalk-backend which is in python2
    (tkasparek@redhat.com)
  - run osa-dispatcher on python3 when possible (tkasparek@redhat.com)
  - don't build python2 subpackages on F28 + update python requires
    (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 5.11.99-6
changelog:
  - prefer to build for python3... (nils@redhat.com)
  - use %python2_* instead of unversioned macros (nils@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 5.11.99-7
changelog:
  - Resolves: #1607909 - remove TLSv1 hardcode and let client/server negotiate
    (tkasparek@redhat.com)


author: Christian Kellner <ckellner@redhat.com> - 12-1
changelog:
  - Sync with Fedora and use upstream release 12
  - Specify the exact version in the 'python3-osbuild' requirement
    to avoid the library and the main binary being out of sync.
  - osbuild-ostree sub-package with the necessary bits to create
    OSTree based images
  - Turn off dependency generator for internal components
  - Add NEWS.md file with the release notes and man pages


author: Christian Kellner <ckellner@redhat.com> - 14-1
changelog:
  - Upstream release 14
  - Install schemata to <datadir>/osbuild/schemas and include a
    symlink to it in /usr/lib/osbuild/schemas
  - The directories /usr/lib/osbuild/{assemblers, stages}/osbuild
    got removed. Changes to osbuild made them obsolete.


author: Christian Kellner <ckellner@redhat.com> - 14-2
changelog:
  - Add draft4-validator.json patch
    python3-jsonschema in RHEL currently has version 2.6.0 which
    has support validating up to and including draft4 of jsonschema.
    See https://github.com/osbuild/osbuild/pull/394


author: Christian Kellner <ckellner@redhat.com> - 15-2
changelog:
  - Add a patch to allow org.osbuild.files source in the new format
    but without actually containing the secrets key.
    Taken from merged PR: https://github.com/osbuild/osbuild/pull/416


author: Christian Kellner <ckellner@redhat.com> - 17-1
changelog:
  - Upstream release 17
  - Add custom SELinux policy that lets osbuild set labels inside
    the build root that are unknown to the host.


author: Christian Kellner <ckellner@redhat.com> - 18-2
changelog:
  - Add patch to not pass floats to curl in the files source
    https://github.com/osbuild/osbuild/pull/459


author: Christian Kellner <ckellner@redhat.com> - 18-3
changelog:
  - Add patch to allow nnp and nosuid domain transitions
    https://github.com/osbuild/osbuild/pull/495


author: Christian Kellner <ckellner@redhat.com> - 22-1
changelog:
  - Upstream release 22
  - Remove all patches since they are all in osbuild-22.
  - bubblewrap replaced systemd-nspawn for sandboxing; change the
    requirements accordingly.


author: Christian Kellner <ckellner@redhat.com> - 23-2
changelog:
  - Explicilty require python3. See the comment above the Requires
    for an explanation why this is needed.


author: Christian Kellner <ckellner@redhat.com> - 23-3
changelog:
  - only disable the dep. generator for runners, remove explicity
    python3 requirement again. The dependency should be picked up
    via the dependency generator now.


author: Christian Kellner <ckellner@redhat.com> - 25-1
changelog:
  - Upstream 25 release
  - First tech preview of the new manifest format. Includes
    various new stages and inputs to be able to build ostree
    commits contained in a oci archive.


author: Christian Kellner <ckellner@redhat.com> - 27-1
changelog:
  - Upstream release 27
  - Various bug fixes related to the new container and installer
    stages introdcued in version 25 and 26.


author: Martin Sehnoutka <msehnout@redhat.com> - 27.3-1
changelog:
  - Upstream release 27.3
  - New algorithm for getting RHSM secrets from the host system
    which supports multiple entitlements at the same time.


author: Christian Kellner <christian@kellner.me> - 30-1
changelog:
  - Upstream release 30
  - Ship osbuild-mpp in new tools sub-package.
  - Remove executable bit from schemata files.


author: Christian Kellner <gicmo@redhat.com> - 35-2
changelog:
  - Include patch for ostree.config stage to support the selection of
    the bootloader backend.
  - Include patch to fix a potential crash in the detection of rhsm
    secrets when 'redhat.repo' is missing.


author: EL Errata <el-errata_ww@oracle.com> - 101-1.0.1
changelog:
  * Mon Feb 26 2024 imagebuilder-bot <imagebuilder-bots+imagebuilder-bot@redhat.com> - 101-1
  - New upstream release


author: Alex Burmashev <alexander.burmashev@oracle.com> - 101-1.0.5
changelog:
  - Support using repository definitons with OCI variables [JIRA: OLDIS-38657]
  - Update repositories to contain OCI variables


author: EL Errata <el-errata_ww@oracle.com> - 101-3.0.1
changelog:
  - Rebuilt to fix:
    - CVE-2024-34156
    - CVE-2024-1394
    - RHEL-24303
    - RHEL-57905
  - Support using repository definitons with OCI variables [JIRA: OLDIS-38657]
  - Update repositories to contain OCI variables
  - Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123]
  - Increase default /boot size to 1GB [Orabug: 36827079]
  - support for building OL8/9 images on Oracle Linux 8 [Orabug: 36400619]


author: EL Errata <el-errata_ww@oracle.com> - 101.4-2.0.1
changelog:
  - Support using repository definitons with OCI variables [JIRA: OLDIS-38657]
  - Update repositories to contain OCI variables
  - Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123]
  - Increase default /boot size to 1GB [Orabug: 36827079]
  - support for building OL8/9 images on Oracle Linux 8 [Orabug: 36400619]


author: Ondrej Budai <obudai@redhat.com> - 17-1
changelog:
  - New upstream release 17 (rhbz#1831653)
  - Obsolete lorax-composer in favor of osbuild-composer (rhbz#1836844)


author: Alex Burmashev <alexander.burmashev@oracle.com> - 28.4-1.0.1
changelog:
  - Check distro ID in some distro specific code [Orabug: 32904486]
  - Check distro ID before executing subscription [Orabug: 32781623]
  - Add basic Oracle Linux support [Orabug: 31838591]


author: EL Errata <el-errata_ww@oracle.com> - 28.6-1.0.1
changelog:
  - Fix Oracle repositories GPG key [Orabug: 32913858]
  - Check distro ID in some distro specific code [Orabug: 32904486]
  - Check distro ID before executing subscription [Orabug: 32781623]
  - Add basic Oracle Linux support [Orabug: 31838591]


author: David Kubat <david.kubat@oracle.com> - 28.7-1.0.1
changelog:
  - Fix Oracle repositories GPG key [Orabug: 32913858]
  - Add basic Oracle Linux support [Orabug: 31838591]


author: EL Errata <el-errata_ww@oracle.com> - 33.2-1.0.1
changelog:
  - Add basic Oracle Linux support [Orabug: 32913858]
  - Check distro ID in some distro specific code [Orabug: 32904486]


author: EL Errata <el-errata_ww@oracle.com> - 46.1-1.0.1
changelog:
  - Install Oracle repositories [Orabug: 33566326]
  - Add basic Oracle Linux support [Orabug: 32913858]
  - Check distro ID in some distro specific code [Orabug: 32904486]


author: EL Errata <el-errata_ww@oracle.com> - 46.3-1.0.1
changelog:
  - Install Oracle repositories [Orabug: 33566326]
  - Add basic Oracle Linux support [Orabug: 32913858]


author: Matěj Týč <matyc@redhat.com> - 1.0-7
changelog:
  - Fixed bootloader-related Anaconda API usage: RHBZ#1664036
  - Fixed root password-related Anaconda API usage: RHBZ#1665551
  - Fixed checksum-related Python2->3 issue: RHBZ#1665147


author: Matěj Týč <matyc@redhat.com> - 1.1.1-1
changelog:
  - Rebase to upstream 1.1.1
  - This OAA is compatible with the RHEL 8.3 Anaconda: RHBZ#1696278
  - The UX has been improved: RHBZ#1781790


author: Matěj Týč <matyc@redhat.com> - 1.1.1-2
changelog:
  - Fixed issues addressing combination of profiles and GUI-based software selections: RHBZ#1843932, RHBZ#1787156
  - Improved handling of languages, capitalization: RHBZ#1696278
  - Updated translations: RHBZ#1820557


author: Matej Tyc <matyc@redhat.com> - 1.1.1-6
changelog:
  - Improved handling of conflicts between packages removed vs software wanted to be installed - rhbz#1892310


author: Matej Tyc <matyc@redhat.com> - 1.2.1-6
changelog:
  - Introduce the firstboot remediation
    Resolves: rhbz#1834716
  - Add better error handling of installation using unsupported installation sources
    Resolves: rhbz#2007981


author: Matej Tyc <matyc@redhat.com> - 1.2.1-7
changelog:
  - Remove the firstboot remediation feature completely.
    We can't have it, while maintaining the standard UX.
    Resolves: rhbz#2063179


author: Matej Tyc <matyc@redhat.com> - 1.2.1-9
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129008
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2000998


author: Fabiano Fidêncio <fidencio@redhat.com> - 20181011-3
changelog:
  - Resolves: rhbz#1644738 - Latest released Fedora 29 support in RHEL8 instead
                             of Fedora 29 Beta


author: Fabiano Fidêncio <fidencio@redhat.com> - 20181011-7
changelog:
  - Resolves: rhbz#1650197 - Fix the volume-ids of rhel8.0 entry
  - Resolves: rhbz#1650459 - test-mediauris is failing because of ubuntu change
  - Related: rhbz#1580232 - Add support to RHEL7.6 and RHEL8.0


author: Fabiano Fidêncio <fidencio@redhat.com> - 20181011-8.1
changelog:
  - Resolves: rhbz#1714755 - rhel-8.0.x is not detected as rhel-8.0
  - Resolves: rhbz#1714748 - Add win2019 to libosinfo


author: Jingdong Lu <jingdong.lu@oracle.com> - 20181011-8.0.1.1
changelog:
  - Sync oracle files with upstream and convert xml.in to xml [Orabug: 29855750]
  - add ol5 ol6 ol7 os type [Orabug: 27932947]
  - osinfo-query command error with OL7U5 [Orabug: 27700001]
  - Update OL7U5 osinfo-db to add OL7U5 release support [Orabug: 27700063]
  - add ol7.4 os info [Orabug: 27175558]
  - Update Oracle Linux OS info [Orabug: 26135475]
  - Add Oracle Linux OS info [Orabug: 18501468]
  - Pack ol.xml into tarball [Orabug: 20410527]
  - Update libosinfo to add all Oracle linux OS release/updates information [Orabug: 26135475]


author: Livy Ge <livy.ge@oracle.com> - 20181011-8.0.1
changelog:
  - add ol5 ol6 ol7 os type [Orabug: 27932947]
  - osinfo-query command error with OL7U5 [Orabug: 27700001]
  - Update OL7U5 osinfo-db to add OL7U5 release support [Orabug: 27700063]
  - add ol7.4 os info [Orabug: 27175558]
  - Update Oracle Linux OS info [Orabug: 26135475]
  - Add Oracle Linux OS info [Orabug: 18501468]
  - Pack ol.xml into tarball [Orabug: 20410527]
  - Update libosinfo to add all Oracle linux OS release/updates information [Orabug: 26135475]


author: Fabiano Fidêncio <fidencio@redhat.com> - 20190504-1
changelog:
  - Update to v20190504 release
  - Resolves: rhbz#1699990 - Rebase to the latest upstream release
  - Resolves: rhbz#1689817 - virt-manager cannot detect operating system name
                             for rhel8.0.0 tree automatically
  - Resolves: rhbz#1703480 - rhel8.0.x is not detected as rhel8.0
  - Resolves: rhbz#1685364 - Add win2019 to libosinfo


author: Fabiano Fidêncio <fidencio@redhat.com> - 20191125-1
changelog:
  - Updated to v20191125 release
  - Resolves: rhbz#1780529 - Update to the latest upstream release
  - Add rhel8.2 & rhel7.8 entries
  - Remove upstream virtio-win / spice-guest-tools drivers


author: EL Errata <el-errata_ww@oracle.com> - 20200203-1.0.1.el8
changelog:
  - Add OL7.8 record [Orabug: 31142227]
  - osinfo-db should include OL8.2 OL version [Orabug: 30962397]
  - add extra oracle osinfo files since upstream include others [Orabug: 30294515]
  - Sync oracle files with upstream and convert xml.in to xml [Orabug: 29855750]
  - add ol5 ol6 ol7 os type [Orabug: 27932947]
  - osinfo-query command error with OL7U5 [Orabug: 27700001]
  - Update OL7U5 osinfo-db to add OL7U5 release support [Orabug: 27700063]
  - add ol7.4 os info [Orabug: 27175558]
  - Update Oracle Linux OS info [Orabug: 26135475]
  - Add Oracle Linux OS info [Orabug: 18501468]
  - Pack ol.xml into tarball [Orabug: 20410527]
  - Update libosinfo to add all Oracle linux OS release/updates information [Orabug: 26135475]


author: Fabiano Fidêncio <fidencio@redhat.com> - 20200529-1
changelog:
  - Update to v20200529 release
  - Resolves: rhbz#1837756 - osinfo-db is out of date
  - Resolves: rhbz#1707119 - Provide information about UEFI support for guests (osinfo-db)


author: Fabiano Fidêncio <fidencio@redhat.com> - 20200813-1
changelog:
  - Update to v20200813 release
  - Related: rhbz#1837756 - osinfo-db is out of date
  - Resolves: rhbz#1868030 - 'osinfo-query os' is missing latest version of Ubuntu and Oracle Linux


author: EL Errata <el-errata_ww@oracle.com> - 20200813-1.0.1
changelog:
  - Include links to Oracle 8.3 iso images to xml files [Orabug: 32013221]
  - Add OL7.8 record [Orabug: 31142227]
  - osinfo-db should include OL8.2 OL version [Orabug: 30962397]
  - add extra oracle osinfo files since upstream include others [Orabug: 30294515]
  - Sync oracle files with upstream and convert xml.in to xml [Orabug: 29855750]
  - add ol5 ol6 ol7 os type [Orabug: 27932947]
  - osinfo-query command error with OL7U5 [Orabug: 27700001]
  - Update OL7U5 osinfo-db to add OL7U5 release support [Orabug: 27700063]
  - add ol7.4 os info [Orabug: 27175558]
  - Update Oracle Linux OS info [Orabug: 26135475]
  - Add Oracle Linux OS info [Orabug: 18501468]
  - Pack ol.xml into tarball [Orabug: 20410527]
  - Update libosinfo to add all Oracle linux OS release/updates information [Orabug: 26135475]
  - Remove old OL support from 0010-add-oracle-extra-osinfo.patch


author: EL Errata <el-errata_ww@oracle.com> - 20210215-1.0.1
changelog:
  - Include 8.4 record and links to Oracle 8.4 iso images in xml files
  - Include links to Oracle 8.3 iso images to xml files [Orabug: 32013221]
  - Add OL7.8 record [Orabug: 31142227]
  - osinfo-db should include OL8.2 OL version [Orabug: 30962397]
  - add extra oracle osinfo files since upstream include others [Orabug: 30294515]
  - Sync oracle files with upstream and convert xml.in to xml [Orabug: 29855750]
  - add ol5 ol6 ol7 os type [Orabug: 27932947]
  - osinfo-query command error with OL7U5 [Orabug: 27700001]
  - Update OL7U5 osinfo-db to add OL7U5 release support [Orabug: 27700063]
  - add ol7.4 os info [Orabug: 27175558]
  - Update Oracle Linux OS info [Orabug: 26135475]
  - Add Oracle Linux OS info [Orabug: 18501468]
  - Pack ol.xml into tarball [Orabug: 20410527]
  - Update libosinfo to add all Oracle linux OS release/updates information [Orabug: 26135475]
  - Remove old OL support from 0010-add-oracle-extra-osinfo.patch


author: Alex Burmashev <alexander.burmashev@oracle.com> 20210215-1.0.2
changelog:
  - Supply additional Oracle entries by a special tarball [Orabug: 32804816]
  - Add netinst Oracle entries for 8.3 and 8.4 [Orabug: 32804816]


author: EL Errata <el-errata_ww@oracle.com> - 20210903-1.0.1
changelog:
  - Include 8.5 record and links to Oracle 8.5 iso images in xml files
  - Supply additional Oracle entries by a special tarball [Orabug: 32804816]
  - Add netinst Oracle entries for 8.3 and 8.4 [Orabug: 32804816]
  - Include 8.4 record and links to Oracle 8.4 iso images in xml files
  - Include links to Oracle 8.3 iso images to xml files [Orabug: 32013221]
  - Add OL7.8 record [Orabug: 31142227]
  - osinfo-db should include OL8.2 OL version [Orabug: 30962397]
  - add extra oracle osinfo files since upstream include others [Orabug: 30294515]
  - Sync oracle files with upstream and convert xml.in to xml [Orabug: 29855750]
  - add ol5 ol6 ol7 os type [Orabug: 27932947]
  - osinfo-query command error with OL7U5 [Orabug: 27700001]
  - Update OL7U5 osinfo-db to add OL7U5 release support [Orabug: 27700063]
  - add ol7.4 os info [Orabug: 27175558]
  - Update Oracle Linux OS info [Orabug: 26135475]
  - Add Oracle Linux OS info [Orabug: 18501468]
  - Pack ol.xml into tarball [Orabug: 20410527]
  - Update libosinfo to add all Oracle linux OS release/updates information [Orabug: 26135475]
  - Remove old OL support from 0010-add-oracle-extra-osinfo.patch


author: Alan Steinberg <alan.steinberg@oracle.com> - 20211216-1.0.1
changelog:
  - Include 8.6 record and links to Oracle 8.6 iso images in xml files [Orabug: 33858810]
  - Include 8.5 record and links to Oracle 8.5 iso images in xml files
  - Supply additional Oracle entries by a special tarball [Orabug: 32804816]
  - Add netinst Oracle entries for 8.3 and 8.4 [Orabug: 32804816]
  - Include 8.4 record and links to Oracle 8.4 iso images in xml files
  - Include links to Oracle 8.3 iso images to xml files [Orabug: 32013221]
  - Add OL7.8 record [Orabug: 31142227]
  - osinfo-db should include OL8.2 OL version [Orabug: 30962397]
  - add extra oracle osinfo files since upstream include others [Orabug: 30294515]
  - Sync oracle files with upstream and convert xml.in to xml [Orabug: 29855750]
  - add ol5 ol6 ol7 os type [Orabug: 27932947]
  - osinfo-query command error with OL7U5 [Orabug: 27700001]
  - Update OL7U5 osinfo-db to add OL7U5 release support [Orabug: 27700063]
  - add ol7.4 os info [Orabug: 27175558]
  - Update Oracle Linux OS info [Orabug: 26135475]
  - Add Oracle Linux OS info [Orabug: 18501468]
  - Pack ol.xml into tarball [Orabug: 20410527]
  - Update libosinfo to add all Oracle linux OS release/updates information [Orabug: 26135475]


author: John Mcwalters <john.mcwalters@oracle.com> - 20220727-2.0.1
changelog:
  - Include 8.7 record and links to Oracle 8.7 iso images in xml files
  - Include 8.6 record and links to Oracle 8.6 iso images in xml files [Orabug: 33858810]
  - Include 8.5 record and links to Oracle 8.5 iso images in xml files
  - Supply additional Oracle entries by a special tarball [Orabug: 32804816]
  - Add netinst Oracle entries for 8.3 and 8.4 [Orabug: 32804816]
  - Include 8.4 record and links to Oracle 8.4 iso images in xml files
  - Include links to Oracle 8.3 iso images to xml files [Orabug: 32013221]
  - Add OL7.8 record [Orabug: 31142227]
  - osinfo-db should include OL8.2 OL version [Orabug: 30962397]
  - add extra oracle osinfo files since upstream include others [Orabug: 30294515]
  - Sync oracle files with upstream and convert xml.in to xml [Orabug: 29855750]
  - add ol5 ol6 ol7 os type [Orabug: 27932947]
  - osinfo-query command error with OL7U5 [Orabug: 27700001]
  - Update OL7U5 osinfo-db to add OL7U5 release support [Orabug: 27700063]
  - add ol7.4 os info [Orabug: 27175558]
  - Update Oracle Linux OS info [Orabug: 26135475]
  - Add Oracle Linux OS info [Orabug: 18501468]
  - Pack ol.xml into tarball [Orabug: 20410527]
  - Update libosinfo to add all Oracle linux OS release/updates information [Orabug: 26135475]


author: John Mcwalters <john.mcwalters@oracle.com> - 20220727-2.0.2
changelog:
  - Include 8.8 record and links to Oracle 8.8 iso images in xml files
  - Include 9.2 record and links to Oracle 9.2 iso images in xml files
  - Backport xml file changes from 20221130


author: EL Errata <el-errata_ww@oracle.com> - 20230518-1.0.1
changelog:
  - virt-install fails with index out of range [Orabug: 35273511]
  - Include 8.8 record and links to Oracle 8.8 iso images in xml files
  - Include 9.2 record and links to Oracle 9.2 iso images in xml files
  - Backport xml file changes from 20221130
  - Include 8.7 record and links to Oracle 8.7 iso images in xml files
  - Include 8.6 record and links to Oracle 8.6 iso images in xml files [Orabug: 33858810]
  - Include 8.5 record and links to Oracle 8.5 iso images in xml files
  - Supply additional Oracle entries by a special tarball [Orabug: 32804816]
  - Add netinst Oracle entries for 8.3 and 8.4 [Orabug: 32804816]
  - Include 8.4 record and links to Oracle 8.4 iso images in xml files
  - Include links to Oracle 8.3 iso images to xml files [Orabug: 32013221]
  - Add OL7.8 record [Orabug: 31142227]
  - osinfo-db should include OL8.2 OL version [Orabug: 30962397]
  - add extra oracle osinfo files since upstream include others [Orabug: 30294515]
  - Sync oracle files with upstream and convert xml.in to xml [Orabug: 29855750]
  - add ol5 ol6 ol7 os type [Orabug: 27932947]
  - osinfo-query command error with OL7U5 [Orabug: 27700001]
  - Update OL7U5 osinfo-db to add OL7U5 release support [Orabug: 27700063]
  - add ol7.4 os info [Orabug: 27175558]
  - Update Oracle Linux OS info [Orabug: 26135475]
  - Add Oracle Linux OS info [Orabug: 18501468]
  - Pack ol.xml into tarball [Orabug: 20410527]
  - Update libosinfo to add all Oracle linux OS release/updates information [Orabug: 26135475]


author: Sam Booth <sam.booth@oracle.com> - 20230518-1.0.2
changelog:
  - Add inclusion of Oracle Linux xml entries [Orabug: 35979249]
  - Update the Oracle osinfo tar source


author: Shaleen Bathla <shaleen.bathla@oracle.com> - 20230518-1.0.3
changelog:
  - add treeinfo and more data for os/oracle data [Orabug: 35661098]
  - spec change to use patch instead of tar
  - add ol9-unknown to autodetect future ol9 versions


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 20250606-1.0.1
changelog:
  - Fix invalid reference in os oracle.com/ol/9.5.xml [Orabug: 37315406]
  - Add OL9.5 data [Orabug: 37315406]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-2
changelog:
  - Resolves: rhbz#1681879 - osinfo-db-tools changes blocked until gating
                             tests are added


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1712426 - New defects found in
                             osinfo-db-tools-1.5.0-2.el8


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-4
changelog:
  - Related: rhbz#1712426 - New defects found in
                            osinfo-db-tools-1.5.0-2.el8


author: Sinny Kumari <ksinny@gmail.com> - 2019.1-3
changelog:
  - Backport patch to fix bare → bare imports
  - Backport patch to Set xattr on correct fd for bare-user → bare-user imports


author: Colin Walters <walters@verbum.org> - 2020.4-1
changelog:
  - https://github.com/ostreedev/ostree/releases/tag/v2020.4
  - We plan to use per-object-fsync for etcd in OpenShift 4
  - Resolves: #1861507


author: Colin Walters <walters@verbum.org> - 2020.5-2
changelog:
  - Update to https://github.com/ostreedev/ostree/releases/tag/v2020.5
    Specifically to fix readonly-sysroot for e.g. RHEL Edge and
    older RHCOS versions
  - Related: #1861507


author: Colin Walters <walters@verbum.org> - 2020.5-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/2179/commits/06ed04a816141914adb9bd3e32392801fce5bc8e
    Resolves: #1867601


author: Luca BRUNO <lucab@redhat.com> - 2021.3-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2021.3
    Resolves: rhbz#1981865


author: Colin Walters <walters@verbum.org> - 2021.3-2
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/2453/commits/e6a560b40797324aa8b90e7100c6d50bff91f14d
    Resolves: rhbz#2029578


author: Colin Walters <walters@verbum.org> - 2021.3-2
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/2453/commits/e6a560b40797324aa8b90e7100c6d50bff91f14d
    Resolves: rhbz#2027788


author: Luca BRUNO <lucab@redhat.com> - 2022.2-5
changelog:
  - Backport enablement patches for Secure Execution on s390x
    https://github.com/ostreedev/ostree/pull/2694
    Resolves: rhbz#2120522
  - Backport security fix to verify signatures are minimum length (advisory GHSA-gqf4-p3gv-g8vw)
    https://github.com/ostreedev/ostree/pull/2696
    Resolves: rhbz#2119444


author: Colin Walters <walters@verbum.org> - 2022.2-6
changelog:
  - Backport https://github.com/ostreedev/ostree/commit/0085494e350c72599fc5c0e00422885d80b3c660
  - Resolves: rhbz#2134629


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 2022.2-7
changelog:
  - Backport https://github.com/ostreedev/ostree/pull/2874/commits/de6fddc6adee09a93901243dc7074090828a1912
    Resolves: rhbz#2224107


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2022.2-8
changelog:
  - Backport for https://github.com/ostreedev/ostree/commit/7f70614a1ac1950ebde3df0e26cc9ab1d72b2f1f
  - Resolves: rhbz#2229895


author: Pravin Satute <psatute AT redhat DOT com> - 2.1-1
changelog:
  - Upstream new release with ttfautohint
  - Changed url to https://github.com/RedHatBrand/overpass/, https://overpassfont.org looks dead.


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.0-7
changelog:
  - Include upstream master branch commits through 975347d4
  - Resolves: rhbz#1543494
  - Resolves: rhbz#1602650
  - Resolves: rhbz#1608369


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.0-8
changelog:
  - Rebase on upstream commit dd6fd26f77945b9bb100d5a3134f149b27601552
  - Fixes (unreleased) API regression
  - Resolves: rhbz#1543494
  - Resolves: rhbz#1622969


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.0-9
changelog:
  - Rebase on upstream commit c4330b46bf1c3dcd3e367b436efb3bbf82ef51cd
  - Support podman as bundle container launcher
  - Ignore fence history in crm_mon when using CIB_file
  - Resolves: rhbz#1543494
  - Resolves: rhbz#1607898
  - Resolves: rhbz#1625231


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.0-10
changelog:
  - Rebase on upstream commit b67d8d0de9794e59719608d9b156b4a3c6556344
  - Update spec for Python macro changes
  - Resolves: rhbz#1543494
  - Resolves: rhbz#1633612


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.1-1
changelog:
  - Rebase on upstream commit 0eb799156489376e13fb79dca47ea9160e9d4595 (Pacemaker-2.0.1-rc1)
  - Follow upstream change of splitting XML schemas into separate package
  - Resolves: rhbz#1543494


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.1-2
changelog:
  - Move pacemaker-doc installed files to /usr/share/doc/pacemaker-doc
    to avoid conflict with RHEL 8 location of pacemaker subpackage docs
  - Resolves: rhbz#1543494


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.1-4.1
changelog:
  - Improve clients' authentication of IPC servers (CVE-2018-16877)
  - Fix use-after-free with potential information disclosure (CVE-2019-3885)
  - Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
  - Restore correct behavior when live migration is interrupted
  - Resolves: rhbz#1694557
  - Resolves: rhbz#1695247
  - Resolves: rhbz#1697264
  - Resolves: rhbz#1697265


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.1-4.2
changelog:
  - New build to apply z-stream tag
  - Resolves: rhbz#1694557
  - Resolves: rhbz#1695247
  - Resolves: rhbz#1697264
  - Resolves: rhbz#1697265


author: Klaus Wenninger <kwenning@redhat.com> - 2.0.1-4.3
changelog:
  - New build with fixed test in gating.yaml
  - Resolves: rhbz#1694557
  - Resolves: rhbz#1695247
  - Resolves: rhbz#1697264
  - Resolves: rhbz#1697265


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.1-5
changelog:
  - Add gating tests for CI
  - Restore correct behavior when live migration is interrupted
  - Improve clients' authentication of IPC servers (CVE-2018-16877)
  - Fix use-after-free with potential information disclosure (CVE-2019-3885)
  - Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
  - Resolves: rhbz#1682116
  - Resolves: rhbz#1684306
  - Resolves: rhbz#1694558
  - Resolves: rhbz#1694560
  - Resolves: rhbz#1694908


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.2-1
changelog:
  - Add stonith_admin option to display XML output
  - Add new crm_rule tool to check date/time rules
  - List any constraints cleared by crm_resource --clear
  - crm_resource --validate can now get resource parameters from command line
  - Rebase on upstream version 2.0.2
  - Default concurrent-fencing to true
  - Resolves: rhbz#1555939
  - Resolves: rhbz#1572116
  - Resolves: rhbz#1631752
  - Resolves: rhbz#1637020
  - Resolves: rhbz#1695737
  - Resolves: rhbz#1715426


author: Klaus Wenninger <kwenning@redhat.com> - 2.0.2-2
changelog:
  - Synchronize fence-history on fenced-restart
  - Cleanup leftover pending-fence-actions when fenced is restarted
  - Improve fencing of remote-nodes
  - Resolves: rhbz#1708380
  - Resolves: rhbz#1708378
  - Resolves: rhbz#1721198
  - Resolves: rhbz#1695737


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.3-1
changelog:
  - Rebase on Pacemaker-2.0.3-rc2
  - Parse crm_mon --fence-history option correctly
  - Put timeout on controller waiting for scheduler response
  - Offer Pacemaker Remote option for bind address
  - Calculate cluster recheck interval dynamically
  - Clarify crm_resource help text
  - Reduce system calls after forking a child process
  - Resolves: rhbz1699978
  - Resolves: rhbz1725236
  - Resolves: rhbz1743377
  - Resolves: rhbz1747553
  - Resolves: rhbz1748805
  - Resolves: rhbz1752538
  - Resolves: rhbz1762025


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.4-1
changelog:
  - Clear leaving node's attributes if there is no DC
  - Add crm_mon --node option to limit display to particular node or tagged nodes
  - Add crm_mon --include/--exclude options to select what sections are shown
  - priority-fencing-delay option bases delay on where resources are active
  - Pending DC fencing gets 'stuck' in status display
  - crm_rule can now check rule expiration when "years" is specified
  - crm_mon now formats error messages better
  - Support for CIB secrets is enabled
  - Rebase on latest upstream Pacemaker release
  - Fix regression introduced in 8.2 so crm_node -n works on remote nodes
  - Avoid infinite loop when topology is removed while unfencing is in progress
  - Resolves: rhbz1300604
  - Resolves: rhbz1363907
  - Resolves: rhbz1784601
  - Resolves: rhbz1787751
  - Resolves: rhbz1790591
  - Resolves: rhbz1793653
  - Resolves: rhbz1793860
  - Resolves: rhbz1828488
  - Resolves: rhbz1830535
  - Resolves: rhbz1831775


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.4-3
changelog:
  - Allow resource and operation defaults per resource or operation type
  - Rebase on upstream 2.0.4 final release
  - Support on-fail="demote" and no-quorum-policy="demote" options
  - Remove incorrect comment from sysconfig file
  - Resolves: rhbz1628701
  - Resolves: rhbz1828488
  - Resolves: rhbz1837747
  - Resolves: rhbz1848789


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.4-4
changelog:
  - Allow crm_node -l/-p options to work from Pacemaker Remote nodes
  - Correct action timeout value listed in log message
  - Fix regression in crm_mon --daemonize with HTML output
  - Resolves: rhbz1796824
  - Resolves: rhbz1856035
  - Resolves: rhbz1857728


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.4-6.2
changelog:
  - Avoid situation where promotion is not scheduled until next transition
  - Avoid pcs failures when Pacemaker records negative call ID in history
  - Resolves: rhbz1935240
  - Resolves: rhbz1939533


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.5-1
changelog:
  - crm_mon --resource option to filter output by resource
  - Avoid filling /dev/shm after frequent corosync errors
  - Allow configurable permissions for log files
  - Ensure ACL write permission always supersedes read
  - Use fence device monitor timeout for starts and probes
  - Allow type="integer" in rule expressions
  - Avoid error messages when running crm_node inside bundles
  - Avoid situation where promotion is not scheduled until next transition
  - crm_mon should show more clearly when an entire group is disabled
  - Rebase on upstream 2.0.5-rc1 release
  - Resolves: rhbz1300597
  - Resolves: rhbz1614166
  - Resolves: rhbz1647136
  - Resolves: rhbz1833173
  - Resolves: rhbz1856015
  - Resolves: rhbz1866573
  - Resolves: rhbz1874391
  - Resolves: rhbz1835717
  - Resolves: rhbz1748139
  - Resolves: rhbz1885645


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.5-2
changelog:
  - Rebase on upstream 2.0.5-rc2 release
  - Prevent ACL bypass (CVE-2020-25654)
  - Resolves: rhbz1885645
  - Resolves: rhbz1889582


author: Klaus Wenninger <kwenning@redhat.com> - 2.0.5-4
changelog:
  - Rebase on upstream 2.0.5 release
  - Make waiting to be pinged by sbd via pacemakerd-api the default
  - Resolves: rhbz1885645
  - Resolves: rhbz1873138


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.5-5
changelog:
  - Allow non-critical resources that stop rather than make another resource move
  - Support crm_resource --digests option for showing operation digests
  - Clean-up of all resources should work from remote nodes
  - Resolves: rhbz1371576
  - Resolves: rhbz1872376
  - Resolves: rhbz1907726


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.5-6
changelog:
  - crm_mon --daemonize should reconnect if cluster restarts
  - crm_mon should show more informative messages when cluster is starting
  - crm_mon should show rest of status if fencing history is unavailable
  - cibsecret now works on remote nodes (as long as name can be reached via ssh)
  - Stop remote nodes correctly when connection history is later than node history
  - Resolves: rhbz1466875
  - Resolves: rhbz1872490
  - Resolves: rhbz1880426
  - Resolves: rhbz1881537
  - Resolves: rhbz1898457


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.5-9.1
changelog:
  - Fix regression in crm_mon during cluster shutdown that affects ocf:heartbeat:pgsql agent
  - Resolves: rhbz1951098


author: Klaus Wenninger <kwenning@redhat.com> - 2.0.5-9.3
changelog:
  - retry fence-agent metadata
  - assure transient attributes of lost node are cleared
  - added configurable watchdog-fencing feature
  - Resolves: rhbz1992014
  - Resolves: rhbz1989622
  - Resolves: rhbz1993891


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-1
changelog:
  - Add crm_simulate --show-attrs and --show-failcounts options
  - Retry getting fence agent meta-data after initial failure
  - Add debug option for more verbose ocf:pacemaker:ping logs
  - Rebase on upstream 2.1.0-rc2 release
  - Support OCF Resource Agent API 1.1 standard
  - Fix crm_mon regression that could cause certain agents to fail at shutdown
  - Allow setting OCF check level for crm_resource --validate and --force-check
  - Resolves: rhbz1686426
  - Resolves: rhbz1797579
  - Resolves: rhbz1843177
  - Resolves: rhbz1935464
  - Resolves: rhbz1936696
  - Resolves: rhbz1948620
  - Resolves: rhbz1955792


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-2
changelog:
  - Rebase on upstream 2.1.0 final release
  - Correct schema for crm_resource XML output
  - Resolves: rhbz1935464
  - Resolves: rhbz1967087


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-3
changelog:
  - crm_resource now supports XML output from resource agent actions
  - Correct output for crm_simulate --show-failcounts
  - Avoid remote node unfencing loop
  - Resolves: rhbz1644628
  - Resolves: rhbz1686426
  - Resolves: rhbz1961857


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-4
changelog:
  - Show better error messages in crm_resource with invalid resource types
  - Avoid selecting wrong device when dynamic-list fencing is used with host map
  - Do not schedule probes of unmanaged resources on pending nodes
  - Fix regressions in crm_attribute and crm_master argument handling
  - Resolves: rhbz1447918
  - Resolves: rhbz1978010
  - Resolves: rhbz1982453
  - Resolves: rhbz1984120


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-6
changelog:
  - Fix watchdog agent version information
  - Ensure transient attributes are cleared when multiple nodes are lost
  - Resolves: rhbz1443666
  - Resolves: rhbz1986998


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-1
changelog:
  - Allow per-host fence delays for a single fence device
  - Use OCF 1.1 enum type in cluster option metadata for better validation
  - crm-resource --force-* now works with LSB resources
  - Allow spaces in pcmk_host_map
  - ACL group names are no longer restricted to a unique XML id
  - Rebase on upstream 2.1.2
  - Ensure upgrades get compatible Corosync libraries
  - Resolves: rhbz1082146
  - Resolves: rhbz1281463
  - Resolves: rhbz1346014
  - Resolves: rhbz1376538
  - Resolves: rhbz1384420
  - Resolves: rhbz2011973
  - Resolves: rhbz2027006


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-2
changelog:
  - Correctly get metadata for systemd agent names that end in '@'
  - Use correct OCF 1.1 syntax in ocf:pacemaker:Stateful meta-data
  - Fix regression in displayed times in crm_mon's fence history
  - Resolves: rhbz2003151
  - Resolves: rhbz2027370
  - Resolves: rhbz2032027


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-3
changelog:
  - Improve display of failed actions
  - Handle certain probe failures as stopped instead of failed
  - Update pcmk_delay_base description in option meta-data
  - Avoid crash when using clone notifications
  - Retry Corosync shutdown tracking if first attempt fails
  - Resolves: rhbz1470834
  - Resolves: rhbz1506372
  - Resolves: rhbz2027370
  - Resolves: rhbz2039675
  - Resolves: rhbz2042550


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-4.2
changelog:
  - Fix issue with "stop_unexpected" value for "multiple-active" meta-attribute
  - Resolves: rhbz2062848


author: Alan Steinberg <alan.steinberg@oracle.com> - 2.1.2-4.0.1.3
changelog:
  - Upstream reference in pacemaker crm_report binary [Orabug: 32825154]
  - Replace bug url [Orabug: 34202300]


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.3-1
changelog:
  - crm_resource --restart fails to restart clone instances except instance 0
  - Add new multiple-active option for "stop unexpected instances"
  - Unable to show metadata for "service" agents with "@" and "." in the name
  - Resource ocf:pacemaker:attribute does not comply with the OCF 1.1 standard
  - Allow resource meta-attribute to exempt resource from node health restrictions
  - Show node health states in crm_mon
  - Rebase pacemaker on upstream 2.1.3-rc2 release
  - crm_mon API result does not validate against schema if fence event has exit-reason
  - Resolves: rhbz1930578
  - Resolves: rhbz2036815
  - Resolves: rhbz2045096
  - Resolves: rhbz2049722
  - Resolves: rhbz2059638
  - Resolves: rhbz2065812
  - Resolves: rhbz2072107
  - Resolves: rhbz2086230


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.3-2
changelog:
  - crm_attribute works on remote node command line when hostname differs
  - Rebase pacemaker on upstream 2.1.3 final release
  - Resolves: rhbz1384172
  - Resolves: rhbz2072107


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.4-1
changelog:
  - Fencer should not ignore CIB updates when stonith is disabled
  - Rebase pacemaker on upstream 2.1.4 final release
  - Fix typo in ocf:pacemaker:HealthSMART meta-data
  - Resolves: rhbz2055935
  - Resolves: rhbz2072107
  - Resolves: rhbz2094855


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.4-4
changelog:
  - Ensure all nodes are re-unfenced after device configuration change
  - crm_resource --why now checks node health status
  - Resolves: rhbz1872483
  - Resolves: rhbz2065818


author: Chris Lumens <clumens@redhat.com> - 2.1.4-5.1
changelog:
  - Fix regression where reordered resources do not get moved
  - Execute resource metadata actions asynchronously
  - Resolves: rhbz2125588
  - Resolves: rhbz2125589


author: Chris Lumens <clumens@redhat.com> - 2.1.5-1
changelog:
  - Rebase on upstream 2.1.5-rc2 release
  - Resolves: rhbz1822125
  - Resolves: rhbz2095662
  - Resolves: rhbz2121852
  - Resolves: rhbz2122806
  - Resolves: rhbz2133497
  - Resolves: rhbz2142681


author: Chris Lumens <clumens@redhat.com> - 2.1.5-4
changelog:
  - Rebase pacemaker on upstream 2.1.5 final release
  - Add support for sync points to attribute daemon
  - Resolves: rhbz1463033
  - Resolves: rhbz1866578
  - Resolves: rhbz2122352


author: Chris Lumens <clumens@redhat.com> - 2.1.5-6
changelog:
  - Backport fix for migration history cleanup causing resource recovery
  - Backport fix for SIGABRT during pacemaker-fenced shutdown
  - Resolves: rhbz2166388
  - Resolves: rhbz2168249


author: Chris Lumens <clumens@redhat.com> - 2.1.5-7
changelog:
  - Additional fixes for SIGABRT during pacemaker-fenced shutdown
  - Backport fix for attrd_updater -QA not displaying all nodes
  - Related: rhbz2168249
  - Resolves: rhbz2168675


author: Chris Lumens <clumens@redhat.com> - 2.1.5-8
changelog:
  - Rebuild with new release due to build system problems
  - Related: rhbz2168249
  - Related: rhbz2168675


author: Alan Steinberg <alan.steinberg@oracle.com> - 2.1.5-8.1.0.1
changelog:
  - Replace bug url [Orabug: 34202300]
  - Upstream reference in pacemaker crm_report binary [Orabug: 32825154]
  - Replace bug url [Orabug: 34202300]


author: Darren Archibald <darren.archibald@oracle.com> - 2.1.5-9.3.0.1
changelog:
  - Dampening ignored by attrd_updater -U for initial attribute creation
  - [FJ OSP17.1 Bug] Failed to replace a controller node.
  - Race condition when DC and attribute writer are both shutting down


author: Chris Lumens <clumens@redhat.com> - 2.1.6-1
changelog:
  - Rebase pacemaker on upstream 2.1.6 final release
  - Resolves: rhbz1578820
  - Resolves: rhbz1632951
  - Resolves: rhbz1876173
  - Resolves: rhbz2010084
  - Resolves: rhbz2030869
  - Resolves: rhbz2078611
  - Resolves: rhbz2106642
  - Resolves: rhbz2160206
  - Resolves: rhbz2168633


author: Chris Lumens <clumens@redhat.com> - 2.1.6-3
changelog:
  - Fix moving groups when there's a constraint for a single group member
  - Resolves: rhbz2218232
  - Resolves: rhbz2189300


author: Chris Lumens <clumens@redhat.com> - 2.1.6-4
changelog:
  - Clone instances should not shuffle unnecessarily
  - Fix a bug in clone resource description display
  - Resolves: rhbz1931023
  - Resolves: rhbz1688149
  - Related: rhbz2106642
  - Related: rhbz2189300


author: Chris Lumens <clumens@redhat.com> - 2.1.6-5
changelog:
  - Apply dampening when creating attributes with attrd_updater -U
  - Resolves: rhbz2224046
  - Related: rhbz2189300


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Pacemaker Remote nodes can validate against later schema versions
  - Resolves: RHEL-7597
  - Related: RHEL-17224


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7597
  - Related: RHEL-14045


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-14045
  - Resolves: RHEL-17224
  - Resolves: RHEL-23065


author: Kalev Lember <klember@redhat.com> - 2.38.1-1
changelog:
  - Update to 2.38.1
  - Use make_install macro
  - Set minimum versions for required libraries
  - Tighten -devel deps with the _isa macro


author: Nathan Scott <nathans@redhat.com> - 0.4.0-5
changelog:
  - Use RPM macros to ease dropwizard metrics enablement.
  - Correct the dependency on systems.uom:systems-unicode-java8


author: Andreas Gerstmayr <agerstmayr@redhat.com> - 0.5.4-4
changelog:
  - Obsolete (remove) vulnerable versions of log4j12 (NVR < 1.2.17-23)
    when upgrading to parfait 0.5.4-4 (CVE-2021-4104)


author: Dave Brolley <brolley@redhat.com> - 4.1.1-1
changelog:
  - SELinux is preventing pmdalinux from 'unix_read' accesses on the shared memory Unknown
    (BZ 1592901)
  - SELinux is preventing pmdalinux from getattr, associate access on the shared memory Unknown
    (BZ 1594991)
  - PCP BCC PMDA AVCs (BZ 1597978)
  - PCP BCC PMDA packaging issue (BZ 1597979)
  - pmdaproc only reads the first 1024 bytes of the /proc/*/status file resulting in lost metric
    values(BZ 1600262)
  - Update to latest PCP sources.


author: Dave Brolley <brolley@redhat.com> - 4.1.1-2
changelog:
  - pcp.spec: Fix the _with_dstat reference in the 
    
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS; 
    [ "1" = 1 ] && for i in $(find $(dirname ./configure) -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    [ "1" = 1 ] && [ x != "x-Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld" ] && 
        for i in $(find . -name ltmain.sh) ; do 
          /usr/bin/sed -i.backup -e 's~compiler_flags=$~compiler_flags="-Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld"~' $i 
        done ; 
    ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	 \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info command


author: Mark Goodwin <mgoodwin@redhat.com> - 4.2.0-1
changelog:
  - Resolves dstat packaging issues (BZ 1640912)
  - Resolves dstat cursor positioning problem (BZ 1640913)
  - Resolve a signal handling issue in dstat shutdown (BZ 1648552)
  - Rename variable named await in python code (BZ 1633367)
  - New conditionally-built pcp-pmda-podman sub-package.
  - SELinux is preventing pmdalinux from 'unix_read' accesses on the shared memory labeled gpsd_t
    (BZ 1626487)
  - SELinux is preventing ps from 'search' accesses on the directory .cache
    (BZ 1634205, BZ 1635522)
  - SELinux is preventing ps from 'sys_ptrace' accesses on the cap_userns Unknown
    (BZ 1635394)
  - PCP SELinux AVCs (BZ 1633211)
  - SELinux is preventing pmdalinux from 'search' accesses on the directory spider
    (BZ 1647843)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 4.3.0-1
changelog:
  - Add the dstat -f/--full option to expand instances (BZ 1651536)
  - Improve systemd interaction for local pmie (BZ 1650999)
  - SELinux is preventing ps from 'search' accesses on the directory
    .config (BZ 1569697)
  - SELinux is preventing pmdalinux from 'search' accesses on
    the directory /var/lib/libvirt/images (BZ 1579988)
  - SELinux is preventing pmdalinux from 'unix_read' accesses
    on the semáforo Unknown (BZ 1607658)
  - SELinux is preventing pmdalinux from 'unix_read' accesses
    on the shared memory Unknown (BZ 1618756, BZ 1619381, BZ 1601721)
  - Update to latest PCP sources.


author: Lukas Berk <lberk@redhat.com> - 3.10.9-1
changelog:
  - Add -V/--version support to several more commands (BZ 1284411)
  - Resolve a pcp-iostat(1) transient device exception (BZ 1249572)
  - Provides pmdapipe, an output-capturing domain agent (BZ 1163413)
  - Python PMAPI pmSetMode allows None timeval parameter (BZ 1284417)
  - Python PMI pmiPutValue now supports singular metrics (BZ 1285371)
  - Fix python PMAPI pmRegisterDerived wrapper interface (BZ 1286733)
  - Fix pmstat SEGV when run with graphical time control (BZ 1287678)
  - Make pmNonOptionsFromList error message less cryptic (BZ 1287778)
  - Drop unimplemented pmdumptext options from usage, man page (BZ 1289909)
  - Stop creating configuration files in tmp_t locations (BZ 1256125)
  - Update to latest PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 3.11.0-1
changelog:
  - Significant speedups to elapsed time stopping pmcd (BZ 1292027)
  - Fix python derived metric exception handling issues (BZ 1299806)
  - incorrect interpolation across <mark> record in a merged archive (BZ 1296750)
  - pcp requires pcp-compat pulling in a lot of unneeded pcp-pmda-* packages (BZ 1293466)
  - Update to latest PCP sources.


author: Dave Brolley <brolley@redhat.com> - 3.11.1-1
changelog:
  - Call Remove script when uninstalling individual PMDAs (BZ 1304722)
  - Restrict pmcd.services to checking known pcp services (BZ 1286361)
  - Support for multi-archive contexts, across all clients (BZ 1262723)
  - Remove the default shotgun approach to stopping daemons (BZ 1210976)
  - Add mechanism for automatic recovery from PMDA timeouts (BZ 1065803)
  - Update to latest PCP sources.


author: Lukas Berk <lberk@redhat.com> - 3.11.2-1
changelog:
  - Negative nice values reported incorrectly (BZ 1328432)
  - Multithreaded clients with concurrent pmNewContext improvements (BZ 1325363)
  - PMCD agent auto-restart (BZ 1323521)
  - Segv in libpcp during discovery error processing (BZ 1319288)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.11.3-1
changelog:
  - Fix memory leak in derived metrics error handling (BZ 1331973)
  - Correctly propogate indom in mixed derived metrics (BZ 1337212, BZ 1336130)
  - Disallow stopping pmie/pmlogger daemons from cron (BZ 1336792)
  - Fail fast for easily detected bad pmcd configuration (BZ 1336210)
  - Implement primary (local) pmie concept in rc pmie (BZ 1323851)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 4.3.2-2
changelog:
  - Update metrics for device mapper VDO driver (BZ 1670548)
  - Update to a more recent PCP bug fix release (BZ 1685302)


author: Nathan Scott <nathans@redhat.com> - 5.0.1-1
changelog:
  - Update to latest PCP v5 sources via rebase (BZ 1723598)
  - Resolve selinux policy installation issues (BZ 1730206)


author: Nathan Scott <nathans@redhat.com> - 5.0.2-1
changelog:
  - Update to latest PCP v5 sources via rebase (BZ 1723598)
  - Resolve selinux policy issue with bcc PMDA (BZ 1709237)
  - Resolve selinux policy issue with unbound PMDA (BZ 1778813)
  - Updates to perfevent PMDA for hv_24x7 events (BZ 1765434, 1779507)
  - Fix perl packaging dependency for postfix PMDA (BZ 1773459)
  - Fix pcp-dstat handling of large numbers of disks (BZ 1779419)
  - Fix pmie exit status on receipt of TERM signal (BZ 1780003)
  - Fix pmlogger timeout handling on fresh install (BZ 1780073)


author: Nathan Scott <nathans@redhat.com> - 5.0.2-3
changelog:
  - Fix issue with multilib pcp-devel installation (BZ 1788119)
  - Archive discovery fixes in pmproxy and libpcp_web (BZ 1785560)


author: Nathan Scott <nathans@redhat.com> - 5.0.2-4
changelog:
  - Restrict pcp-pmda-mssql to ODBC architectures (BZ 1795804)
  - Fix pcp-pmda-activemq perl module installation (BZ 1788881)
  - Update archive discovery code with latest fixes (BZ 1785560)
  - Update bpftrace and BCC PMDAs architecture lists (BZ 1795798)


author: Nathan Scott <nathans@redhat.com> - 5.0.2-1
changelog:
  - Resolve fresh install pmlogger timeout bug (BZ 1721223)
  - Fix dstat exception writing to a closed fd (BZ 1768619)
  - Fix chan lib dependency of pcp-pmda-statsd (BZ 1770815)
  - Update to latest PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 5.0.3-1
changelog:
  - Avoid python ctypes bitfield struct on-stack (BZ 1800685)
  - Add dstat support for DM/MD/part devices (BZ 1794273)
  - Fix compilation with gcc version 10 (BZ 1793495)
  - Fix dstat sub-sample averaging (BZ 1780039)
  - Update to latest PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 5.1.0-2
changelog:
  - replace pmdads389log dep on 389-ds-base with a softdep
  - fix install deps for pcp-testsuite on pcp-pmda-mssql
  - Improve pmlogger and pmie system log messages (BZ 1806428)
  - Missing dep of pcp-pmda-dbping on perl-DBI (BZ 1790421)
  - Missing dep of pcp-pmda-ds389log on 389-ds-base (BZ 1790422)
  - Missing dep of pcp-pmda-gpsd on perl-JSON and perl-Time-HiRes (BZ 1790426)
  - Missing dep of pcp-pmda-lmsensors on lm_sensors (BZ 1790427)
  - Missing dep of pcp-pmda-redis on perl-autodie (BZ 1790431)
  - Missing dep of pcp-pmda-smart on smartmontools (BZ 1790432)
  - Missing dep of pcp-pmda-snmp on net-snmp-perl (BZ 1790433)
  - SELinux issues with pcp-pmda-zimbra (BZ 1790437)
  - Missing dep of pcp-pmda-pdns on perl-Time-HiRes (BZ 1790441)
  - Installation of pcp-pmda-netcheck causes SELinux issue (BZ 1790450)
  - Installation of pcp-pmda-samba causes SELinux issues (BZ 1790452)
  - Some PMDAs are missing dependency on PCP (BZ 1790526)
  - pmieconf randomly fails (BZ 1800545)
  - collectl2pcp does not handle large collectl archives well (BZ 1785101)
  - Missing dep of pcp-pmda-redis on perl-autodie and perl-Time-HiRes (BZ 1788519)
  - Can not install pcp-pmda-activemq, wrong location of RESTClient (BZ 1788878)
  - Missing dep of pcp-pmda-bind2 on various perl packages (BZ 1790415)
  - pmlogger_daily_report causing PCP upstream testsuite to fail (BZ 1805146)
  - Missing selinux rules preventing pcp-pmda-named runing rndc(BZ 1825663)
  - SELinux is preventing PostgreSQL PMDA to collect metrics (BZ 1825957)
  - pmnewlog generates inaccessible config file (BZ 1810110)
  - pmnewlog is causing PCP testsuite to hang (BZ 1810118)
  - pmdakvm: debugfs access is restricted (BZ 1824297)
  - error starting pmlogger; pid file not owned by root (BZ 1761962)
  - Update to latest PCP 5.1.0-1 upstream sources.
  - Update to latest PCP sources.


