# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-6
changelog:
  - Bump version to 1.3.9.1-6
  - Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
  - Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
  - Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
  - Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-7
changelog:
  - Bump version to 1.3.9.1-7
  - Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
  - Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
  - Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-8
changelog:
  - Bump version to 1.3.9.1-8
  - Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
  - Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
  - Resolves: Bug 1713361 - Update defaults.inf
  - Resolves: Bug 1708215 - maxlogsperdir accepting negative values
  - Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-9
changelog:
  - Bump version to 1.3.9.1-9
  - Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
  - Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-10
changelog:
  - Bump version to 1.3.9.1-10
  - Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-1
changelog:
  - Bump version to 1.3.10.1-1
  - Resolves: Bug 1639342 - Replace error by warning in the state machine defined in repl5_inc_run
  - Resolves: Bug 1691931 - memory leak in automember plugin
  - Resolves: Bug 1662461 - Log the actual base DN when the search fails with "invalid attribute request"
  - Resolves: Bug 1732053 - etime can contain invalid nanosecond value
  - Resolves: Bug 1546739 - consistency in the replication error codes while setting nsds5replicaid=65535


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-2
changelog:
  - Bump version to 1.3.10.1-2
  - Resolves: Bug 1748199 - EMBARGOED CVE-2019-14824 389-ds-base: 389-ds and IDM: allows authenticated unprivileged user to retrieve content of userPassword field for any user 
  - Resolves: Bug 1610234 - nsslapd-defaultnamingcontext does not change when the assigned suffix got deleted
  - Resolves: Bug 1723545 - Directory Server 10 not RFC 4511 compliant
  - Resolves: Bug 1724914 - LDAP server returning controltype in different sequence
  - Resolves: Bug 1739182 - CleanAllRUV task limit not enforced
  - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache
  - Resolves: Bug 1685059 - After running cl-dump dbdir/cldb/*ldif.done are not deleted


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-3
changelog:
  - Bump version to 1.3.10.1-3
  - Resolves: Bug 1756182 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
  - Resolves: Bug 1749236 - etime displayed has an order of magnitude 10 times smaller than it should be
  - Resolves: Bug 1758109 - AddressSanitizer: heap-use-after-free in import_free_job
  - Resolves: Bug 1676948 - After audit log file is rotated, DS version string is logged after each update
  - Resolves: Bug 1749595 - Extremely slow LDIF import with ldif2db


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-4
changelog:
  - Bump version to 1.3.10.1-4
  - Resolves: Bug 1765106 - ipa-server-install is failing with ipapython.admintool: ERROR failed to create DS instance Command


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-5
changelog:
  - Bump version to 1.3.10.1-5
  - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)


author: Jan Horak <jhorak@redhat.com> - 6.7.8.9-15
changelog:
  - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
    rhbz#1326834, rhbz#1334188, rhbz#1269553


author: Thomas Haller <thaller@redhat.com> - 1:1.18.0-1
changelog:
  - Update to 1.18.0 release
  - cli: fix crash handling gsm secrets (rh #1698495)
  - rules: fix duplicate policy routing rules (rh #1652653)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-2
changelog:
  - cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
  - device: fix reapply of MTU (rh #1702657)
  - settings: fix failed assertion when adding connections (rh #1707261)
  - core: ensure software devices are managed when networking gets enabled (rh #1701585)
  - device: restore IPv6 configuration on link up (rh #1548237)
  - dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
  - core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
  - tc: add suppor for mired action an fq_codel qdisc (rh #1546802)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-3
changelog:
  - team: don't kill teamd for external devices (rh #1711952)
  - ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
  - po: update translations (rh #1689962)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-4
changelog:
  - cli: don't wait forever in the editor on update connection failure (rh #1702203)
  - team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.4-1
changelog:
  - Update to 1.18.4 release
  - cli: fix bash completion for slave-types (rh #1654062)
  - core: improve handling of policy routing rules when restarting daemon (rh #1696881)
  - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
  - tui: only add bond options to profile that are supported by tui (rh #1715720)
  - cli: fix resetting default value for properties (rh #1715887)
  - core: fix detecting parent device by connection's UUID (rh #1716438)
  - core: fix setting IPv6 route options and destination (rh #1727193)
  - core: support more "arp_validate" bond options (rh #1730793)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2
changelog:
  - dhcp: include conditionals from existing dhclient configuration (rh #1758550)
  - core: fix sending ARP announcements (rh #1767681)


author: Ray Strode <rstrode@redhat.com> - 0.6.45-6
changelog:
  - Don't return bogus password expiration policy when
    shadow file is unavailable
    Resolves: #1530659


author: Kamil Dudka <dkdudka@redhat.com> - 2.2.51-13
changelog:
  - avoid failure of %check when building as root (#1085389)
  - setfacl.1: document the meaning of '-' in perms (#1337039)


author: Sumit Bose <sbose@redhat.com> - 0.8.1-4
changelog:
  - adcli doesn't update kvno while joining system to AD domain (RODC) [#1471021]
  - adcli_tool_computer_delete description spelling [#1450179]
  - adcli man page should not only mention FILE type credential caches [#1423871]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-5
changelog:
  - enable "Trust this computer for delegation to any service (Kerberos only)" [#1538730]
  - realm join fails with Insufficient permissions [#1542354]
  - adcli update option cannot add principals for computer object [#1545568]
  - adcli refuses to add service principals [#1547013]
  - [RFE] Support adding SPN of a different host [#1547014]
  - adcli segfaults during AD join RHEL 7.5 [#1575554]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-6
changelog:
  - Couldn't set service principals on computer account [#1608212]
  - additional fix #1547014 and #1593240


author: Sumit Bose <sbose@redhat.com> - 0.8.1-7
changelog:
  - use autosetup macro to simplify patch handling
  - fixed rpmlint warnings in the spec file
  - join failed if hostname is not FQDN [#1649868]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-8
changelog:
  - Various updates for RHEL-7.7
  - many adcli-krb5-????? directories are created /tmp [#1588596]
  - adcli exports kerberos ticket with old kvno [#1642546]
  - [RFE] Have `adcli join` work without FQDN in `hostname` output [#1595911]
  - Improve handling of service principals [#1644311]
  - [RFE] adcli command with --unix-* options doesn't update
    values in UnixAttributes Tab for user [#1337489]
  - [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187]
  - [RFE] Need an option for adcli command which will show domain join status. [#1622583]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-9
changelog:
  - Fixes for RHEL-7.7 updates
  - additional patch for [RFE] adcli join should preserve SPN added by adcli
    preset-computer [#1630187]
  - new patches for many adcli-krb5-????? directories are created /tmp [#1588596]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-10
changelog:
  - adcli is failing with "Couldn't add keytab entries: FILE:/etc/krb5.keytab:
    Cannot allocate memory" [1665162]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-11
changelog:
  - Fixes and improvements for RHEL-7.8
  - Issue is that with arcfour-hmac as first encryption type in the config ... [#1683745]
  - adcli update --add-samba-data does not work as expected [#1738573]


author: Than Ngo <than@redhat.com> - 1.15-21
changelog:
  - Resolves: #1711051, CVE-2019-8383 denial of service
  - Resolves: #1710910, CVE-2019-8379 null pointer dereference


author: Ian Kent <ikent@redhat.com> - 5.0.7-100
changelog:
  - bz1599516 - [autofs] The log no longer print PID of automount process
    - add NULL check in prepare_attempt_prefix().
    - update build info with systemd.
    - use flags for startup boolean options.
    - move close stdio descriptors to become_daemon().
    - add systemd service command line option.
  - Resolves: rhbz#1599516


author: Ian Kent <ikent@redhat.com> - 5.0.7-101
changelog:
  - bz1640448 - path_resolution on an autofs managed path resets the timer. Can
    this be made configurable?
    - support strictexpire mount option.
  - Resolves: rhbz#1640448


author: Ian Kent <ikent@redhat.com> - 5.0.7-102
changelog:
  - bz1644910 - [RFE] Enable additional logging information for autofs
    - add NULL check for get_addr_string() return.
    - use malloc(3) in spawn.c.
    - add mount_verbose configuration option.
    - optionally log mount requestor process info.
    - log mount call arguments if mount_verbose is set.
  - Resolves: rhbz#1644910


author: Ian Kent <ikent@redhat.com> - 5.0.7-103
changelog:
  - bz1644933 - Segmentation fault in err_string_data_LHASH_COMP
    - openssl workaround.
  - Resolves: rhbz#1644933


author: Ian Kent <ikent@redhat.com> - 5.0.7-104
changelog:
  - bz1442063 - Parameter ghost not documented in the man pages
    - document ghost option in auto.master man page.
  - Resolves: rhbz#1442063


author: Ian Kent <ikent@redhat.com> - 5.0.7-105
changelog:
  - bz1680582 - Sanitize autofs logging
    - make expire remaining log level debug.
  - Resolves: rhbz#1680582


author: Ian Kent <ikent@redhat.com> - 5.0.7-106
changelog:
  - bz1685804 - autofs doesn't expand macros in amd map selectors
    - workaround getaddrinfo(3) ai_canonname bug.
    - improve hostname lookup error logging.
    - allow period following macro in selector value.
    - fix macro expansion in selector values.
  - Resolves: rhbz#1685804


author: Ian Kent <ikent@redhat.com> - 5.0.7-107
changelog:
  - bz1734057 - automount segfaults if a bad hosts entry is added
    in /etc/auto.master
    - fix reset flex scan buffer on init.
  - Resolves: rhbz#1734057


author: Ian Kent <ikent@redhat.com> - 5.0.7-108
changelog:
  - bz1728914 - getmntent returns additional "-hosts" entries when
    automounter is used with "hosts" map
    - remove unused function has_fstab_option().
    - remove unused function reverse_mnt_list().
    - remove a couple of old debug messages.
    - fix amd entry memory leak.
    - fix unlink_mount_tree() not umounting mounts.
    - add ignore mount option.
    - use ignore option for offset mounts as well.
    - add config option for "ignore" mount option
    - use bit flags for autofs mount types in mnt_list.
    - use mp instead of path in mnt_list entries.
    - always use PROC_MOUNTS to make mount lists.
    - add glibc getmntent_r().
    - use local getmntent_r in table_is_mounted().
    - refactor unlink_active_mounts() in direct.c.
    - don't use tree_is_mounted() for mounted checks.
    - use single unlink_umount_tree() for both direct and indirect mounts.
    - move unlink_mount_tree() to lib/mounts.c.
    - use local_getmntent_r() for unlink_mount_tree().
    - use local getmntent_r() in get_mnt_list().
    - use local getmntent_r() in tree_make_mnt_list().
  - Resolves: rhbz#1728914


author: Ian Kent <ikent@redhat.com> - 5.0.7-109
changelog:
  - bz1728914 - getmntent returns additional "-hosts" entries when
    automounter is used with "hosts" map
    - fix missing initialization of autofs_point flags.
  - Related: rhbz#1728914


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-15
changelog:
  - enable hardened build (#1092506)
  - fix short option for --version, document -t option of avahi-autoipd (#948583)
  - fix crashes in D-Bus methods GetAlternativeHostName and GetAlternativeServiceName (#1003688)
  - fix bug when avahi-daemon ended up in a tight loop (#1081801)
  - remove prefix /home/lennart/tmp/avahi from references in man pages (#1120233)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-17
changelog:
  - fix crash due to use of deprecated Gtk3 API (#1263720)
  - don't add 0pointer.de and zeroconf.org to default browse list (#1340837)
  - fix not publishing entries if a probing interface is removed (#1222646)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-18
changelog:
  - create home directory for avahi-autoipd user (#1416287)
  - get rid of the dangling symlink to avahi-discover in debuginfo package (#1421229)


author: Ville Skyttä <ville.skytta@iki.fi> - 1:2.1-1
changelog:
  - Update to 2.1 (fixes #860510, #906469, #912113, #919246, #928253).
  - Don't ship completions included in util-linux 2.23-rc2 for F-19+.


author: Roman Rakus <rrakus@redhat.com> - 2.1-4
changelog:
  - Added conditionals to not add completions for some commands; the packages
    has their own completions
    Resolves: #1007839


author: Jerome Marchand <jmarchan@redhat.com> - 0.6.1-1
changelog:
  - Rebase on v0.6.1
  - Fix tcpsubnet
  - Reinstate llcstat tool
  - Remove inject tool
  - Add NSS support to sslsniff
  - Fixes miscellaneous error uncovered by covscan


author: Jerome Marchand <jmarchan@redhat.com> - 0.10.0-1
changelog:
  - Rebase on bcc-0.10.0
  - Fix regression of vfscount
  - Drop tools that relies on features unavailable on RHEL 7


author: Tomas Krizek <tkrizek@redhat.com> - 11.1-1
changelog:
  - update to letest upstream version
  - resolves: #1393889 Rebase to bind-dyndb-ldap 11+
  - resolves: #1165796 bind-dyndb-ldap crashes if server is shutting down and connection to LDAP is down
  - resolves: #1413805 bind-dyndb-ldap default schema is shipped with syntax error


author: Petr Menšík <pemensik@redhat.com> - 11.1-6
changelog:
  - Bump BIND version and fix library dependecies
  - Rebuild for bind 9.11.3. Minor tweaks to compile.
  - Support for bind 9.11.5 headers


author: Nick Clifton <nickc@redhat.com> 2.27-34.base
changelog:
  - Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
  - Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
  - Fix seg-fault parsing corrupt ELF format files.  (#1579801)


author: Nick Clifton <nickc@redhat.com> 2.27-42.base
changelog:
  - Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749085)


author: Don Zickus <dzickus@redhat.com> 5.41-1
changelog:
  - Update to 5.41
  - obexd fixes to prevent crashes
  - add /etc/bluetooth/main.conf config file
  Resolves: #1313363, #1336476, #1338895


author: David Arcari <darcari@redhat.com> 5.44-1
changelog:
  - Update to 5.44
  - Ship btattach tool
  - Configure systemctl settings for bluez-obex correctly
  - Add Provides: bluez-obexd
  Resolves: #1434581, #1401501


author: Petr Machata <pmachata@redhat.com> - 1.53.0-21
changelog:
  - Fix atomic_cas32 (thanks Jaroslav Škarvada for figuring out where
    the problem is) (boost-1.54.0-interprocess-atomic_cas32-ppc.patch)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - do not use arch-specific BuildRequires (#1268268)
  - support TLS libraries without SSLv3 (#1298227)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - Install unpatched gcc.jam (#1305019).
  - Build libboost_python and libboost_python3 such that they depend on
    their respective libpython (#1302120).
    (boost-1.53.0-python-libpython_dep.patch,
    boost-1.53.0-python-abi_letters.patch)
  - Fix Boost.Python test suite so that PyImport_AppendInittab is called
    before PyInitialize, which broke the test suite with Python 3.
    (boost-1.53.0-python-test-PyImport_AppendInittab.patch)
  - Patch gcc.jam to not add bogus rpaths.


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1119.el7]
changelog:
  - [x86] mm: serialize against gup_fast in pmdp_splitting_flush() (Vitaly Kuznetsov) [1674266]
  - [vhost] vsock: split packets to send using multiple buffers (Stefano Garzarella) [1777349]
  - [md] md/raid10: prevent access of uninitialized resync_pages offset (Nigel Croxon) [1767935]
  - [x86] perf/x86: Modify error message in virtualized environment (Michael Petlan) [1759758]
  - [fs] cifs: Fix infinite loop when using hard mount option (Dave Wysochanski) [1770404]
  - [wireless] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Stanislaw Gruszka) [1776157] {CVE-2019-14901}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1120.el7]
changelog:
  - [md] raid5: need to set STRIPE_HANDLE for batch head (Xiao Ni) [1774330]
  - [drm] drm/radeon: fix si_enable_smc_cac() failed issue (Dave Airlie) [1780026]
  - [block] block: don't change REQ_NR_BITS (Ming Lei) [1779712]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1121.el7]
changelog:
  - [platform] thinkpad_acpi: Don't yell on unsupported brightness interfaces (Lyude Paul) [1305619]
  - [platform] thinkpad-acpi: fix handle locate for video and query of _BCL (Lyude Paul) [1305619]
  - [s390] kernel: avoid cpu yield in SMT environment (Philipp Rudo) [1777876]
  - [scsi] scsi: qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1783016]
  - [scsi] scsi: qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1783016]
  - [scsi] scsi: qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1783016]
  - [powerpc] KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1777710]
  - [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1777710]
  - [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1777710]
  - [net] openvswitch: fix flow command message size (Paolo Abeni) [1776578]
  - [block] brd: re-enable __GFP_HIGHMEM in brd_insert_page() (Jeff Moyer) [1781298]
  - [block] brd: remove dax support (Jeff Moyer) [1781298]
  - [nvme] nvme: don't access the inlined bio after nvmet request is completed (Ming Lei) [1631120]
  - [fs] epoll: fix race between ep_poll_callback(POLLFREE) and ep_free()/ep_remove() (Miklos Szeredi) [1780128]
  - [nvme] nvme: fix NULL pointer dereference in nvme_init_subsystem (Ewan Milne) [1781316]
  - [nvme] nvme-fabrics: allow duplicate connections to the discovery controller (Ewan Milne) [1781316]
  - [scsi] scsi: bnx2fc: timeout calculation invalid for bnx2fc_eh_abort() (Nilesh Javali) [1772966]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1122.el7]
changelog:
  - [drm] drm/amd/powerplay: use hardware fan control if no powerplay fan table (Lyude Paul) [1729286]
  - [nvme] nvme-fc: fix double-free scenarios on hw queues (Ewan Milne) [1731286]
  - [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1779768]
  - [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1779768] {CVE-2019-19338}
  - [x86] kvm: x86: Mark expected switch fall-throughs (Paolo Bonzini) [1779768] {CVE-2019-19338}
  - [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1779768] {CVE-2019-19338}
  - [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1779768] {CVE-2019-19338}
  - [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1779768] {CVE-2019-19338}
  - [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1779768] {CVE-2019-19338}
  - [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1782927]
  - [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1782927]
  - [s390] s390/qeth: consolidate skb allocation (Philipp Rudo) [1782927]
  - [s390] s390/qeth: clean up page frag creation (Philipp Rudo) [1782927]
  - [netdrv] i40e: Fix for persistent lldp support (Stefan Assmann) [1782689]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1123.el7]
changelog:
  - [mm] mm: prevent get_user_pages() from overflowing page refcount (Aristeu Rozanski) [1705005] {CVE-2019-11487}
  - [mm] mm/hugetlb.c: __get_user_pages ignores certain follow_hugetlb_page errors (Aristeu Rozanski) [1705005] {CVE-2019-11487}
  - [fs] CIFS: avoid using MID 0xFFFF (Leif Sahlberg) [1771255]
  - [net] netfilter: xt_TRACE: add explicitly nf_logger_find_get call (Phil Sutter) [1774444]
  - [wireless] rtlwifi: Fix potential overflow on P2P code (Josef Oskera) [1775236] {CVE-2019-17666}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1124.el7]
changelog:
  - [s390] s390: wire up sys_renameat2 (Miklos Szeredi) [1773504]
  - [net] ipvs: do not use random local source address for tunnels (Xin Long) [1786676]
  - [misc] mei: me: add cannon point device ids for 4th device (Jerry Snitselaar) [1745139]
  - [misc] mei: me: add cannon point device ids (Jerry Snitselaar) [1745139]
  - [netdrv] bnxt_en: Support all variants of the 5750X chip family (Jonathan Toppins) [1789345]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1125.el7]
changelog:
  - [fs] mark struct file that had write access grabbed by open() (Miklos Szeredi) [1679829]
  - [fs] fold __get_file_write_access() into its only caller (Miklos Szeredi) [1679829]
  - [powerpc] get rid of DEBUG_WRITECOUNT (Miklos Szeredi) [1679829]
  - [fs] don't bother with {get, put}_write_access() on non-regular files (Miklos Szeredi) [1679829]
  - [fs] gfs2: Use d_materialise_unique instead of d_splice_alias (2) (Andreas Grunbacher) [1784550]
  - [fs] gfs2: gfs2_create_inode(): don't bother with d_splice_alias() (Andreas Grunbacher) [1784550]
  - [fs] gfs2: bugger off early if O_CREAT open finds a directory (Andreas Grunbacher) [1784550]
  - [fs] libceph: fix PG split vs OSD (re)connect race (Ilya Dryomov) [1785656]
  - [scsi] Fix driver intialization failure for sli4 non nvme (Dick Kennedy) [1783899]
  - [netdrv] hv_netvsc: fix race that may miss tx queue wakeup (Mohammed Gamal) [1781322]


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.185-1
changelog:
  - Fix change of monitoring in clustered volumes.
  - Improve -lXXX%VG modifier which improves cache segment estimation.
  - Add synchronization with udev before removing cached devices.
  - Fix missing growth of _pmspare volume when extending _tmeta volume.
  - Automatically grow thin metadata, when thin data gets too big.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.185-2
changelog:
  - Fix cluster conversions from linear to mirror.
  - Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
  - Prevent shared active mirror LVs with lvmlockd.
  - Parsing of cache status understand no_discard_passdown.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-1
changelog:
  - Improve removal of cached devices.
  - Synchronize with udev when dropping snapshot.
  - Add missing device synchronization point before removing pvmove node.
  - Correctly set read_ahead for LVs when pvmove is finished.
  - Fix metadata writes from corrupting with large physical block size.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-2
changelog:
  - Prevent creating VGs with PVs with different logical block sizes.
  - Pvmove runs in exlusively activating mode for exclusively active LVs.
  - Activate thin-pool layered volume as 'read-only' device.
  - Enhance validation for thin and cache pool conversion and swapping.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-3
changelog:
  - Fix lvmetad shutdown and avoid lenghty timeouts when rebooting system.
  - Change allow_mixed_block_sizes default to 1.


author: Richard Hughes <richard@hughsie.com> 1.0.1-1
changelog:
  - New upstream version
  - Do not unconditionally enable BPC on the color transform
  - Fix profile created time for non-UTC timezones
  - Record the gamma table in the session helper error message


author: Richard Hughes <richard@hughsie.com> 1.0.2-1
changelog:
  - New upstream version
  - Add cd_icc_save_data() so that we can easily set _ICC_PROFILE
  - Add CdIccStore to monitor directories of ICC profiles
  - Add SystemVendor and SystemModel properties to the main interface
  - Allow to specify a non-qualified path when using FindProfileByFilename
  - Allow using the key 'Filename' when using FindProfileByProperty
  - Always return the error if any sync method failed
  - Fix GObject introspection when getting lists
  - Fix GObject introspection when getting metadata


author: Richard Hughes <richard@hughsie.com> 1.0.4-1
changelog:
  - Rebase to a new upstream version to fix small security bug
  - Use %ghost in the to avoid removing databases on upgrades
  - Resolves: #1012832


author: Paul Wouters <pwouters@redhat.com> - 1.4.2-8
changelog:
  - Resolves: rhbz#CVE-2015-6496
  - Fold in upstream patches since 1.4.2 release up to git 900d7e8
  - Fold in upstream patch set of 2015-08-18 for coverity issues


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-3
changelog:
  - Resolves: rhbz#1425552 (explicitely Require: libnetfilter_conntrack >= 1.0.6 as it is same .so version)


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-4
changelog:
  - Resolves: rhbz#1578059 Greatest NVR version of conntrack-tools for ppc64le and x86_64 are different


author: Phil Sutter <psutter@redhat.com> - 1.4.4-5
changelog:
  - Add git commit info to IPv6 NAT support patch
  - Backport: conntrackd: helpers: dhcpv6: Fix potential array overrun
  - Backport: nfct: Drop dead code in nfct_timeout_parse_params()
  - Backport: src: Fix for implicit-fallthrough warnings


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-6
changelog:
  + control-center-3.26.2-6
  - Fix Clone MAC not being saved in Ethernet device properties
  - Resolves: #1467295


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-8
changelog:
  + control-center-3.26.2-8
  - Fix Wi-Fi networks not getting updated
  - Show "Wi-Fi disabled" page when Wi-Fi is disabled
  - Resolves: #1545713


author: Ondrej Kozina <okozina@redhat.com> - 1.7.4-4
changelog:
  - patch: fix regression in blockwise functions
  - patch: avoid repeating error messages when device holders
    detected.
  - patch: add option to cryptsetup-reencrypt to print progress
    log sequentaly
  - patch: use --progress-frequency in reencryption dracut module
  - Resolves: #1480006 #1447632 #1479857


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-2
changelog:
  - patch: stop LUKS2 auto-recovery if device is no longer LUKS
    type
  - patch: update cryptsetup man page for --type option
  - patch: rephrase error message for invalid --type option in
    convert action
  - Resolves: #1599281 #1601477 #1601481


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-3
changelog:
  - Add expected permissions explicitly for locking directory.
  - Reinstate sed script removing library rpath from libtool
    script due to bug in upstream sources distribution.
  - Resolves: #1609847 #1610379


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-4
changelog:
  - patch: Fix broken LUKS2 api test.
  - patch: Allow cryptsetup to process all LUKS2 metadata variants
    according to LUKS2 specifiation.
  - Resolves: #1653388


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-5
changelog:
  - patch: calculate alignment offset correctly for LUKS2 devices.
  - patch: fix memory leak in LUKS2 validation.
  - Resolves: #1613953 #1693592


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-39
changelog:
  - resolve covscan issue found in fix for 1570480
  - automake sometimes fails to generate correct macros - so force autoconf


author: Doug Ledford <dledford@redhat.com> - 2.0.32-1
changelog:
  - Update to latest upstream version (2.0.25 -> 2.0.32)
  - Remove 4 patches folded into upstream release
  - Rebuild against new libibverbs and librdmacm
  - Update exclusive arch to accommodate i686 arch
  - Related: bz724896, bz725016


author: Doug Ledford <dledford@redhat.com> - 2.0.34-1
changelog:
  - Update to latest upstream version
  - Rebuild against new libibverbs (FDR link speed capable and IBoE enabled)
  - Related: bz750609


author: Jay Fenlason <fenlason@redhat.com> - 2.0.39-1
changelog:
  - Upgrade to latest version
    Resolves: rhbz#985117
  - Fix a compile problem with NULL not being defined
    Resolves: rhbz#1029509


author: Doug Ledford <dledford@redhat.com> - 2.0.39-5
changelog:
  - Bump and rebuild after retagging the latest libibverbs and librdmacm
    into the build root
  - Related: bz1123996


author: Doug Ledford <dledford@redhat.com> - 2.1.5-1
changelog:
  - Update to latest upstream release
  - Include support for s390x
  - Include support for aarch64
  - Drop old fix for NULL not defined, upstream has it resolved
  - Resolves: bz1182180, bz1197216, bz1172462, bz1044727, bz1056487


author: Jeff Moyer <jmoyer@redhat.com> - 62-1
changelog:
  - Rebase to v62 (Jeff Moyer)
    - a new monitor command / daemon
    - an ndctl udev rule for recording the unsafe shutdown count
    - smart error injection
    - create-namespace fix for fragmented namespaces
  - Resolves: bz#1610649 bz#1611833 bz#1456320


author: Jeff Moyer <jmoyer@redhat.com> - 64.1-1
changelog:
  - Rebase to v64.1 (Jeff Moyer)
    - add security commands
    - fix broken udev rule for dirty shutdown count
  - Resolves: bz#1634348 bz#1635441


author: Jeff Moyer <jmoyer@redhat.com> - 65.1.el7
changelog:
  - Rebase to v65
    - clear-errors: new command to clear errors on a namespace
    - monitor: remove the requirement of a default config
    - sanitize-dimm: allow a zero-key for secure-erase
    - sanitize-dimm: preserve keys after an overwrite
    - load-keys: fix for non-TPM keys
  - Fix test harness to run against the rhel7 test kernel modules
  - Related: rhbz#1722481


author: Jeff Moyer <jmoyer@redhat.com> - 65.2.el7
changelog:
  - Remove 'daxctl migrate-device-model' command.  We won't
    support hot-plugging device dax into the memory hierarchy
    on RHEL 7.
  - Resolves: rhbz#1734153


author: Jeff Moyer <jmoyer@redhat.com> - 65.3.el7
changelog:
  - modify nvdimm-security.conf touse '&&' instead of ';'
    Without this change, the module doesn't load
  - Resolves: rhbz#1725405


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.40-1
changelog:
  - require 'redhat-release' instead of /etc/system-release & conflict with older versions
  - ifup-post: always update 'nameserver' & 'search' entries in /etc/resolv.conf
  - systemd/system: symlinks for initscripts' services removed
  - *.old extension added to list of ignored files
  - ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
  - init.d/functions: convert2sec() function added
  - init.d/functions: is_true() & is_false() extended by ON/OFF support
  - usleep(1) calls replaced with sleep(1) calls
  - network-scripts: DBus calls forwarded to /dev/null
  - network-scripts: firewall-cmd replaced with DBus calls
  - ARPUDATE option introduced


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.41-1
changelog:
  - ifdown-post: fix logical error in commit 5d61564
  - network-functions: use POSIX forwarding instead of bash-ism


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.42-1
changelog:
  - rhel-autorelabel: set UEFI boot order (BootNext) same as BootCurrent
  - network-functions: use tr to upper case strings rather than awk
  - sysconfig/readonly-root: Clarify the usage of readonly-root
  - network-functions: add error messages for bonding installation
  - sysctl.conf.s390: drop SHMALL and SHMMAX
  - network.service: 'reload' removed
  - rhel-readonly.service: target name for random seed fixed
  - init.d/functions: fix sourcing for ksh


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.45-1
changelog:
  - network: parsing of /proc/mounts returned (bug #1572659)
  - netconsole: LSB header added (bug #1508489)
  - ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384)


author: Jan Macku <jamacku@redhat.com> - 9.49.48-1
changelog:
  - network: don't fail with IFDOWN_ON_SHUTDOWN (bug #1693977)
  - Configure autorelabel service to output to journal and to console if set (bug #1634661)
  - Fix changelog typo


author: Jan Macku <jamacku@redhat.com> - 9.49.49-1
changelog:
  - ifup-eth: Check that device name is set (bug #1741830)
  - Add option for IPv6 GRE tunnel (bug #1691552)


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-123
changelog:
  - Add 0249-RHBZ-1610263-mpathpersist-max-fds.patch
    * make mpathpersist honor max_fds multipath.conf parameter
  - Resolves: bz #1610263


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-124
changelog:
  - Add 0250-RHBZ-1610867-rescan-change.patch
    * Update multipath devices on change events.
  - Add 0251-RHBZ-1614011-discovery-timeout.patch
  - Add 0252-RHBZ-1623595-cmd-error-status.patch
  - Add 0253-RHBZ-1618549-mix-hw-handler.patch
    * Don't retain attached hw handler when different hw handlers are
      attached to different paths
  - Add 0254-RHBZ-1635819-fix-mpathpersist-crash.patch
  - Add 0255-RHBZ-1638651-marginal-path.patch
    * backport marginal_path options from upstream
  - Resolves: bz #1610867, #1614011, #1618549, #1623595, #1635819, #1638651


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125
changelog:
  - Modify 0250-RHBZ-1610867-rescan-change.patch
    * Fix memory Leak
  - Modify 0255-RHBZ-1638651-marginal-path.patch
    * Fix NULL dereference
  - Refresh 0252-RHBZ-1623595-cmd-error-status.patch
  - Resolves: bz #1610867, #1638651


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127
changelog:
  - Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
    * retry adding paths if they couldn't be opened initially
  - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
    * don't check if dm devices are multipath paths
  - Add 0258-RHBZ-1634183-ANA-prioritizer.patch
    * Add NVMe ANA path prioritizer
  - Resolves: bz #1634183, #1672175, #1679556


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128
changelog:
  - Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
    * minor change
  - Add 0259-RHBZ-1701604-fix-nr-active.patch
    * recalculate the number of active paths whenever a path is checked
  - Add 0260-RHBZ-1634183-prio-fixes.patch
  - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
    * ignore blacklisted paths in mpathpersist
  - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
    * allow forced reloads even if there are no reusable paths
  - Add 0263-RHBZ-1686708-nvme-hcil.patch
    * make nvme ids work like in upstream
  - Add 0264-RHBZ-1699441-de-series-config.patch
  - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129
changelog:
  - Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
    * only grab path information from necessary devices, and allow batch files.
  - Add 0266-RHBZ-1696817-fix-emc-checker.patch
    * fix detection of inactive snapshots
  - Add 0267-RHBZ-1661156-powermax-config.patch
  - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
    * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
  - Resolves: bz #1661156, #1696817, #1721855


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130
changelog:
  - Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
    * Fix issues in the mpathpersist speedup code
  - Resolves: bz #1721855


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131
changelog:
  - Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
    * The fix for 1721855 broke 1714506.
  - Resolves: bz #1714506


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc6
changelog:
  - Don't open devices as writeable if --clear-needs-check-flag is not set.
  - Fix cache metadata format version 2 superblock packing.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.2-1
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - Fix segfault when dump tools are given a tiny metadata file.
  - Fix -V exiting with 1.
  - Fix thin_check when running on XML dump instead of binary data.
  - Speed up free block searches.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.3-1
changelog:
  - Update to latest bugfix and documentation update release.
  - *_restore tools wipe superblock as a last resort.
  - Add thin_check --override-mapping-root.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-7
changelog:
  - prevent warning messages from %post section if selinux-policy is
    not installed (yet) (#1057522)
  - compile with xz compression support enabled (#1176214)
  - fix crash in sieve script compilation (#1177852)
  - wait with start after network-online target (#1209006)
  - build with tcp wrappers enabled (#1229164)
  - fixed userdb extra fields handling in passdb failure (#1234868)
  - fix valgrind option detection for make check (#1249625)
  - first valid regular user id is 1000 (#1280433)
  - fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
  - fixed header parsing when there were multiple same header names (#1224496)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-1
changelog:
  - dovecot updated to 2.2.36, pigeonhole to 0.4.24
  - fixed dsync not replicating sieve scripts (#1419426)
  - fix plugins incorrectly reporting epipe errors(#1489943)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-3
changelog:
  - fix global ACL directory configuration search path (#1630380)
  - update first/last_valid_gid range patch (#1630409)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-5
changelog:
  - fix CVE-2019-3814: improper certificate validation (#1674369)
  - fix CVE-2019-7524: buffer overflow in indexer-worker process resulting in privilege 
    escalation (#1700398)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-6
changelog:
  - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
    when scanning data in quoted strings, leading to out of bounds heap
    memory writes (#1741787)


author: Than Ngo <than@redhat.com> - 1:1.8.4-3
changelog:
  - backport upstream patches to fix issues:
     * Generated XML is malformed
     * Missing space before optional option in method argument list
     * Closing ) of function in function documentation is in wrong color
     * Segmentation fault parsing a fortran file


author: Than Ngo <than@redhat.com> - 1:1.8.5-4
changelog:
  - Resolves: #1483569, incorrect processing of code blocks
  - Resolves: #1724173 - CVE-2016-10245, cross-site scripting


author: Lukas Nykryn <lnykryn@redhat.com> - 033-560
changelog:
  - fips: removed false-positive 'FATAL: Module xxx not found' error message when kernel provides a generic algo for module
  - fips: ensure fs module for /boot is installed
  - iscsi: always popd, even if there is no iscsi device
  - Harden dracut against BASH_ENV environment variable
  - fips: check fips integrity just before mounting local filesystems in /sysroot


author: Eric Sandeen <sandeen@redhat.com> 1.42.9-8
changelog:
  - e4defrag: backwards-allocated files should be defragmented (#1176785)
  - tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
  - mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
  - libext2fs: prevent buffer overflows (#1293677)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-10
changelog:
  - libext2fs: don't ignore fsync errors (#1405049)
  - Fix nroff macro issue in chattr man page (#1429213)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-11
changelog:
  - libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
  - tune2fs: edit dire warning about check intervals (#1433233)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-13
changelog:
  - e2fsck: warn if checkinterval and broken_system_clock both set (#1365594)
  - e2fsprogs: fail to open 1k block size ext4 with bigalloc,meta_bg,^resize_inode (#1448019)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-14
changelog:
  - Various fixes and improvements (#1682935)
  - Automatically enable meta_bg to avoid failure when creating huge fs with small bs (#1608635)
  - don't ignore fsync errors in filefrag (#1451185)


author: Jan Synáček <jsynacek@redhat.com> - 1:24.3-21
changelog:
  - fix libjpeg detection fails with gcc7 (#1487557)
  - fix Emacs GUI Toolbar icons missing (#1477745)
  - fix hardening: TLS certificate warnings should be hard errors (#1403643)


author: Jack Magne <jmagne@redhat.com> - 1.1.0-34
changelog:
  - Resolves: Bug #1173774 - ESC Client does list 
  - the encryption and signing certs under the "Your Certificates" tab when an enrolled card is inserted.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-35
changelog:
  - Resolves: Bug #1176241 -  .redhat dir does not have the same permissions during manual and auto launch of ESC Client


author: Jack Magne <jmagne@redhat.com> - 1.1.0-36
changelog:
  - Resolves: Bug #1176241 -  .redhat dir does not have the same permissions during manual and auto launch of ESC Client
  - Minor additional fix.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-37
changelog:
  - Resolves: Bug #885898 - ESC incorrectly display Issuer information for a CAC smart card
  - Resolves: Bug 1070802 - missing -fstack-protector-strong


author: Jack Magne <jmagne@redhat.com> - 1.1.0-40
changelog:
  - Resolves: Bug #1466949, Relate: Bug #1523946 - [ppc64] ld switch to relro breaks GDB. This caused an rpmdiff failure.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-42
changelog:
  - Related: Bug# 1358500 - Segmentation fault happens when escd runs with a NULL display.
  - Resolve changelog entry error.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-43
changelog:
  - Resolves: Bug# 1688904 - ESC - HTTP GET Requests incorrectly Being Sent To TPS for Token Operations.


author: Marek Kasik <mkasik@redhat.com> - 3.28.2-3
changelog:
  - Fix patch fixing crash in EvMediaPlayerKeys
  - Fix building of comics backend with libarchive 3.1.2
  - Resolves: #1567186


author: Marek Kasik <mkasik@redhat.com> - 3.28.2-4
changelog:
  - Change requires as requested by RPMDiff
  - Check returned size for negative value (CovScan)
  - Resolves: #1567186


author: Marek Kasik <mkasik@redhat.com> - 3.28.2-8
changelog:
  - Do not free EvDocumentInfo in ev_window_save_print_settings(),
  - it is freed in EvDocument's destructor
  - Resolves: #1541358


author: Milan Crha <mcrha@redhat.com> - 3.28.5-6
changelog:
  - Add patch for RH bug #1753122 (GalA11yETableItem: Incorrect implementation of AtkObjectClass::ref_child())


author: Milan Crha <mcrha@redhat.com> - 3.22.7-7
changelog:
  - Add patch for RH bug #1504071 (Prefer SSL over STARTTLS for mail when both are set in GOA)
  - Add patch for RH bug #1476329 (Deadlock on exit under e-categories.c:finalize_categories())


author: Milan Crha <mcrha@redhat.com> - 3.28.2-1
changelog:
  - Update to 3.28.2
  - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
  - Resolves: #1575495


author: Milan Crha <mcrha@redhat.com> - 3.28.5-4
changelog:
  - Add patch for RH bug #1392567 (Sync CategoryList with mail Labels)
  - Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-18
changelog:
  - fence_rhevm: add RHEV v4 API support and auto-detection
    Resolves: rhbz#1402862
  - fence_azure_arm: use skip_shutdown feature
    Resolves: rhbz#1700544


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-26
changelog:
  - fence_mpath: fix watchdog reboot not triggered when multipath
    disconnected
    Resolves: rhbz#1751702


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-30
changelog:
  - fencing: only use inetX_only parameters for SSH based agents and
    fence_zvmip
    Resolves: rhbz#1722004


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-27
changelog:
  - fix CVE-2014-0207 - cdf_read_short_sector insufficient boundary check
  - fix CVE-2014-0237 - cdf_unpack_summary_info() excessive looping DoS
  - fix CVE-2014-0238 - CDF property info parsing nelements infinite loop
  - fix CVE-2014-3478 - mconvert incorrect handling of truncated pascal string
  - fix CVE-2014-3479 - fix extensive backtracking in regular expression
  - fix CVE-2014-3480 - cdf_count_chain insufficient boundary check
  - fix CVE-2014-3487 - cdf_read_property_info insufficient boundary check
  - fix CVE-2014-3538 - unrestricted regular expression matching
  - fix CVE-2014-3587 - fix cdf_read_property_info
  - fix CVE-2014-3710 - out-of-bounds read in elf note headers
  - fix CVE-2014-8116 - multiple denial of service issues (resource consumption)
  - fix CVE-2014-8117 - denial of service issue (resource consumption)
  - fix CVE-2014-9652 - out of bounds read in mconvert()
  - fix CVE-2014-9653 - malformed elf file causes access to uninitialized memory


author: Jan Kaluza <jkaluza@redhat.com> 5.11-32
changelog:
  - fix #1278737 - add support for Java 1.7 and 1.8
  - fix #1281723 - show full executable name for core
  - fix #1271636 - add support for detection of Python 2.7 byte-compiled files
  - fix #1278768 - comment out too-sensitive Pascal magic


author: Eric Garver <egarver@redhat.com> - 0.6.3-1
changelog:
  - rebase package to v0.6.3, include recent stable fixes
  - use QT4 patch for firewall-applet
  - remove cockpit service definition, cockpit package still ships their own
  - remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
  - remove nftables support


author: Eric Garver <egarver@redhat.com> - 0.6.3-2
changelog:
  - backport recent upstream stable fixes
  - backport fix to enable IP forwarding only if toaddr specified


author: Eric Garver <egarver@redhat.com> - 0.6.3-3
changelog:
  - backport recent upstream stable fixes
  - backport fix --remove-rules deleting all direct rules
  - backport fix unable to delete rich rule forward-port
  - backport fix forward-port for external zone hijacking internal zone
  - backport fix testsuite iptables locking


author: Richard Hughes <richard@hughsie.com> 1.0.1-1
changelog:
  - Rebase to 1.0.1, specifically the wip/hughsie/rhel75 branch which adds
    back the automake build system and lowers the required versions of deps.
  - This also un-neuters fwupd so that most of the plugins are functional,
    for instance allowing updates of Thunderbolt controllers and Logitech
    Unifying devices. However, the LVFS is still disabled.
  - Resolves: #1313086


author: Ray Strode <rstrode@redhat.com> - 3.28.2-15
changelog:
  - sync AllowMultipleSessionsPerUser patch from 7.6 branch
    Resolves: #1664353
  - Create dconf dirs by default
    Resolves: #1664284


author: Patsy Griffin <pfrankli@redhat.com> - 2.17-299
changelog:
  - Update glibc headers for Linux 4.0, 4.1 definitions and 
    Linux 4.2 netinet/in.h values. (#1579451)


author: Florian Müllner <fmuellner@redhat.com> - 3.28.1-3
changelog:
  - Fix a couple of regressions from the rebase:
    - add back classic overview style
    - update dash-to-dock to a compatible version
    Related: #1569717


author: Florian Müllner <fmuellner@redhat.com> - 3.28.1-7
changelog:
  - Add window-grouper extension
    Resolves: #1355845

  - Add disable-screenshield extension
    Resolves: #1643501


author: Debarshi Ray <rishi@fedoraproject.org> - 3.14.5-5
changelog:
  - Ensure that temporary accounts are really removed from the keyring and
    avoid a WARNING
  Resolves: #1261940


author: Ray Strode <rstrode@redhat.com> - 3.26.2-7
changelog:
  - Fix logic error in password expiration notification bubble
    Resolves: #1530659
    Related: 1314443


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-9
changelog:
  + gnome-settings-daemon-3.26.2-9
  - Revert automatic suspend after inactivity, it was rejected
  - Related: #1449171


author: Milan Crha <mcrha@redhat.com> - 3.28.1-6
changelog:
  - Resolves: #1460768 (Cannot hide desktop icons in classic mode)
  - Resolves: #1607839 (Invisible panel is made visible on click between Setting and Toggle button)


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.15.9-2
changelog:
  - 1069619 - Rebase to version 3.15.9 extension - solving bug 1346196 (/usr/lib/cups/filter/hpps uses python -B which is unknown), which is duplicate of bug 1202451


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.252-8.5
changelog:
  - Updated pci, usb and vendor ids
    Resolves: #1386133 #1424763
  - Removed module nx_crypto from blacklist on PowerPCs
    Resolves: #1264326


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.252-8.9
changelog:
  - Updated pci, usb, vendor ids and hwdb files
    Resolves: #1560493
  - Blacklisted sha{256,512}-mb modules
    Resolves: #1562114


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.252-9.5
changelog:
  - Fix URL for downloading hwdb files
  - Updated pci, usb, vendor ids and hwdb files
    Resolves: #1721908


author: Jarod Wilson <jarod@redhat.com> 17.1-3
changelog:
  - Grab latest stable-v17 fixes from upstream
  - Fix Provides/Obsoletes on removed libibcm
  - Fix Provides/Obsoletes on removed libehca
  - Straighten out SW parsing feature support for DPDK
  - Fix mlx5 rate-limiting support
  - Resolves: rhbz#1588096
  - Resovles: rhbz#1534856
  - Resolves: rhbz#1589525


author: Jarod Wilson <jarod@redhat.com> 17.2-2
changelog:
  - Restore SysV Initscripts ib ifup and ifdown helpers
  - Adjust MTU limit for IPoIB in datagram mode via ifup-ib
  - Resolves: rhbz#1593426
  - Resolves: rhbz#1593334


author: Jarod Wilson <jarod@redhat.com> 22-1
changelog:
  - Rebase to upstream rdma-core v22
  - Resolves: rhbz#1641921
  - Add mlx5 IB Device Memory support (MEMIC)
  - Resolves: rhbz#1644697
  - Add mlx5 Tunnel protocol RX decap/encap offload
  - Resolves: rhbz#1644709
  - Add mlx5 Tunnel protocol TX decap/encap offload
  - Resolves: rhbz#1644778
  - Add support for mlx5 infiniband flow counters
  - Resolves: rhbz#1644714
  - Add mlx5 DEVX interface
  - Resolves: rhbz#1644722
  - Add libbnxt_re support for SRQ
  - Resolves: rhbz#1570393


author: Jarod Wilson <jarod@redhat.com> 22.1-1
changelog:
  - Update to upstream v22.1 release with stable-v22 branch fixes
  - Add support for Broadcom 57500 RoCE adapter
  - Resolves: rhbz#1678274


author: Jarod Wilson <jarod@redhat.com> 22.4-1
changelog:
  - Update to v22.4 stable release
  - Support mlx5 scatter to CQE over DCT QP
  - Fix ibacm segfault on non-IB hardware
  - Resolves: rhbz#1715489
  - Resolves: rhbz#1712296


author: Richard Brantley <rbrantle@redhat.com> - 3.0.2-2
changelog:
  - Resolves BZ1498650, BZ1500008, BZ1501545, BZ1501552, BZ1501556, BZ1501561, BZ1501565, BZ1501566
  - Fixes version migration logic
  - Fixes symlink issues to old binary
  - Fixes short ID analysis for images and containers
  - Fixes Docker library detection
  - Fixes image and container detection
  - Fixes registration execution flow
  - Fixes --version flag to print to stdout and include additional versioning information
  - Includes Insights Core 3.0.3-1


author: Kyle Lape <klape@redhat.com> - 3.0.3-1
changelog:
  - RHEL 7 RPM now uses systemd service and timer instead of cron
  - Addition of IO and CPU cgroup constraints
  - Fixed memory cgroup constraint


author: Jakub Čajka <jcajka@redhat.com> - 2.4.8-1
changelog:
  - Resolves: #1182038 - [7.2 FEAT] iprutils package update - ppc64/ppc64le
  - Resolves: #1183460 - RHEL7.1 BE: iprutils: Set known zeroed after format


author: Sinny Kumari <skumari@redhat.com> - 2.4.11.1-1
changelog:
  - Resolves: #1274367 - [7.3 FEAT] iprutils package update
  - Resolves: #1297921 - IPR: Raid migration fails to kick while executing through command line


author: Sinny Kumari <skumari@redhat.com> - 2.4.12.1-1
changelog:
  - Resolves: #1364131 - Integrate various important bug fixes for iprutils in
    RHEL7.3 by updating iprutils to 2.4.12


author: Sinny Kumari <skumari@redhat.com> - 2.4.16.1-1
changelog:
  - Resolves: #1587834 - vpdupdate takes over an hour on system with 104 drive
  - Resolves: #1521052 - iprutils package update for POWER
  - Resolves: #1547891 - iprconfig unable to Download microcode on all applicable devices
  - Resolves: #1576013 - iprconfig tools shows wrong error message, while creating raid using RI SSDs and normal SSDs


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-12
changelog:
  - 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
  - 1624670 Login negotiation failed due to CHAP_N values do not match
            (rec update race condition)


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-17
changelog:
  - 1518367 boot from iSCSI not establishing all sessions persistently
  - 1667965 A manual restart of iscsi.service modifies records node.startup value


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab
changelog:
  - Update to latest upstream linux-firmware image for assorted netdrv updates
  - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - nvidia: update firmware for Pascal GPUs (rhbz 1625514)


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190225-70.git80dee31
changelog:
  - cxgb4: update firmware to revision 1.22.9.0 (rhbz 1671610)
  - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 (rhbz 1637996)
  - linux-firmware: Update firmware patch for Intel Bluetooth 8260 (rhbz 1649148)
  - qed: Add 8.37.7.0 firmware image (rhbz 1654809)
  - liquidio: fix GPL compliance issue (rhbz 1622521)
  - Update Intel OPA hfi1 firmware (rhbz 1637240)
  - qed: Add firmware 8.37.7.0 (rhbz 1643554)


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
  - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)


author: Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b
changelog:
  - Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
  - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
  - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package


author: Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update bnx2x firmware to latest upstream (rhbz 1720386)


author: Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.201-2.6.17pre01.0
changelog:
  - Bump to 2.6.17pre01.
  - Add support for icedtea_snapshot so we can build pre-releases.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.211-2.6.17.1
changelog:
  - Bump to 2.6.17.
  - Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
  - Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.211-2.6.17.2
changelog:
  - Synchronise Requires with java-1.8.0-openjdk
  - Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
  - Add libjavagtk.so and libmawt.so to _privatelibs
  - Remove duplicate fontconfig build requirement
  - Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
  - Add _isa to NSS requirements
  - Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
  - Resolves: rhbz#1608957


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.231-2.6.19.1
changelog:
  - Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
  - Fix fsg.sh to fail if patching fails.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.241-2.6.20.1
changelog:
  - Bump to 2.6.20 and OpenJDK 7u241-b01.
  - Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Drop JDK-8226318/RH1738637 which is now included upstream.
  - Resolves: rhbz#1753423


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-3
changelog:
  - Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
    decode/encode process alters original data (cfu)
  - Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.7-2
changelog:
  - Bugzilla #1747967 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-8
changelog:
  - Powerdevil: do not notify about a non existent action
    Resolves: bz#1289149
  - Plasma taskmanager: close context menu when task is closed
    Resolves: bz#1262603


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-10
changelog:
  - Fix grouping of tasks in taskmanager applet
    Resolves: bz#1348917
  - Fix unlocking of kscreenlocker, unlock it just once
    Resolves: bz#1333441


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-13
changelog:
  - Sanitise notification HTML
    Resolves: bz#1568853

  - Increase cpu buffer size in ksysguard
    Resolves: bz#1611762


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-14
changelog:
  - Do not show disabled buttons in Plastik decoration theme
    Resolves: bz#1677641

  - Taskmanager: dismiss group when application is closed and there is enough space
    Resolve: bz#1698048


author: Jan Grulich <jgrulich@redhat.com> - 6:4.14.8-9
changelog:
  - Do not fork konsole process when opening terminal from apps using dolphin-part
    Resolves: bz#1710362


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-20
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1510058


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-23
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1619889.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-26
changelog:
  - weak-modules: handle independent modules in one run
  - weak-modules: use asterisk for kernel version in sandbox
    Resolves: rhbz#1695547


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-28
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1774925


author: Siteshwar Vashisht <svashisht@redhat.com> - 20120801-37
changelog:
  - Add configuration option to enable signal bubbling for backward compatibility
    Resolves: #1484937


author: Kamil Dudka <kdudka@redhat.com> - 20120801-137
changelog:
  - Increase the release number by 100 to make sure it stays higher than in RHEL-6
    Related: #1484937


author: John Dennis <jdennis@redhat.com> - 2.4.1-7
changelog:
  - Add ECP support, brings Lasso up to current upstream tip + revised ECP patches
    Resolves: #1205342


author: John Dennis <jdennis@redhat.com> - 2.4.1-8
changelog:
  - Add explicit minimum dependency on glib2 2.42,
    for some reason RPM is not automatically detecting the dependency
    Resolves: #1254989


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3
changelog:
  - Resolves: #1634267 - ECP signature check fails with
                         LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                         instead of response


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4
changelog:
  - Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                         AuthnRequest populated with SP
                         AssertionConsumerServiceURL when ECP workflow
                         is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5
changelog:
  - Resolves: #1719014 - Expired certificate prevents tests from running
  - Actually apply the patch file for the previous build
  - Related: #1730009 - lasso includes "Destination" attribute in SAML
                         AuthnRequest populated with SP
                         AssertionConsumerServiceURL when ECP workflow
                         is used which leads to IdP-side errors


author: Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6
changelog:
  - Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
  - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
  - Added RFE - lftp configurations for restricting each SSL/TLS 
    version (#1182987)
  - Fixed bogus dates of this SPEC


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp


author: Michal Ruprich - 4.4.8-10
changelog:
  - Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                      - Patch edited so that it corresponds to upstream


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11
changelog:
  - Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
  - Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-12
changelog:
  - Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.10-1
changelog:
  - Only enable partition size tolerance with alignment (vpodzime)
  - Limit the requested partition size to maximum possible (vpodzime)
  - Do not verify vfat FS' size after generic resize (vpodzime)
  - Specify tolerance for partition size (kailueke)
  - Only use the exact constraint if not using any other (vpodzime)
  - Check resulting FS size in tests for generic FS resize (vpodzime)
  - Query setting FS label support and generic relabeling (kailueke)
  - Do not strictly require all FS utilities (vpodzime)
  - Compile everything with the C99 standard (vpodzime)
  - Add partition resize function (kailueke)
  - Generic Check and Repair Functions (kailueke)
  - Query functions for FS resize and repair support (kailueke)
  - Update the project/source URL in the spec file (vpodzime)
  - Add functions for opening/closing TrueCrypt/VeraCrypt volumes (vpodzime)
  - Adapt to a change in behaviour in new libmount (vpodzime)
  - Try RO mount also if we get EACCES (vpodzime)
  - Size in bytes for xfs_resize_device (kailueke)
  - src/plugins/Makefile.am: Remove hard coded include path in /usr prefix (tristan.vanberkom)
  - Fixed include for libvolume_key.h (tristan.vanberkom)
  - Ignore parted warnings if possible (squimrel)
  - bcache tests: Remove FEELINGLUCKY checks (tasleson)
  - kbd.c: Code review corrections (tasleson)
  - kbd.c: Make bd_kbd_bcache_create work without abort (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.11-1
changelog:
  - Make the KbdZRAMDevicesTestCase inherit from KbdZRAMTestCase (vpodzime)
  - Allow non-source directory builds (kailueke)
  - Add a way to disable runtime dependency checks (vpodzime)
  - Link to GObject even if no plugin is activated (kailueke)
  - Skip zram tests on Rawhide (vpodzime)
  - Keep most utilities available for tests (vpodzime)
  - Use new libmount function to get (un)mount error message (vtrefny)
  - Update the documentation URL (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.12-1
changelog:
  - Own directories /etc/libblockdev and /etc/libblockdev/conf.d (vtrefny)
  - Wait for resized partition (kailueke)
  - Make sure the device is opened for libparted (vpodzime)
  - Fix label check in swap_test (vtrefny)
  - Use "run_tests" script for running tests from Makefile (vtrefny)
  - Add a script for running tests (vtrefny)
  - Tests: Move library initialization to setUpClass method (vtrefny)
  - Stop skipping FAT resize tests on rawhide (vtrefny)
  - Close filesystem before closing the partition during FAT resize (vtrefny)
  - Use mountpoint for "xfs_info" calls (vtrefny)
  - Use libmount cache when parsing /proc/mounts (vtrefny)
  - Add some space for the CI status (vpodzime)
  - Confirm the force when creating PVs in FS tests (vpodzime)
  - Skip vgremove tests on 32bit Debian (vtrefny)
  - Fix names of backing files in tests (vtrefny)
  -  Fix checking for available locales (vtrefny)
  - Skip dependency checking in mpath tests on Debian (vtrefny)
  - Skip zRAM tests on Debian (vtrefny)
  - Skip the test for device escrow on Debian too (vtrefny)
  - Skip free region tests on Debian too (vtrefny)
  - Fix redirecting command output to /dev/null in tests (vtrefny)
  - Try harder to unmount devices in test cleanup (vtrefny)
  - Require only plugins that are needed for given test (vtrefny)
  - Try to get distribution info from "PrettyName" if "CPEName" isn't available (vtrefny)
  - Use -ff when creating PVs in FS tests (vpodzime)
  - Sync spec with downstream (vpodzime)


author: Dan Horák <dhorak@redhat.com> - 3.0.13-16
changelog:
  - Drop ppc64le from the multilib list
  - Use additional BR: only in ppc64le build
  - Resolves: RHBZ1116945


author: Fabiano Fidêncio <fidencio@redhat.com> 0.3.3-2
changelog:
  - Fix crash when VM has several ISO domains
    Resolves: rhbz#1274356
  - Add OvirtProxy::sso-token support for oVirt 4.0
    Resolves: rhbz#1324457


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-3
changelog:
  - Add upstream patch fixing unwanted authentication dialog for foreign menu
    when using remote-viewer ovirt://
    Resolves: rhbz#1346256


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-4
changelog:
  - Add upstream patch forcing use of the older v3 REST API as we don't support
    yet the v4 API
    Resolves: rhbz#1346215


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.3-5
changelog:
  - New storage format added in oVirt 4.1
    Resolves: rhbz#1346215
  - Check if operation was cancelled before disconnecting signal
    Resolves: rhbz#1431275


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.4-1
changelog:
  - Rebase to latest 0.3.4 upstream release. Still quite a few patches as
    there was no 0.3.5 release yet
    Resolves: rhbz#1584266


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.4-2
changelog:
  - Parse XML nodes automatically
    Related: rhbz#1427467
  - Set detailed error message for async call
    Related: rhbz#1427467


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.4-4
changelog:
  - Use certificate data from XML
    Resolves: rhbz#https://bugzilla.redhat.com/show_bug.cgi?id=1402909


author: Lukas Nykryn <lnykryn@redhat.com> - 219-67.1
changelog:
  - return error value on failure (#1729226)
  - revert local changes made during backport of the test (#1729226)
  - core/timer: Prevent timer looping when unit cannot start (#1729230)
  - core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
  - core: rerun GC logic for a unit that loses a reference (#1729228)
  - pid1: rename unit_check_gc to unit_may_gc (#1729228)
  - pid1: include the source unit in UnitRef (#1729228)
  - pid1: fix collection of cycles of units which reference one another (#1729228)
  - pid1: free basic unit information at the very end, before freeing the unit (#1729228)
  - pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
  - service: relax PID file symlink chain checks a bit (#8133) (#1729414)
  - path-util: fix more path_is_mount e792e890f fallout (#1279231)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-69
changelog:
  - revert local changes made during backport of the test (#1726785)
  - core: add a "Requires=" dependency between units and the slices they are located in (#1718953)
  - core: rerun GC logic for a unit that loses a reference (#1718953)
  - pid1: rename unit_check_gc to unit_may_gc (#1718953)
  - pid1: include the source unit in UnitRef (#1718953)
  - pid1: fix collection of cycles of units which reference one another (#1718953)
  - pid1: free basic unit information at the very end, before freeing the unit (#1718953)
  - pid1: properly remove references to the unit from gc queue during final cleanup (#1718953)
  - core/timer: Prevent timer looping when unit cannot start (#1710302)
  - service: relax PID file symlink chain checks a bit (#8133) (#1724420)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-70
changelog:
  - udev-rules: Add rule for /dev/kfd (#1659516)
  - core: exclude .slice units from "systemctl isolate" (#1745199)
  - udev/scsi_id: fix incorrect page length when get device identification VPD page (#1635945)
  - core: when determining whether a process exit status is clean, consider whether it is a command or a daemon (#1560417)
  - units: add Wants=initrd-cleanup.service to initrd-switch-root.target (#4345) (#1560417)
  - units: make sure initrd-cleanup.service terminates before switching to rootfs (#1560417)
  - core: tiny tweak for cgroup trimming during manager_free() (#1630378)
  - process: an empty environment block should be returned as such (#1685648)
  - core: make sure initrd-switch-root command survives PID1's killing spree (#4730) (#1754053)
  - systemctl: always avoid being killed when doing switch-root (#1754053)
  - units: drop KillMode= from initrd-switch-root.service (#1754053)
  - systemctl: ignore SIGTERM after switch root (#1754053)
  - units: restore Before dependencies for systemd-vconsole-setup.service (#1754053)
  - core: reduce the number of stalled PIDs from the watched processes list when possible (#1501796)
  - timedate: use gmtime_r() and localtime_r() (#1694605)
  - sd-bus: stop using the result of an assignment as an operand of && (#1694605)
  - journal-upload: add asserts that snprintf does not return an error (#1694605)
  - analyze: actually select longest activated-time of services (#1694605)
  - pid1: remove unnecessary error reassignment (#1694605)
  - core: drop unnecessary condition (#1694605)
  - import: drop unnecessary condition (#1694605)
  - journal-verify: add comment and silence LGTM warning (#1694605)
  - journal: drop redundant condition (#1694605)
  - lldp: set correct state for processing (#1694605)
  - sd-bus: fix implicit downcast of bitfield reported by LGTM (#1694605)
  - tree-wide: use 'signed int' instead of 'int' for bit field variables (#1694605)
  - machinectl: check correct FD for a return value (#1694605)
  - shared/install: avoid overwriting 'r' counter with a partial result (#1694605)
  - systemctl: set_put() can't return (-)EEXIST (#1694605)
  - systemctl: remove dead check (#1694605)
  - journal-gateway: explicitly declare local variables (#1694605)
  - journal-gateway: use localStorage["cursor"] only when it has valid value (#1694605)
  - lgtm: ignore files dropped in upstream (#1694605)
  - lgtm: suppress several constant comparisons (#1694605)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-71
changelog:
  - core: add a new unit_needs_console() call (#1524359)
  - core: rework how we count the n_on_console counter (#1524359)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-72
changelog:
  - service: introduce protocol error type (#1733998)
  - service: fix main processes exit behavior for type notify services (#1733998)
  - service: go through stop_post on failure (#4770) (#1733998)
  - Call getgroups() to know size of supplementary groups array to allocate (#1743230256 KB)
  - udev: introduce CONST key name (#1748051)


author: Michal Židek <mzidek@redhat.com> - 1.16.4-28
changelog:
  - Resolves: rhbz#1206221 - sssd should not always read entire autofs map from
                             ldap


author: Michal Židek <mzidek@redhat.com> - 1.16.4-29
changelog:
  - Resolves: rhbz#1713352 - Implicit files domain gets activated when no
                             sssd.conf present and sssd is started


author: Michal Židek <mzidek@redhat.com> - 1.16.4-30
changelog:
  - Resolves: rhbz#1530741 - Trusted domain user logins succeed after using
                             ipa trustdomain-disable


author: Michal Židek <mzidek@redhat.com> - 1.16.4-31
changelog:
  - Resolves: rhbz#1746878 - Let IPA client read IPA objects via LDAP and not
                             a extdom plugin when resolving trusted users and
                             groups


author: Michal Židek <mzidek@redhat.com> - 1.16.4-32
changelog:
  - Resolves: rhbz#1530741 - Trusted domain user logins succeed after using ipa
                             trustdomain-disable


author: Michal Židek <mzidek@redhat.com> - 1.16.4-34
changelog:
  - Resolves: rhbz#1768404 - automount on RHEL7 gives the message
                             'lookup(sss): setautomntent: No such file or
                             directory'


author: Michal Židek <mzidek@redhat.com> - 1.16.4-37
changelog:
  - Resolves: rhbz#1784620 - Force LDAPS over 636 with AD Access Provider
  - just bumping the version to fix generated dates in man pages


author: Phil Sutter <psutter@redhat.com> [1.0.6-5.el7]
changelog:
  - expr: lookup: give support for inverted matching (Phil Sutter) [1441084]
  - tests: stricter string attribute validation (Phil Sutter) [1441084]


author: Phil Sutter <psutter@redhat.com> [1.0.6-6.el7]
changelog:
  - chain: dynamically allocate name (Phil Sutter) [1353320]
  - src: Avoid returning uninitialized data (Phil Sutter) [1353319]
  - expr/limit: Drop unreachable code in limit_to_type() (Phil Sutter) [1353312]
  - ruleset: Initialize ctx.flags before calling nftnl_ruleset_ctx_set() (Phil Sutter) [1353322]
  - src: Fix nftnl_*_get_data() to return the real attribute length (Phil Sutter) [1353322]
  - expr/ct: prevent array index overrun in ctkey2str() (Phil Sutter) [1353309]
  - utils: Don't return directly from SNPRINTF_BUFFER_SIZE (Phil Sutter) [1353311]
  - set: prevent memleak in nftnl_jansson_parse_set_info() (Phil Sutter) [1353311]


author: Phil Sutter <psutter@redhat.com> [1.0.8-2.el7]
changelog:
  - trace: Check return value of mnl_attr_parse_nested() (Phil Sutter) [1510538]
  - set_elem: Don't return garbage in nftnl_set_elems_parse() (Phil Sutter) [1510538]
  - ruleset: Avoid reading garbage in nftnl_ruleset_cb() (Phil Sutter) [1510538]
  - object: Avoid returning garbage in nftnl_obj_do_parse() (Phil Sutter) [1510538]
  - gen: Remove a pointless call to mnl_nlmsg_get_payload() (Phil Sutter) [1510538]
  - data_reg: Add a missing break in nftnl_data_reg_snprintf (Phil Sutter) [1510538]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.1.0-3
changelog:
  - Resolves: rhbz#1712458 - [machines] The function of 'Auto-detect guest
                             operating system' is not available on rhel 7.7


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.1.0-4
changelog:
  - Resolves: rhbz#1727842 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5
changelog:
  - display also first packet when capturing in cooked mode (#1176612)
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is account for


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6
changelog:
  - libpcap now correctly recognizes Netlink datalink type (#1031974)
  - fix vlan tagged packet filtering (#1079525)


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-2
changelog:
  Detect IPC Shared memory corruption in peek as well as read. Prevents
    the mainloop from spinning if multithreaded IPC (which is currently 
    not supported) is attempted without locking.
    Resolves: rhbz#1422454


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-3
changelog:
  Allow IPC system to use filesystem sockets instead of abstract
    sockets if a configuration file exists.
    Resolves: rhbz#1446254


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-4
changelog:
  Revert git patch 189ca28 which caused problems with pacemaker CIB
    closing down.
    Resolves: rhbz#1459276


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-5
changelog:
  Put backpatch 189ca28 as it's not the culprit
    
    Don't truncate IPC files in the client as it can cause servers to crash.
    I've also had to (for this release) disable one of the tests as it checks
    for truncated files.
    Resolves: rhbz#1459276


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-7
changelog:
  Prevent crashes when client truncates SHM segment
    I've reverted the patch for 1459276 which is no longer needed as this
    is a proper fix.
    Resolves: rhbz#1473695


author: Paul Moore <pmoore@redhat.com> - 2.2.1-1
changelog:
  - Removed '--disable-static' from the build to ensure that scmp_sys_resolver
    is self contained and resolve RPATH issues


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-10
changelog:
  - Add missing av_permission values (#1025931)
  - Set an appropriate errno in booleans.c (#1402140)
  - Change matchpathcon usage to match with matchpathcon manpage (#1412797)


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.25-2
changelog:
  - Patch to use system libgsm instead of a bundled copy.
  - Make main package dep in -devel ISA qualified.
  - Drop -octave Provides (not actually built with octave > 3.0).
  - Don't build throwaway static lib.
  - Run test suite during build.


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.8-1
changelog:
  - Rebase to libtalloc 2.1.8
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.9-1
changelog:
  - Rebase to libtalloc 2.1.9
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.10-1
changelog:
  - Rebase to libtalloc 2.1.10
  - Resolves: rhbz#1470053 - Rebase libtalloc to enable samba rebase to
                             version 4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.14-1
changelog:
  - Rebase to libtalloc 2.1.14
  - Resolves: rhbz#1658747 - Rebase libtalloc to version 2.1.14 for Samba


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-1
changelog:
  - Rebase to libtalloc 2.1.16
  - Resolves: rhbz#1736005 - Rebase libtalloc to version 2.1.16 for Samba


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.6-2
changelog:
  - Resolves: rhbz#1241015 - tdb deadlocks if you acquire allrecord_lock
                             and start two traverses


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.12-2
changelog:
  - Resolves: rhbz#1441231 - The tdb robust mutexes runtime check is not thread safe and ends in a deadlock


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.15-1
changelog:
  - Resolves: rhbz#1470049 - Rebase libtdb to enable samba rebase to
                             version 4.7.x


author: Xin Long <lxin@redhat.com> - 1.25-5
changelog:
  - Added patch to escape some sensitive characters [1383997]
  - Added patch to check port link_up when a port is added for lb runner
    [1393430]


author: Xin Long <lxin@redhat.com> - 1.27-5
changelog:
  - Added patch to fix runner.sys_prio default in man docs [1533813]
  - Added patch to empty LDFLAGS before checking for libnl3 in configure.ac [1533847]
  - Added patch to not crash when trying to print unregistered device name [1563155]


author: Xin Long <lxin@redhat.com> - 1.27-7
changelog:
  - Added an option to force log output to stdout, stderr or syslog [1596917]
  - Fixed s32/u32 data storage on big endian [1545574]
  - Documented ARP Ping link_watch.vlanid option [1645169]
  - Sent LACPDU when port state transitions from DEFAULT to CURRENT [1645169]


author: Xin Long <lxin@redhat.com> - 1.29-1
changelog:
  - man teamd.conf: update some parameter default values [1732586]
  - 1.29 release
  - teamd: improve the error output for non-integer port prio
  - teamd: return 0 if tdport doesn't exist in teamd_config_port_set
  - teamd: add port_master_ifindex_changed for link_watch_port_watch_ops [1720137]
  - initscripts: fix if/fi align
  - teamd: fix a json object memleak in get_port_obj() [1704451]
  - libteam: set netlink event socket as non-blocking [1680655]
  - libteam: double NETLINK_RCVBUF to fix -ENOMEM error
  - teamd: add a default value 1000 for link_watch.interval
  - teamd: use enabled option_changed to sync enabled to link_up for lb runner [1629670]
  - teamd: tdport has to exist if item->per_port is set in __find_by_item_path
  - teamd: remove port if adding fails
  - teamd: lacp: update port state according to partner's sync bit
  - man: fix runner.min_ports default value
  - teamd: lw: nsna_ping: only send ns on enabled port [1730558]
  - teamd: lw: arp_ping: only check arp reply message
  - teamd: config: update local prio to kernel [1714440]
  - teamnl: update help message


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-24
changelog:
  - qemu: Prefer nvdimmPath over hugepages for memory-backend-file (rhbz#1724980)
  - docs: snapshot: Encourage people ot use disk 'target' to refer to disks (rhbz#1584682)
  - docs: schemas: Add 'seclabel' for external disk snapshot (rhbz#1584682)
  - tests: domainsnapshotxml2xml: make 'disk-seclabel' test operational (rhbz#1584682)
  - util: storage: Clean up label use in virStorageFileGetMetadataInternal (rhbz#1731329)
  - util: storage: Don't leak metadata on repeated calls of virStorageFileGetMetadata (rhbz#1731329)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-25
changelog:
  - qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1731783)
  - qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1731783)
  - qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1731783)
  - qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1731783)
  - qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1731783)
  - qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1731783)
  - qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1731783)
  - qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1731783)
  - qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1731783)
  - qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1731783)
  - qemu: Fix crash on incoming migration (rhbz#1731783)
  - util: storage: Refactor logic for using virStorageFileGetBackendForSupportCheck (rhbz#1724808)
  - util: storage: Allow checking whether virStorageFileCreate is supported (rhbz#1724808)
  - util: Export virStorageFileSupportsBackingChainTraversal (rhbz#1724808)
  - qemu: Allow skipping some errors in qemuDomainStorageOpenStat (rhbz#1724808)
  - util: storagefile: Don't report errors from virStorageSourceUpdatePhysicalSize (rhbz#1724808)
  - qemu: driver: Improve error suppression in qemuDomainStorageUpdatePhysical (rhbz#1724808)
  - qemu: Allow suppressing errors from qemuStorageLimitsRefresh (rhbz#1724808)
  - qemu: Don't report some ignored errors in qemuDomainGetStatsOneBlockFallback (rhbz#1724808)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-26
changelog:
  - conf: make arg to virDomainNetGetActualVirtPortProfile() a const (rhbz#1502754)
  - qemu: move runtime netdev validation into a separate function (rhbz#1502754)
  - qemu: call common NetDef validation for hotplug and device update (rhbz#1502754)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-27
changelog:
  - conf: utility function to update entry in def->nets array (rhbz#1558934)
  - spec: Fix permissions of /var/run/libvirt/qemu (rhbz#1738693)
  - RHEL: virscsi: Check device type before getting it's /dev node name (rhbz#1754241)
  - RHEL: virscsi: Support TAPEs in virSCSIDeviceGetDevName() (rhbz#1754241)
  - RHEL: virscsi: Introduce and use virSCSIDeviceGetUnprivSGIOSysfsPath() (rhbz#1754241)
  - RHEL: virutil: Accept non-block devices in virGetDeviceID() (rhbz#1754241)
  - virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1759904)
  - test: Introduce virnetdevopenvswitchtest (rhbz#1759904)
  - vircommand: Separate mass FD closing into a function (rhbz#1759904)
  - virCommand: use procfs to learn opened FDs (rhbz#1759904)
  - util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1759904)
  - util: Avoid possible error in virCommandMassClose (rhbz#1759904)
  - RHEL: qemuSetUnprivSGIO: Actually use calculated @sysfs_path to set unpriv_sgio (rhbz#1754241)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-28
changelog:
  - domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1741782)
  - domain_conf: Relax SCSI addr used check (rhbz#1741782)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-29
changelog:
  - qemu: Forcibly mknod() even if it exists (rhbz#1752978)
  - qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-30
changelog:
  - nwfilter: Remove redundant check if object exists (rhbz#1766475)
  - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-31
changelog:
  - process: wait longer on kill per assigned Hostdev (rhbz#1771204)
  - process: wait longer 5->30s on hard shutdown (rhbz#1771204)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32
changelog:
  - qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
  - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-1
changelog:
  - upstream release of 2.9.1
  - a couple more API entry point
  - compatibility with python3
  - a lot of bug fixes


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-6
changelog:
  - Fix missing entities after CVE-2014-3660 fix
  - CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
  - Fix regressions introduced by CVE-2014-0191 patch


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-6.2
changelog:
  - Fix a series of CVEs (rhbz#1286496)
  - CVE-2015-7941 Stop parsing on entities boundaries errors
  - CVE-2015-7941 Cleanup conditional section error handling
  - CVE-2015-8317 Fail parsing early on if encoding conversion failed
  - CVE-2015-7942 Another variation of overflow in Conditional sections
  - CVE-2015-7942 Fix an error in previous Conditional section patch
  - Fix parsing short unclosed comment uninitialized access
  - CVE-2015-7498 Avoid processing entities after encoding conversion failures
  - CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
  - CVE-2015-5312 Another entity expansion issue
  - CVE-2015-7499 Add xmlHaltParser() to stop the parser
  - CVE-2015-7499 Detect incoherency on GROW
  - CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
  - CVE-2015-8242 Buffer overead with HTML parser in push mode
  - CVE-2015-1819 Enforce the reader to run in constant memory


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.9.1-6.3
changelog:
  - Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
  - Bug 763071: Heap-buffer-overflow in xmlStrncat <https://bugzilla.gnome.org/show_bug.cgi?id=763071> (CVE-2016-1834)
  - Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup <https://bugzilla.gnome.org/show_bug.cgi?id=757711> (CVE-2016-1840)
  - Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal <https://bugzilla.gnome.org/show_bug.cgi?id=758588> (CVE-2016-1838)
  - Bug 758605: Heap-based buffer overread in xmlDictAddString <https://bugzilla.gnome.org/show_bug.cgi?id=758605> (CVE-2016-1839)
  - Bug 759398: Heap use-after-free in xmlDictComputeFastKey <https://bugzilla.gnome.org/show_bug.cgi?id=759398> (CVE-2016-1836)
  - Fix inappropriate fetch of entities content (CVE-2016-4449)
  - Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
  - Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
  - Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
  - Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
  - Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
  - Avoid building recursive entities (CVE-2016-3627)
  - Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
  - More format string warnings with possible format string vulnerability (CVE-2016-4448)


author: David King <dking@redhat.com> - 2.9.1-6.4
changelog:
  - Fix CVE-2015-8035 (#1595697)
  - Fix CVE-2018-14404 (#1602817)
  - Fix CVE-2017-15412 (#1729857)
  - Fix CVE-2016-5131 (#1714050)
  - Fix CVE-2017-18258 (#1579211)
  - Fix CVE-2018-1456 (#1622715)


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-10
changelog:
  - fix #1192936 - provide diagnostic in case log does not need rotating
  - fix #1321980 - do not exit if status file is corrupted


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-13
changelog:
  - fix #1393247 - migration of state file from previous versions of logrotate
  - fix #1374331 - preserve SELinux context with 'compress' and 'sharedscripts'
  - fix #1377335 - make 'createolddir' preserve sticky bit
  - fix #1369438 - heap buffer overflow when using long date format
  - fix #1375638 - make olddir respect the missingok flag


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-14
changelog:
  - fix #1381719 - make /var/lib/logrotate/logrotate.status the default state file
  - fix #1387533 - make 'su' directive accept usernames starting with digits


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-15
changelog:
  - fix #1483800 - update references to project page
  - fix #1472984 - improve the error message for bad config file mode
  - fix #1465720 - trigger weekly rotations more predictably
  - fix #1461907 - make 'copy' and 'copytruncate' work together


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-18
changelog:
  - fix #1680436 - do not treat errors in reading configuration as fatal
  - fix #1631218 - rename already existing file


author: Brian C. Lane <bcl@redhat.com> 19.7.19-1
changelog:
  - Add documentation for --dracut-arg to lorax.1 (bcl)
    Related: rhbz#1452220
  - Add the dracut options to the lorax help output (bcl)
    Related: rhbz#1452220


author: Brian C. Lane <bcl@redhat.com> 19.7.20-1
changelog:
  - Add cancel_func to virt and novirt_install functions (bcl)
    Resolves: rhbz#1659129
  - lorax: Move default tmp dir to /var/tmp/lorax (bcl)
    Resolves: rhbz#1668520
  - New cli test covering basic compose commands (atodorov) (atodorov)
  - Execute bash tests for composer-cli (atodorov) (atodorov)
  - Add pylint testing (bcl) (bcl)


author: Brian C. Lane <bcl@redhat.com> 19.7.21-1
changelog:
  - Do not include /usr/bin/delv (bcl)
    Resolves: rhbz#1688767
  - Remove SELinux Permissive checks (bcl)
    Resolves: rhbz#1654795
  - Remove lorax-composer tests (bcl)
    Resolves: rhbz#1679798


author: Brian C. Lane <bcl@redhat.com> 19.7.22-1
changelog:
  - Improve logging for template syntax errors (bcl)
    Related: rhbz#1689314
  - Add extra boot args to the livemedia-creator iso templates (bcl)
    Resolves: rhbz#1689314
  - Use hd:LABEL= for inst.stage2 on ppc (bcl)
    Resolves: rhbz#1402328
  - Don't remove chmem and lsmem from install.img (bcl)
    Resolves: rhbz#1511358


author: Brian C. Lane <bcl@redhat.com> 19.7.25-1
changelog:
  - lorax: Add --rootfs-size (bcl)
    Resolves: rhbz#1715116
  - lorax: pass size from Lorax.run to create_runtime (bcl)
    Related: rhbz#1715116
  - Fix path to generic.prm (jstodola)
    Resolves: rhbz#1712491


author: Petr Oros <poros@redhat.com> - B.02.18-8
changelog:
  - Proper detect vendor_id/device_id for virtual functions
  - Sync SMBIOS with latest specification
  - Resolves: #1445473


author: Lianbo Jiang <lijiang@redhat.com> - B.02.18-14
changelog:
  - Add a class 'nvme' for NVMe devices
  - Fix lshw crashes with SEGV in privileged containers
  - Display proper logical name of network device


author: Petr Machata <pmachata@redhat.com> - 0.7.91-12
changelog:
  - Add upstream fix for a bug in labeling PLT slots
    (ltrace-0.7.91-x86-plt_map.patch,
    ltrace-0.7.91-x86-unused_label.patch)
  - Add upstream fixes for tracing multi-threaded processes without -f
    (ltrace-0.7.91-multithread-no-f-1.patch,
    ltrace-0.7.91-multithread-no-f-2.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-13
changelog:
  - Fix system_call_params.exp and system_calls.exp for aarch64.
    (#1225550)
  - xfail part of trace-irelative.exp for aarch64, fix trace-clone
    for aarch64 (#1225568)


author: Pavel Šimerda <psimerda@redhat.com> - 3:2.1.15-23
changelog:
  - Resolves: #1232749 - fix bad subject of the welcome email when creating list
    using newlist command


author: Nikola Forró <nforro@redhat.com> - 7.6.2-1
changelog:
  - Upload new tarball
    related: #1592800
  - remove bug fixed in original component: #1147562 (socat)
  - perf_event_open.2: sync with upstream
    resolves: #1619272
  - resolv.conf.5: document no-reload (RES_NORELOAD) option
    resolves: #1598288
  - proc.5: document missing fields in /proc/[pid]/smaps and /proc/[pid]/status
    resolves: #1607318


author: Nikola Forró <nforro@redhat.com> - 7.7.0-1
changelog:
  - Upload new tarball
  - name_to_handle_at.2, open_by_handle_at.2: add new manpages
    resolves: #1635584
  - execve.2: document EAGAIN error
    resolves: #1642394


author: Nikola Forró <nforro@redhat.com> - 7.7.1-1
changelog:
  - Upload new tarball
    resolves: #1669129
  - remove bug fixed in original component: #1508363 (cyrus-imapd)


author: Nikola Forró <nforro@redhat.com> - 7.7.2-1
changelog:
  - Upload new tarball
    related: #1669129
  - remove bug fixed in original component: #1538499 (iproute)
  - remove bug fixed in original component: #1543420 (iproute)


author: Nikola Forró <nforro@redhat.com> - 7.7.3-1
changelog:
  - Upload new tarball
    related: #1669129
  - remove bug fixed in original component: #1274949 (usermode)


author: Nikola Forró <nforro@redhat.com> - 7.8.0-1
changelog:
  - Upload new tarball
    resolves: #1739400
  - remove bug fixed in original component: #1508018 (cups-filters)
  - core.5: RLIMIT_CORE is not enforced when piping core dump to a program
    resolves: #1705157
  - mmap.2: fix EINVAL conditions
    resolves: #1595662
  - resolv.conf.5: update information about search list
    resolves: #1730803
  - adcli.8: extend description of adcli update --add-samba-data
    resolves: #1665794
  - iperf3.1: remove unsupported options
    resolves: #1589421
  - paperconf.1, papersize.5: fix grammar mistakes
    resolves: #1733904


author: John Dennis <jdennis@redhat.com> - 0.13.1-1
changelog:
  - Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
  - Adds the following upstream bug fixes on top of 0.13.1:
    * ee97812 Add Mellon User Guide
    * daa5d1e If no IdP's are defined explicitly log that fact
    * c291232 Make MellonUser case-insensitive.
    * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
    * 5c5ed1d Fix segmentation fault with POST field without a value.
    * 4c924d9 Fix some log message typos
    * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
      show both the expected and received values.
  - Add new mellon user guide to installed docdir


author: John Dennis <jdennis@redhat.com> - 0.13.1-2
changelog:
  - Resolves: rhbz#1481330 Add diagnostic logging
  - Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
    signature method used to sign SAML messages sent by Mellon.
    Defaults to original sha1.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-3
changelog:
  - Resolves: rhbz#1652980 - mod_auth_mellon Cert files name wrong when
                             hostname contains a number


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-4
changelog:
  - Resolves: rhbz#1576719 - ECP flow not triggering, instead client access
                             secured resources without ECP authentication


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-5
changelog:
  - Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                             in logout url when using URLs with backslashes
                             [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-6
changelog:
  - Apply the patch from the previous commit
  - Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                             in logout url when using URLs with backslashes
                             [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-7
changelog:
  - Resolves: rhbz#1727789 - mod_auth_mellon fix for AJAX header name
                             X-Requested-With


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-8
changelog:
  - Resolves: rhbz#1731052 - CVE-2019-13038 mod_auth_mellon: an Open Redirect via
                             the login?ReturnTo= substring which could facilitate
                             information theft [rhel-7]


author: Honggang Li <honli@redhat.com> - 4.11.0-5
changelog:
  - Rebase to latest upstream release v4.11.0-5
  - mstconfig support for prio_tag and ttl_wa
  - Resolves: bz1694703


author: Matej Muzila <mmuzila@redhat.com> - 5:1.5.21-27
changelog:
  - Resolves #1388511 (System default CA bundle not set as default in compiled-in
    default or config)
  - Resolves #1388512 (mutt sends e-mail with broken "From" header, which has no
    host part)


author: Matej Muzila <mmuzila@redhat.com> - 5:1.5.21-29
changelog:
  - Fix IMAP header caching path traversal vulnerability
  - Resolves: #1608011
  - Resolves: CVE-2018-14355


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-39
changelog:
  - adjust logging of statfs (#1314610)
  - link libnetsnmptrapd against MYSQL LIBS (#1468084)
  - expand SNMPCONFPATH (#1514501)
  - remove date in mailheader (#1585940)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-44
changelog:
  - add support for glusterfs (#1316386)
  - change services to start after network-online.target (#1388118)
  - fix interface fadeout configuration (#1547355)
  - fix scanf pattern for ICMP stats (#1693547)
  - change buffer size in pass_common.c file (#1695363 and #1731357)
  - remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
  - fix for CVE-2018-18066 (#1638911)
  - add Counter64 support for UCD-SNMP-MIB (#1703752)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.57
changelog:
  - rpc.gssd: truncates 32-bit UIDs/GIDs to 16 bits architectures (bz 1602836)
  - Added back lockd vars to nfs-utils_env.sh and sysconfig (bz 1413272)
  - Document nfs v4 mounts will use Kerberos we available (bz 1334510)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.63
changelog:
  - nfs.conf: Fixed manage-gids option typo (bz 1677403)
  - sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
  - Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
  - nfs-server: Use reload not restart to start gssproxy (bz 1644169)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-14
changelog:
  - Resolves: rhbz#1288429 - /etc/tmpfiles.d/nss-pam-ldapd.conf shipped when
                             /etc/tmpfiles.d is reserved for the local
                             administrator


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-15
changelog:
  - Resolves: rhbz#1204202 - fix doc to describe actual uri format in
                             nslcd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-16
changelog:
  - Resolves: rhbz#1151675 - NSLCD WRAPS LDAP USER UIDNUMBER > 2^31 SO UID
                             IS WRONG (AND A NEGATIVE NUMBER)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-18
changelog:
  - Resolves: rhbz#1612543 - Password expiration notification is not sent if
                             the LDAP user doesn't have the objectClass shadowAccount.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-20
changelog:
  - Resolves: rhbz#1714763 - [RHEL7] Correct startup dependencies for cgcred service for nslcd/LDAP clients


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-21
changelog:
  - Resolves: rhbz#1618558 - AD authentication on RHEL using nslcd fails
                             with error "pwdLastSet: password changed in the
                             future"


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-22
changelog:
  - Do not enable the password expiration controls by default
  - Document the option and its default
  - Resolves: rhbz#1612543 - Password expiration notification is not sent
                             if the LDAP user doesn't have the objectClass
                             shadowAccount.


author: Ade Lee <alee@redhat.com> - 1.0.1-10
changelog:
  - Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch
  - reverted the previous change.  ppc64le now removed from ExcludeArch


author: Ade Lee <alee@redhat.com> 1.0.2-1
changelog:
  - Allow passwords to be retrieved post-init phase
  - Fix null termination issue on returned stored passwords


author: Dogtag Team <pki-devel@redhat.com> 1.0.5-1
changelog:
  - Resolves: rhbz #1509040 - nuxwdog spec file has outdated
    source for tarballs (dmoluguw)
  - Rebase to upstream nuxwdog 1.0.5-1


author: Sinny Kumari <skumari@redhat.com> - 3.10.0-1
changelog:
  - Rebase to 3.10.0
  - Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
  - Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
  - Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0


author: Than Ngo <than@redhat.com> - 3.11.0-1
changelog:
  - Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
  - Resolves: #1641027 - enhanced IBM z14 functions
  - Resolves: #1641026 - support m_*Single functions from ep11 lib
  - Resolves: #1641025 - rebase to 3.11.0
  - Resolves: #1519386 - use CPACF hashes in ep11 token
  - Resolves: #1373833 - lock file directory is %ghost now


author: Than Ngo <than@redhat.com> - 3.11.0-3
changelog:
  - Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key


author: Matěj Týč <matyc@redhat.com> - 1.2.17-1
changelog:
  - Rebased to the 1.2.17 upstream release (#1564900).
  - Fixed the offline scanning (#1547107, #1556988).
  - HTML Guide user experience improvements.
  - New options in HTML report "Group By" menu.
  - oscap-ssh supports --oval-results.
  - For more news, see https://github.com/OpenSCAP/openscap/releases/tag/1.2.17


author: Jan Černý <jcerny@redhat.com> - 1.2.17-3
changelog:
  - Fix unwanted recursion into mounted remote filesystems (#1655943)
  - Evaluate SCAP 1.3 datastreams without downloading remote data (#1709423)


author: Matěj Týč <matyc@redhat.com> - 1.2.17-6
changelog:
  - Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
  - Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).


author: Fabiano Fidêncio <fidencio@redhat.com> - 20190805-1
changelog:
  - Resolves: rhbz#1737367 - Update to latest upstream release
  - Resolves: rhbz#1737369 - Add 7.8 to the osinfo-db which will be used on 7.8


author: Fabiano Fidêncio <fidencio@redhat.com> - 20190805-2
changelog:
  - Resolves: rhbz#1750807 - Fedora/RHEL/CentOS JeOS kickstart files for
                             unattended installation are broken


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-14
changelog:
  - pam_unix: add no_pass_expiry option for ignoring password
    expiration in crond and sshd with public key authentication
  - add manual page for environment(5) (#1110257)
  - pam_loginuid: log if auditd not detected
  - always ignore audit error when -EPERM is returned (#1287800)
  - pam_lastlog: fix possible NULL dereference when localtime fails (#1313537)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-19
changelog:
  - pam_access: (group) match syntax is prioritized over network@netgroup
    match (#1358881), add support for additional /etc/security/access.d/*.conf
    files, improve documentation (#1421735)
  - pam_lastlog: fix pt_BR translation (#1185697)
  - pam_faillock: support admin_group with users equivalent to root in
    faillock handling (#1285550)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-23
changelog:
  - pam_get_authtok_verify: ensure no double verification happens
  - manual page fixes for pam_tty_audit and pam_wheel
  - pam_unix: lower the excessive maximum number of closed fd descriptors
    when spawning handlers
  - pam_loginuid: do not prevent login in unprivileged containers


author: Tomas Mraz <tmraz@redhat.com> 0.78.99-1
changelog:
  - use better (auditable) libselinux calls for checking
    the access to passwd (#518268)
  - add support for the -e option as seen on Debian passwd
  - make the binary PIE and full RELRO (#784483)


author: Jiri Kucera <jkucera@redhat.com> - 0.79-5
changelog:
  - Backport ca46cac (allow passwords longer than 79 characters)
    Backport Steve Grubb's patches
    - stop double auditing, use appropriate record types, update op field in
      audit events, don't audit status check, fix password aging logging
    Backport 02d4478 (better document -S option)
    Fix URL and Source tags
    Resolves: #1276570, #1489086, #1638105, #1145256, #1472567


author: Jiri Kucera <jkucera@redhat.com> - 0.79-6
changelog:
  - Fix incorrect -S output when password field in /etc/passwd is empty but the
    password information in /etc/shadow is set
    Resolves: #1686436


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-30
changelog:
  - semanage/seobject: Fix listing boolean values (#1391605)
  - sepolicy: Make policy files sorting more robust
  - semanage: Fix setting alternative policy store (#1558033)
  - semanage: Load a store policy and set the store SELinux policy root
  - sepolicy: Add sepolicy.load_store_policy(store)
  - semanage: import sepolicy only when it's needed
  - semanage: move valid_types initialisations to class constructors
  - semanage/seobject: Fix indentation issues
  - scripts/fixfiles: Do not fail on file_contexts.local (#1647714)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-31
changelog:
  - semanage: Start exporting "ibendport" and "ibpkey" entries (#1657196)
  - semanage: Do not show "None" levels when using a non-MLS policy (#1400482)
  - semanage: Include MCS/MLS range when exporting local customizations (#1400482)


author: Kamil Dudka <kdudka@redhat.com> - 5.0.2-30
changelog:
  - fix stack-based buffer overflow in utils.c:checkmailpath() (CVE-2018-1100)
  - fix stack-based buffer overflow in gen_matches_files() (CVE-2018-1083)
  - fix stack-based buffer overflow in exec.c:hashcmd() (CVE-2018-1071)
  - avoid crash when copying empty hash table (CVE-2018-7549)
  - fix buffer overrun in xsymlinks (CVE-2017-18206)
  - fix NULL dereference in cd (CVE-2017-18205)
  - fix buffer overflow when scanning very long path for symlinks (CVE-2014-10072)
  - fix buffer overflow for very long fds in >& fd syntax (CVE-2014-10071)


author: Kamil Dudka <kdudka@redhat.com> - 5.0.2-34
changelog:
  - make the chaselinks option work again (#1729997)
  - fix off-by-one error in buffer allocation to avoid stack smashing (#1722486)


