# changelog

author: Sumit Bose <sbose@redhat.com> - 0.8.1-6
changelog:
  - Couldn't set service principals on computer account [#1608212]
  - additional fix #1547014 and #1593240


author: Sumit Bose <sbose@redhat.com> - 0.8.1-7
changelog:
  - use autosetup macro to simplify patch handling
  - fixed rpmlint warnings in the spec file
  - join failed if hostname is not FQDN [#1649868]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-8
changelog:
  - Various updates for RHEL-7.7
  - many adcli-krb5-????? directories are created /tmp [#1588596]
  - adcli exports kerberos ticket with old kvno [#1642546]
  - [RFE] Have `adcli join` work without FQDN in `hostname` output [#1595911]
  - Improve handling of service principals [#1644311]
  - [RFE] adcli command with --unix-* options doesn't update
    values in UnixAttributes Tab for user [#1337489]
  - [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187]
  - [RFE] Need an option for adcli command which will show domain join status. [#1622583]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-9
changelog:
  - Fixes for RHEL-7.7 updates
  - additional patch for [RFE] adcli join should preserve SPN added by adcli
    preset-computer [#1630187]
  - new patches for many adcli-krb5-????? directories are created /tmp [#1588596]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-10
changelog:
  - adcli is failing with "Couldn't add keytab entries: FILE:/etc/krb5.keytab:
    Cannot allocate memory" [1665162]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-11
changelog:
  - Fixes and improvements for RHEL-7.8
  - Issue is that with arcfour-hmac as first encryption type in the config ... [#1683745]
  - adcli update --add-samba-data does not work as expected [#1738573]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-14
changelog:
  - Fixes for RHEL-7.9
  - Update' adcli update --add-samba-data ' info under correct section in man adcli [#1774622]
  - [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1802258]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-15
changelog:
  - More fixes for RHEL-7.9
  - No longer able to delete computer from AD using adcli [#1840752]
  - adcli: presetting $computer in $domain domain failed: Cannot set computer
    password: Authentication error [#1762633]


author: Dominic Cleal <dcleal@redhat.com> - 1.4.0-1
changelog:
  - Rebase to Augeas 1.4.0
  - Revert some changes for better compatibility with 1.1.0-17:
    * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
    * Dnsmasq: revert splitting of address/server options
    * Dovecot: restore quotes within values
    * Jaas: revert semicolon and line break changes
    * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
    * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
    * Syslog: restore tree without protocol for UDP hosts
    * UpdateDB: keep Simplevars to load config by default


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-4
changelog:
  - Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
  - Skip testSaveNoPermission when running as root (RHBZ#1269817)
  - Chrony: allow signed numbers (RHBZ#1302017)
  - Krb5: support includedir (RHBZ#1406111)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-5
changelog:
  - Cgconfig: allow fperm & dperm in admin & task (RHBZ#1325741)
  - Grub: handle top-level "boot" directive (RHBZ#1484261)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-9
changelog:
  - Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
    (RHBZ#1653766)
  - Anaconda: new lens (RHBZ#1657189)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-10
changelog:
  - Krb5: support realms that start with numbers; add more pkinit_* options;
    improve handling of [dbmodules]; allow include/includedir directives
    everywhere (RHBZ#1670420)
  - Grub: handle '+' in kernel command line options (RHBZ#1758357)


author: Ian Kent <ikent@redhat.com> - 5.0.7-104
changelog:
  - bz1442063 - Parameter ghost not documented in the man pages
    - document ghost option in auto.master man page.
  - Resolves: rhbz#1442063


author: Ian Kent <ikent@redhat.com> - 5.0.7-105
changelog:
  - bz1680582 - Sanitize autofs logging
    - make expire remaining log level debug.
  - Resolves: rhbz#1680582


author: Ian Kent <ikent@redhat.com> - 5.0.7-106
changelog:
  - bz1685804 - autofs doesn't expand macros in amd map selectors
    - workaround getaddrinfo(3) ai_canonname bug.
    - improve hostname lookup error logging.
    - allow period following macro in selector value.
    - fix macro expansion in selector values.
  - Resolves: rhbz#1685804


author: Ian Kent <ikent@redhat.com> - 5.0.7-107
changelog:
  - bz1734057 - automount segfaults if a bad hosts entry is added
    in /etc/auto.master
    - fix reset flex scan buffer on init.
  - Resolves: rhbz#1734057


author: Ian Kent <ikent@redhat.com> - 5.0.7-108
changelog:
  - bz1728914 - getmntent returns additional "-hosts" entries when
    automounter is used with "hosts" map
    - remove unused function has_fstab_option().
    - remove unused function reverse_mnt_list().
    - remove a couple of old debug messages.
    - fix amd entry memory leak.
    - fix unlink_mount_tree() not umounting mounts.
    - add ignore mount option.
    - use ignore option for offset mounts as well.
    - add config option for "ignore" mount option
    - use bit flags for autofs mount types in mnt_list.
    - use mp instead of path in mnt_list entries.
    - always use PROC_MOUNTS to make mount lists.
    - add glibc getmntent_r().
    - use local getmntent_r in table_is_mounted().
    - refactor unlink_active_mounts() in direct.c.
    - don't use tree_is_mounted() for mounted checks.
    - use single unlink_umount_tree() for both direct and indirect mounts.
    - move unlink_mount_tree() to lib/mounts.c.
    - use local_getmntent_r() for unlink_mount_tree().
    - use local getmntent_r() in get_mnt_list().
    - use local getmntent_r() in tree_make_mnt_list().
  - Resolves: rhbz#1728914


author: Ian Kent <ikent@redhat.com> - 5.0.7-109
changelog:
  - bz1728914 - getmntent returns additional "-hosts" entries when
    automounter is used with "hosts" map
    - fix missing initialization of autofs_point flags.
  - Related: rhbz#1728914


author: Ian Kent <ikent@redhat.com> - 5.0.7-110
changelog:
  - bz1806514 - strictexpire option not set for offset mounts
    - also use strictexpire for offsets.
  - Resolves: rhbz#1806514


author: Ian Kent <ikent@redhat.com> - 5.0.7-111
changelog:
  - bz1806514 - strictexpire option not set for offset mounts
    - fix patch not applied.
  - Related: rhbz#1806514


author: Ian Kent <ikent@redhat.com> - 5.0.7-112
changelog:
  - bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
    - fix trailing dollar sun entry expansion.
  - Resolves: rhbz#1818664


author: Don Zickus <dzickus@redhat.com> 5.41-1
changelog:
  - Update to 5.41
  - obexd fixes to prevent crashes
  - add /etc/bluetooth/main.conf config file
  Resolves: #1313363, #1336476, #1338895


author: David Arcari <darcari@redhat.com> 5.44-1
changelog:
  - Update to 5.44
  - Ship btattach tool
  - Configure systemctl settings for bluez-obex correctly
  - Add Provides: bluez-obexd
  Resolves: #1434581, #1401501


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]
changelog:
  - [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
  - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
  - [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
  - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
  - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
  - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
  - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
  - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
  - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
  - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
  - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
  - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
  - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]
changelog:
  - [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
  - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
  - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
  - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
  - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
  - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
  - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
  - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
  - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
  - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
  - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
  - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370]
  - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]
changelog:
  - [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
  - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
  - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
  - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
  - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
  - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
  - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]
changelog:
  - [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
  - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
  - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
  - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
  - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
  - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
  - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
  - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
  - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
  - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
  - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]
changelog:
  - [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
  - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
  - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
  - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
  - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]
changelog:
  - [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
  - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
  - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
  - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]
changelog:
  - [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
  - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
  - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]
changelog:
  - [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
  - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
  - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
  - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-5
changelog:
  - Add Requires on psmsic for killall in post script (#1458890)
  - upstream project migrated from fedorahosted.org to pagure.io (#1501723)
  - Strip CR/LF from passwords read from a file (#1545935)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-8
changelog:
  - Disable iterate-10 test which fails intermitently (#1596161)
  - Add BuildRequires for running autoreconf


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-9
changelog:
  - Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
    variables to helpers. The root cause was a bug in IPA (#1596161)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-12
changelog:
  - Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
    man page (#1651368)
  - SCEP: Don't set message=<ca ident> with GetCaps and GetCACert (#1608781)
  - SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
  - Document owner and permission parameters to getcert (#1549585)


author: Dave Anderson <anderson@redhat.com> - 7.2.3-2
changelog:
  - Work around rhel-7.6 s390/s390x ptrace.h incompatiblity FTBFS issue
  - Rebase to github commit 46d21219
    Resolves: rhbz#1559460


author: Dave Anderson <anderson@redhat.com> - 7.2.3-5
changelog:
  - Rebase to github commits b9d76838 to c79a11fa
    Resolves: rhbz#1559460
  - Fix ppc64/ppc6le stacksize calculation
    Resolves: rhbz#1589685


author: Dave Anderson <anderson@redhat.com> - 7.2.3-7
changelog:
  - Support ppc64 increased VA range
  - Fix ppc64 "bt" command failure reporting invalid NIP value
    Resolves: rhbz#1617936


author: Dave Anderson <anderson@redhat.com> - 7.2.3-8
changelog:
  - Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. 
    Resolves: rhbz#1617936


author: Dave Anderson <anderson@redhat.com> - 7.2.3-9
changelog:
  - Alternate list loop detection option
    Resolves: rhbz#1595389
  - Readline library tab completion plugin
    Resolves: rhbz#1656165


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44
changelog:
  - 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
  - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
  - 1753809 - Settings in ~/.cups/client.conf aren't used


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46
changelog:
  - 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue


author: Tim Waugh <twaugh@redhat.com> - 1.0.35-21
changelog:
  - Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
    CVE-2015-3258, CVE-2015-3279).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28
changelog:
  - 1816109 - Queues are not cleaned up after stopping cups-browsed
  - 1811190 - cups-browsed leaks memory


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-124
changelog:
  - Add 0250-RHBZ-1610867-rescan-change.patch
    * Update multipath devices on change events.
  - Add 0251-RHBZ-1614011-discovery-timeout.patch
  - Add 0252-RHBZ-1623595-cmd-error-status.patch
  - Add 0253-RHBZ-1618549-mix-hw-handler.patch
    * Don't retain attached hw handler when different hw handlers are
      attached to different paths
  - Add 0254-RHBZ-1635819-fix-mpathpersist-crash.patch
  - Add 0255-RHBZ-1638651-marginal-path.patch
    * backport marginal_path options from upstream
  - Resolves: bz #1610867, #1614011, #1618549, #1623595, #1635819, #1638651


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125
changelog:
  - Modify 0250-RHBZ-1610867-rescan-change.patch
    * Fix memory Leak
  - Modify 0255-RHBZ-1638651-marginal-path.patch
    * Fix NULL dereference
  - Refresh 0252-RHBZ-1623595-cmd-error-status.patch
  - Resolves: bz #1610867, #1638651


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127
changelog:
  - Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
    * retry adding paths if they couldn't be opened initially
  - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
    * don't check if dm devices are multipath paths
  - Add 0258-RHBZ-1634183-ANA-prioritizer.patch
    * Add NVMe ANA path prioritizer
  - Resolves: bz #1634183, #1672175, #1679556


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128
changelog:
  - Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
    * minor change
  - Add 0259-RHBZ-1701604-fix-nr-active.patch
    * recalculate the number of active paths whenever a path is checked
  - Add 0260-RHBZ-1634183-prio-fixes.patch
  - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
    * ignore blacklisted paths in mpathpersist
  - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
    * allow forced reloads even if there are no reusable paths
  - Add 0263-RHBZ-1686708-nvme-hcil.patch
    * make nvme ids work like in upstream
  - Add 0264-RHBZ-1699441-de-series-config.patch
  - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129
changelog:
  - Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
    * only grab path information from necessary devices, and allow batch files.
  - Add 0266-RHBZ-1696817-fix-emc-checker.patch
    * fix detection of inactive snapshots
  - Add 0267-RHBZ-1661156-powermax-config.patch
  - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
    * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
  - Resolves: bz #1661156, #1696817, #1721855


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130
changelog:
  - Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
    * Fix issues in the mpathpersist speedup code
  - Resolves: bz #1721855


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131
changelog:
  - Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
    * The fix for 1721855 broke 1714506.
  - Resolves: bz #1714506


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132
changelog:
  - Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
    * Remove the 256 device limit, when searching loop devices with kpartx
  - Resolves: bz #1804420


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133
changelog:
  - Add 0270-RHBZ-1775481-segfault-fix.patch
    * Fix segfault related to missing dm device tables
  - 0271-RHBZ-1806197-mpathconf-typo.patch
  - Resolves: bz #1775481, #1806197


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc6
changelog:
  - Don't open devices as writeable if --clear-needs-check-flag is not set.
  - Fix cache metadata format version 2 superblock packing.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.2-1
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - Fix segfault when dump tools are given a tiny metadata file.
  - Fix -V exiting with 1.
  - Fix thin_check when running on XML dump instead of binary data.
  - Speed up free block searches.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.3-1
changelog:
  - Update to latest bugfix and documentation update release.
  - *_restore tools wipe superblock as a last resort.
  - Add thin_check --override-mapping-root.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-1
changelog:
  - dovecot updated to 2.2.36, pigeonhole to 0.4.24
  - fixed dsync not replicating sieve scripts (#1419426)
  - fix plugins incorrectly reporting epipe errors(#1489943)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-3
changelog:
  - fix global ACL directory configuration search path (#1630380)
  - update first/last_valid_gid range patch (#1630409)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-5
changelog:
  - fix CVE-2019-3814: improper certificate validation (#1674369)
  - fix CVE-2019-7524: buffer overflow in indexer-worker process resulting in privilege 
    escalation (#1700398)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-6
changelog:
  - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
    when scanning data in quoted strings, leading to out of bounds heap
    memory writes (#1741787)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-7.1
changelog:
  - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866752)
  - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866757)
  - fix CVE-2020-12674 crash due to assert in RPA implementation (#1866764)


author: Lukas Nykryn <lnykryn@redhat.com> - 033-560
changelog:
  - fips: removed false-positive 'FATAL: Module xxx not found' error message when kernel provides a generic algo for module
  - fips: ensure fs module for /boot is installed
  - iscsi: always popd, even if there is no iscsi device
  - Harden dracut against BASH_ENV environment variable
  - fips: check fips integrity just before mounting local filesystems in /sysroot


author: Lukas Nykryn <lnykryn@redhat.com> - 033-571
changelog:
  - Drop dependency on bridge-utils
  - dracut.sh: disable lsinitrd logging when quiet
  - netlib: fix botched backport


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-10
changelog:
  - libext2fs: don't ignore fsync errors (#1405049)
  - Fix nroff macro issue in chattr man page (#1429213)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-11
changelog:
  - libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
  - tune2fs: edit dire warning about check intervals (#1433233)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-13
changelog:
  - e2fsck: warn if checkinterval and broken_system_clock both set (#1365594)
  - e2fsprogs: fail to open 1k block size ext4 with bigalloc,meta_bg,^resize_inode (#1448019)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-14
changelog:
  - Various fixes and improvements (#1682935)
  - Automatically enable meta_bg to avoid failure when creating huge fs with small bs (#1608635)
  - don't ignore fsync errors in filefrag (#1451185)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-18
changelog:
  - fix out-of-bounds write on corrupted fs (#1797731)
  - fix out-of-bounds write on corrupted fs (#1768710)
  - fix e2fsprogs creating corrupted meta image (#1711880)
  - fix typo in ext4 man page (#1720130)
  - provide easy metod for creating compatible rhel6 fs (#1780277)
  - better handling of trivial dir link count problem (#1820048)


author: Jack Magne <jmagne@redhat.com> - 1.1.0-35
changelog:
  - Resolves: Bug #1176241 -  .redhat dir does not have the same permissions during manual and auto launch of ESC Client


author: Jack Magne <jmagne@redhat.com> - 1.1.0-36
changelog:
  - Resolves: Bug #1176241 -  .redhat dir does not have the same permissions during manual and auto launch of ESC Client
  - Minor additional fix.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-37
changelog:
  - Resolves: Bug #885898 - ESC incorrectly display Issuer information for a CAC smart card
  - Resolves: Bug 1070802 - missing -fstack-protector-strong


author: Jack Magne <jmagne@redhat.com> - 1.1.0-40
changelog:
  - Resolves: Bug #1466949, Relate: Bug #1523946 - [ppc64] ld switch to relro breaks GDB. This caused an rpmdiff failure.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-42
changelog:
  - Related: Bug# 1358500 - Segmentation fault happens when escd runs with a NULL display.
  - Resolve changelog entry error.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-43
changelog:
  - Resolves: Bug# 1688904 - ESC - HTTP GET Requests incorrectly Being Sent To TPS for Token Operations.


author: Marek Kasik <mkasik@redhat.com> - 3.28.2-3
changelog:
  - Fix patch fixing crash in EvMediaPlayerKeys
  - Fix building of comics backend with libarchive 3.1.2
  - Resolves: #1567186


author: Marek Kasik <mkasik@redhat.com> - 3.28.2-4
changelog:
  - Change requires as requested by RPMDiff
  - Check returned size for negative value (CovScan)
  - Resolves: #1567186


author: Marek Kasik <mkasik@redhat.com> - 3.28.2-8
changelog:
  - Do not free EvDocumentInfo in ev_window_save_print_settings(),
  - it is freed in EvDocument's destructor
  - Resolves: #1541358


author: Milan Crha <mcrha@redhat.com> - 3.28.2-1
changelog:
  - Update to 3.28.2
  - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
  - Resolves: #1575495


author: Milan Crha <mcrha@redhat.com> - 3.28.5-4
changelog:
  - Add patch for RH bug #1392567 (Sync CategoryList with mail Labels)
  - Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-30
changelog:
  - fencing: only use inetX_only parameters for SSH based agents and
    fence_zvmip
    Resolves: rhbz#1722004


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31
changelog:
  - fence_compute/fence_evacuate: fix region_name content type and
    project shortopt in usage text and project-domain shortopt
    Resolves: rhbz#1760203
  - fence_rhevm: add cookie support
    Resolves: rhbz#1763675
  - fencing: improve stdin quote parsing
    Resolves: rhbz#1769784


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34
changelog:
  - fence_aws: improve parameter logic to allow setting region parameter
    while using credentials from ~/.aws/config
    Resolves: rhbz#1673468
  -


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39
changelog:
  - fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
    and avoid failing when hitting it during the monitor-action
    Resolves: rhbz#1654058


author: Ryan McCabe <rmccabe@redhat.com> - 0.3.2-13
changelog:
  - fence_virtd: Make the libvirt backend survive libvirtd restarts
    Resolves: rhbz#1384181
  - fence_xvm/fence_virt: Add support for the validate-all status
    Resolves: rhbz#1447700


author: Jan Kaluza <jkaluza@redhat.com> 5.11-32
changelog:
  - fix #1278737 - add support for Java 1.7 and 1.8
  - fix #1281723 - show full executable name for core
  - fix #1271636 - add support for detection of Python 2.7 byte-compiled files
  - fix #1278768 - comment out too-sensitive Pascal magic


author: Adam Williamson <awilliam@redhat.com> - 3.0-3
changelog:
  - Re-enable ceph deps on ppc64 (it's building again)
  - Disable RDMA support on 32-bit ARM (#1484155)


author: Eric Garver <egarver@redhat.com> - 0.6.3-2
changelog:
  - backport recent upstream stable fixes
  - backport fix to enable IP forwarding only if toaddr specified


author: Eric Garver <egarver@redhat.com> - 0.6.3-3
changelog:
  - backport recent upstream stable fixes
  - backport fix --remove-rules deleting all direct rules
  - backport fix unable to delete rich rule forward-port
  - backport fix forward-port for external zone hijacking internal zone
  - backport fix testsuite iptables locking


author: Parag Nemade <pnemade AT redhat DOT com> - 20120731b-9
changelog:
  - Added cflags -Wstrict-aliasing
  - Fixed some compile-time errors from invalid Makefile rules
  - Fixed bogus date in changelog


author: Parag Nemade <pnemade AT redhat DOT com> - 20120731b-10
changelog:
  - Revert previously added -Wstrict-aliasing cflags
  - We actaully need -fno-strict-aliasing (rh#903288)
  - Remove %defattr() (rh#1003518)
  - fontforge.xml should not be executable (rh#1003518)


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-5
changelog:
  - Refer to correct package version in configuration comments for Bug#1458746
    (CVE-2017-9148) fix.
    Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-6
changelog:
  - Avoid race condition when creating session cache file
    Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-7
changelog:
  - Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                          to improper output buffer size check in make_secret()
  - Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                          fr_dhcp_decode() when decoding option 63
  - Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                          data2vp_wimax()
  - Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                          exhaustion with 'concat' attributes
  - Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                          dhcp_attr2vp()
  - Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                          fr_dhcp_decode_suboptions()


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-8
changelog:
  - Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
  - Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                         data2vp_wimax()


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-9
changelog:
  - Fix double free in rlm_sql acct_redundant
    Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                          unknown value" when using module sql rlm_sql


author: Alexander Scheel <ascheel@redhat.com> - 3.0.13-10
changelog:
  - Fixes two EAP-PWD security issues
    Resolves: bz#1699414 authentication bypass with an invalid curve attack
    Resolves: bz#1699419 fake authentication using reflection


author: Alexander Scheel <ascheel@redhat.com> - 3.0.13-11
changelog:
  - Fixes logrotate, EAP-PWD vulnerability
    Resolves: bz#1719368 privilege escalation due to insecure logrotate configuration
    Resolves: bz#1751796 eap-pwd: Information leak due to aborting when needing more than 10 iterations


author: Alexander Scheel <ascheel@redhat.com> - 3.0.13-15
changelog:
  - Fixes EAP-PWD: DoS issues due to multithreaded BN_CTX access
    Resolves: bz#1818808

    * Fri Feb 7 2020 Alexander Scheel <ascheel@redhat.com> - 3.0.13-14
  - Fixes receiving of multiple RADIUS packets under load
    Resolves: bz#1630684


author: Ondrej Holy <oholy@redhat.com> - 1.0.2-11
changelog:
  - Use boolean types defined stdbool.h (#1404575)
  - Prevent stucked keys on focus out and unmap events (#1415069)
  - Fix crashes when copying images (#1417536)
  - Enable TLS 1.1 connections and later (#1312967)


author: Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4
changelog:
  - CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
  - CVE-2020-11523: Fix integer overflow in region.c (#1837622)
  - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)


author: Keith Seitz <keiths@redhat.com> - 7.6.120.el7
changelog:
  - Don't classify struct members as filenames (numerous, RH BZ 1815690)
  - Fix commas in source paths bugs (Keith Seitz, RH BZ 1779246)


author: Andrew Price <anprice@redhat.com> - 3.1.10-3
changelog:
  - libgfs2: Issue one write per rgrp when creating them
  - mkfs.gfs2: Fix resource group alignment issue
  - mkfs.gfs2: Free unnecessary cached pages, disable readahead
    Resolves: rhbz#1440269


author: Andrew Price <anprice@redhat.com> - 3.1.10-5
changelog:
  - Update URL in spec file
    Resolves: rhbz#1501738
  - fsck.gfs2: Make -p, -n and -y conflicting options
    Resolves: rhbz#1507091


author: Andrew Price <anprice@redhat.com> - 3.1.10-9
changelog:
  - fsck.gfs2: Don't check fs formats we don't recognise
  - libgfs2: Fix pointer cast byte order issue
    Resolves: rhbz#1616389


author: Andrew Price <anprice@redhat.com> - 3.1.10-10
changelog:
  - libgfs2: Use sizeof for 'reserved' fields in ondisk.c
  - fsck.gfs2: Disambiguate 'check_data'
  - gfs2-utils: Accept a char* instead of a buffer head in gfs2_check_meta
  - fsck.gfs2: Disambiguate check_metalist
  - fsck.gfs2: Fix segfault in build_and_check_metalist
  - fsck.gfs2: Retain context for indirect pointers in ->check_metalist
  - fsck.gfs2: Clear bad indirect block pointers when bitmap meets expectations
    Resolves: rhbz#1487726


author: Andrew Price <anprice@redhat.com> - 3.1.10-11
changelog:
  - gfs2_jadd: Handle out-of-space issues
  - gfs2_jadd: error handling overhaul
    Resolves: rhbz#1837640


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-29
changelog:
  - Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
  - Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-31
changelog:
  - Added security fixes for:
    - CVE-2018-16509 (bug #1621158)
    - CVE-2018-15910 (bug #1621160)
    - CVE-2018-16542 (bug #1621382)


author: Martin Osvald <mosvald@redhat.com> - 9.07-32
changelog:
  - Remove as many non-standard operators as possible to make the codebase
    closer to upstream for later CVEs
  - Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
    checker (699659)
  - Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
    in temp file handling to disclose contents of files (699658) 
  - Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
    issues (699657)
  - Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
    type checking (699660)
  - Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
    CVE-2018-16509
  - Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
  - Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
    access in the aesdecode operator (699665)
  - Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
    privilege" checking when running out of stack during exception handling
  - Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
    security check in zsetdevice function in psi/zdevice.c
  - Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
    pagedevice replacement (699664)
  - Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
    exception table
  - Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
    can leak operator arrays
  - Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
    can leak operator arrays (incomplete fix for CVE-2018-17183)
  - Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
    allows a sandbox protection bypass
  - Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
    setpattern (700141)
  - Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
    smooth shading object (Error: /rangecheck in --run--)
  - Resolves: #1661210 pdf2ps reports an error when reading from stdin
  - Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
    copydevice handling (699661)
  - Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
    psi/zdevice2.c (700153)
  - Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
    psi/zicc.c
  - Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
    psi/zfjbig2.c (700168)
  - Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
    pseudo-operators must themselves be pseudo-operators
  - Resolves: #1670443 - ghostscript: Regression: double comment chars
    '%' in gs_init.ps leading to missing metadata


author: Martin Osvald <mosvald@redhat.com> - 9.25-1
changelog:
  - Rebase to latest upstream version (bug #1636115)
  - Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
    protections for CVE-2019-6116
  - Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
    is available (700585)
  - Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
    is still accessible (700576)
  - Resolves: #1670443 - ghostscript: Regression: double comment chars
    '%' in gs_init.ps leading to missing metadata
  - fix for pdf2dsc regression added to allow fix for CVE-2019-3839


author: Martin Osvald <mosvald@redhat.com> - 9.25-3
changelog:
  - Resolves: #1737339 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)
  - Resolves: #1744009 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
  - Resolves: #1744013 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
  - Resolves: #1744004 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
  - Resolves: #1744229 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)


author: Arjun Shankar <arjun@redhat.com> - 2.17-308
changelog:
  - CVE-2019-19126: rtld: Check __libc_enable_secure before honoring
    LD_PREFER_MAP_32BIT_EXEC (#1775599)


author: Jakub Filak <jfilak@redhat.com> 0.3.4-1
changelog:
  - Do not use deprecated GObject API
  - Make gnome-abrt compatible with Python GObject < 3.7.2
  - Do not fail if there is no Problem D-Bus service
  - Make all labels selectable
  - Run xdg-open for problem directory nonblocking
  - Fix translations (rhbz#1044241)
  - Make problem list resizable
  - Make info about Reported state of problem more clear
  - Remove message about missing Bugzilla ticket
  - Fix a bug in SIGCHLD handler causing 100% CPU usage
  - Show "yes" in Reported field only if no URL is available
  - Load only the most recent reported to value
  - Check if Application has valid name in filter fn
  - Fix issues found by new pylint
  - Related: #1044241
  - Resolves: #1044569


author: Jakub Filak <jfilak@redhat.com> - 0.3.4-3
changelog:
  - Select multiple records to delete in gnome-abrt
  - Do not crash when a FileIcon can't be loaded
  - Resolves: #1048120, #1054089


author: Jakub Filak <jfilak@redhat.com> - 0.3.4-7
changelog:
  - Translation updates
  - Do not crash in case of a DBus timeout
  - Do not crash when testing availability of XServer
  - Resolves: #1178712, #1175662


author: Ernestas Kulik <ekulik@redhat.com> - 0.3.4-9
changelog:
  - Add patch to work around https://bugzilla.redhat.com/show_bug.cgi?id=1679314
  - Use 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Do-not-crash-when-a-FileIcon-cant-be-loaded.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0001-Do-not-crash-when-a-FileIcon-cant-be-loaded.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0002-Enable-multiple-problems-selection.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0002-Enable-multiple-problems-selection.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0003-Update-translations.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0003-Update-translations.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0004-Initialize-gnome_abrt-module-before-importing-its-su.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0004-Initialize-gnome_abrt-module-before-importing-its-su.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0005-Translation-updates.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0005-Translation-updates.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0006-Pull-the-newest-rhel7-translations.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0006-Pull-the-newest-rhel7-translations.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0007-Move-from-transifex-to-zanata.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0007-Move-from-transifex-to-zanata.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0008-Add-gettext-mappings-to-the-zanata-config.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0008-Add-gettext-mappings-to-the-zanata-config.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0009-translations-update-zanata-configuration.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0009-translations-update-zanata-configuration.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0010-Test-availability-of-XServer-in-C-wrappers.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0010-Test-availability-of-XServer-in-C-wrappers.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0011-Do-not-crash-in-case-of-a-DBus-timeout.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0011-Do-not-crash-in-case-of-a-DBus-timeout.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0012-Mark-Search-place-holder-text-for-translations.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0012-Mark-Search-place-holder-text-for-translations.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0013-Translation-updates.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0013-Translation-updates.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0014-Translation-updates.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0014-Translation-updates.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0015-views-Allow-reporting-non-reportable-problems.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0015-views-Allow-reporting-non-reportable-problems.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/gnome-abrt-0.3.4_dont_suggest_reporting_to_bugzilla.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m gnome-abrt-0.3.4_dont_suggest_reporting_to_bugzilla.patch --author "rpm-build <rpm-build>"


author: Ondrej Holy <oholy@redhat.com> - 1.30.3-1
changelog:
  - Update to 1.30.3
  - Disable nfs support (#1387270)
  - Revert desktop database scriplets
  - Resolves: #1386993, #1399343, #1306146, #1259746, #1344317


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-2
changelog:
  - Prevent spawning new daemons if outgoing operation exists (#1632960)
  - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7
changelog:
  - Fix: "Argument list too long" when using virt-v2v on Windows guest
    with French copy of Citrix installed
    related: rhbz#1145056


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8
changelog:
  - Tolerate corruption in some hives
    resolves: rhbz#1423436
  - Switch to using git to manage patches.


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.7.1-5
changelog:
  - Bump http-parser release number to avoid people pulling EPEL package instead
    of RHEL package
    Resolves: rhbz#1479471


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.1-6
changelog:
  - Resolves: rhbz#1666381 - CVE-2018-12121 http-parser: nodejs: Denial of
                             Service with large HTTP headers [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.1-7
changelog:
  - Resolves: rhbz#1666024 - CVE-2018-7159 http-parser: nodejs: HTTP parser
                             allowed for spaces inside Content-Length header
                             values [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.1-8
changelog:
  - Backport needed test fixes
  - Related: rhbz#1666024 - CVE-2018-7159 http-parser: nodejs: HTTP parser
                            allowed for spaces inside Content-Length header
                            values [rhel-7]


author: Sergio Corrreia <scorreia@redhat.com> - 2.7.1-8.1
changelog:
  - Resolves: CVE-2019-15605 http-parser: nodejs: HTTP request
                             smuggling using malformed Transfer-Encoding header


author: Caolán McNamara <caolanm@redhat.com> - 1.3.2-6
changelog:
  - Resolves: rhbz#573516 have hunspell require hunspell-en to ensure
    at least one dictionary exists


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.252-8.9
changelog:
  - Updated pci, usb, vendor ids and hwdb files
    Resolves: #1560493
  - Blacklisted sha{256,512}-mb modules
    Resolves: #1562114


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.252-9.5
changelog:
  - Fix URL for downloading hwdb files
  - Updated pci, usb, vendor ids and hwdb files
    Resolves: #1721908


author: Richard Brantley <rbrantle@redhat.com> - 3.0.2-2
changelog:
  - Resolves BZ1498650, BZ1500008, BZ1501545, BZ1501552, BZ1501556, BZ1501561, BZ1501565, BZ1501566
  - Fixes version migration logic
  - Fixes symlink issues to old binary
  - Fixes short ID analysis for images and containers
  - Fixes Docker library detection
  - Fixes image and container detection
  - Fixes registration execution flow
  - Fixes --version flag to print to stdout and include additional versioning information
  - Includes Insights Core 3.0.3-1


author: Kyle Lape <klape@redhat.com> - 3.0.3-1
changelog:
  - RHEL 7 RPM now uses systemd service and timer instead of cron
  - Addition of IO and CPU cgroup constraints
  - Fixed memory cgroup constraint


author: Link Dupont <link@redhat.com> - 3.0.14-1
changelog:
  - Removed printing to stdout in cron script (RHBZ#1828778)
  - Add deprecation message when running legacy redhat-access-insights (RHCLOUD-5409)
  - Update systemd timer to use timers.target (RHBZ#1798373)
  - Fix an issue updating motd.d on relevant systems (RHCLOUD-6144)
  - Update shipped core to version 3.0.161 (RHCLOUD-4457)
  - Enable automatic checking for advisor results (RHCLOUD-4558)
  - Ensure dependency on coreutils for timeout (RHCLOUD-5131)
  - Build system converted to autotools (RHCLOUD-4333)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-2.git6366fa7a.el7
changelog:
  - ipxe-Enable-IPv6-protocol-in-non-QEMU-builds.patch [bz#1350167]
  - Resolves: bz#1350167
    (ipxe: enable IPV6)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-3.git6366fa7a.el7
changelog:
  - ipxe-Add-pci_find_next_capability.patch [bz#1242850]
  - ipxe-Add-virtio-1.0-constants-and-data-structures.patch [bz#1242850]
  - ipxe-Add-virtio-1.0-PCI-support.patch [bz#1242850]
  - ipxe-Add-virtio-net-1.0-support.patch [bz#1242850]
  - ipxe-Renumber-virtio_pci_region-flags.patch [bz#1242850]
  - ipxe-Fix-virtio-pci-logging.patch [bz#1242850]
  - Resolves: bz#1242850
    (Ipxe can not recognize "network device" when enable virtio-1 of virtio-net-pci)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-4.git6366fa7a.el7
changelog:
  - ipxe-Send-TCP-keepalives-on-idle-established-connections.patch [bz#1322056]
  - ipxe-enable-e1000e-rom.patch [bz#1361534]
  - Resolves: bz#1322056
    (ipxe freeze during HTTP download with last RPM)
  - Resolves: bz#1361534
    (RFE: Integrate e1000e implementation in downstream QEMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-5.git6366fa7a.el7
changelog:
  - ipxe-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1316329]
  - Resolves: bz#1316329
    ([RFE] Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170123-2.git4e85b27.el7
changelog:
  - ipxe-Support-VIRTIO_NET_F_IOMMU_PLATFORM.patch [bz#1467887]
  - Resolves: bz#1467887
    (iommu platform support for ipxe)


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-12
changelog:
  - 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
  - 1624670 Login negotiation failed due to CHAP_N values do not match
            (rec update race condition)


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-17
changelog:
  - 1518367 boot from iSCSI not establishing all sessions persistently
  - 1667965 A manual restart of iscsi.service modifies records node.startup value


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-18
changelog:
  - 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-3
changelog:
  - Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
    decode/encode process alters original data (cfu)
  - Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.7-2
changelog:
  - Bugzilla #1747967 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.7-3
changelog:
  - Bugzilla #1710105 - JSS: add RSA PSS support (jmagne)
  - Bugzilla #1796642 - JSS -- remove hardcoded native library
    /usr/lib{64}/jss/libjss4.so (ascheel)


